Privacy Policy & Notis PDPA

1. Overview & Principles

This Privacy Policy explains how AmerisPro ("we," "our," or "us") collects, processes, and safeguards data when you use the AmerisPro Safety Hub SaaS platform ("Service").

We process your personal and organizational data strictly in compliance with the seven Core Principles of the Malaysian Personal Data Protection Act 2010 (PDPA) and global General Data Protection Regulation (GDPR) standards.

2. Information We Collect

To provide our safety management and compliance services, we collect:

• Account & Organization Data: Name, work email address, company/tenant name, and workspace preferences collected during user registration or Google OAuth sign-in.
• Safety & Operational Records: Site inspection logs, incident reports, PPE stock balances, contractor registrations, staff directory data, and digital signature records created within your workspace.
• Technical & Usage Data: IP addresses, browser types, and session tokens necessary for secure authentication and system operation.

3. Purpose of Processing & Third-Party Disclosure

Your data is processed exclusively to deliver, maintain, and secure the AmerisPro platform. We never sell, rent, or trade your personal data to third parties.

Data may be processed by trusted infrastructure sub-processors essential to service delivery:

• Cloud Database & Storage: Encrypted hosting provided via Supabase Cloud in secure regional data centers (Singapore region).
• Application Infrastructure: Serverless web hosting and edge routing provided via Vercel Inc.
• Payment Gateways: Secure transaction processing for subscriptions via licensed payment partners.

4. AI Search & Data Privacy

AmerisPro provides automated search and compliance assistance tools to help organizations reference relevant safety statutes, codes of practice, and regulatory guidelines.

Data Confidentiality: Your workspace records, private site inspection logs, uploaded photos, and personnel directories are never used to train public AI models or disclosed to unauthorized external entities.

5. Data Security & Retention

We implement multi-layered security controls, including SSL/TLS 256-bit encryption in transit and PostgreSQL Row Level Security (RLS) data isolation per organization.

Your workspace data is retained for the duration of your active subscription. You retain full rights to request complete data export or workspace deletion at any time.

6. Contact & Data Access Rights

Under the PDPA Act 709 and applicable privacy laws, you have the right to request access to, correction of, or deletion of your personal data.

For any privacy inquiries or data requests, please contact our support team at: support@amerispro.com.

1. Notis Perlindungan Data Peribadi (Akta 709)

Notis ini dikeluarkan mengikut keperluan Seksyen 7 Akta Perlindungan Data Peribadi 2010 (PDPA) Malaysia. AmerisPro ("kami") komited untuk memelihara kerahsiaan dan keselamatan data peribadi anda.

2. Pengumpulan dan Pemprosesan Data

Kami mengumpul maklumat akaun, nama organisasi, alamat e-mel, dan rekod pengurusan keselamatan tapak yang dimasukkan oleh anda untuk tujuan perkhidmatan sistem SaaS AmerisPro.

3. Keselamatan dan Hak Pengguna

Semua data disimpan secara selamat menggunakan penyulitan data terkini. Data anda tidak akan dijual atau dikongsi kepada pihak ketiga tanpa kebenaran.

Anda berhak mengikut Akta 709 untuk mengakses, membetulkan, memuat turun, atau meminta pemadaman data peribadi anda dengan menghubungi kami di: support@amerispro.com.