Privacy Policy
TechnoNet Sdn Bhd ("TechnoNet", "we", "us") operates EMAS Gold ERP ("Gold ERP"), an inventory, point-of-sale and reporting system for gold shops, made up of an Android tablet app and a hosted service. This Privacy Policy explains how we collect, use and protect personal data in connection with Gold ERP, in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Gold ERP is a hosted service. Unlike the EMAS AI platforms, which run on our customers' own servers, Gold ERP runs on servers operated by TechnoNet. This policy explains what that means for your data.
1. Data controller
The data controller for subscriber data processed through Gold ERP is:
TechnoNet Sdn Bhd (SSM No. 198901005373), Malaysia
Data Protection Officer: [email protected]
Phone / WhatsApp: 019-328 2828
2. Personal data we collect
a) Subscriber data (about your company's account)
- Company name, registration details and contact details
- Name and email address of the primary account holder and of your users
- Payment information (processed and stored by Stripe — we do not store card numbers)
- Subscription history and account activity logs
b) Business data (data your company enters into Gold ERP)
- Inventory records, including item details, weight and purity
- Sales and point-of-sale transactions
- Your customers' names and contact details, where you record them, and the details needed for their e-Invoices, such as their tax identification number (TIN) and address
- Customer signatures captured at payment
- Your staff records, such as names, identity card numbers, contact details, contract dates and sales, where you record them
- Reports and files you store in Gold ERP
Business data is entered by your company and belongs to your company. TechnoNet processes it on your behalf as a data processor under the PDPA.
3. Where your data is hosted
Gold ERP and its data are hosted in Malaysia, on servers operated by TechnoNet. The world gold price shown in Gold ERP is collected automatically from an external market data source; your business data is not sent to that source.
4. Who can access your data
- Users your company sets up in Gold ERP
- Authorised TechnoNet staff, only when needed to set up, support, maintain or back up the service, or when required by law
5. How we use personal data
Subscriber data is used to create and manage your subscription, process payments via Stripe, send account and billing notices, issue invoices and e-Invoices as required by Malaysian tax law, provide support, and meet legal obligations.
Business data is used only to provide Gold ERP to your company: recording inventory and sales, showing the world gold price, filing e-Invoices for your sales, and producing your reports.
6. Legal basis for processing
- Contractual necessity — to provide the service you subscribed to
- Legal obligation — to meet Malaysian tax, e-Invoice and company law requirements
- Legitimate interests — to operate and secure the service, and to prevent fraud
- Consent — where you have explicitly agreed, for example to receive product news
7. Data sharing
We do not sell personal data. We share data only as needed to run Gold ERP:
- Stripe — subscriber payment data (Stripe's privacy policy applies to data Stripe holds)
- LHDN MyInvois — billing data for the e-Invoices we issue to you, as Malaysian tax law requires
- LHDN MyInvois, for your own e-Invoices — when Gold ERP files an e-Invoice for one of your sales, your company's and your customer's e-Invoice details (such as name, TIN, address and the sale) are sent to LHDN through TechnoNet's e-Invoice service. TechnoNet does this as your data processor.
We do not share your business data with any other third party, except where required by law.
8. Data retention
- Subscriber data and billing records — for the duration of the subscription and 7 years after, for tax and company law compliance
- Business data — for the duration of the subscription. On cancellation, your company may request an export within 30 days, after which the data is deleted, subject to legal retention obligations
- Account access logs — 12 months
9. Data security
We protect personal data with appropriate technical and organisational measures, including encrypted transmission (HTTPS/TLS), access control by user role, regular backups, and access logging and monitoring.
10. Your rights under the PDPA
You may request access to, or correction of, your personal data; withdraw consent where consent is the basis; and request deletion, subject to legal retention obligations. Contact our Data Protection Officer at [email protected]. We respond within 21 days.
11. Cookies
This site uses only cookies essential to its operation. Visits are counted with our own self-hosted analytics, which uses no cookies. The subscription portal on this site uses a session cookie to keep you signed in. No third-party advertising or tracking cookies are used.
12. Changes to this policy
We may update this policy from time to time and will notify active subscribers of material changes by email. The date of the last update is shown at the top of this page.
13. Contact and complaints
TechnoNet Sdn Bhd (SSM No. 198901005373), Malaysia
Data Protection Officer: [email protected]
Phone / WhatsApp: 019-328 2828
If you believe your PDPA rights have not been upheld, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia (pdp.gov.my).