Bliss Kira

Privacy Policy

Version 1.4 · Effective 12 October 2026 · Bliss Aura Trading (Malaysia), operator of Bliss Kira

Two different sets of people appear in this policy. When you sign up for Bliss Kira, we handle your personal data and we are the data controller for it. When you use Bliss Kira to record your customers' details, you are the controller of that data and we are your data processor — we only do what your use of the software instructs. Section 8 and the Data Processing Terms cover that second role.

1. Who we are

Bliss Kira is accounting and point-of-sale software operated by Bliss Aura Trading, a business registered in Malaysia ("we", "us"). This policy is issued under the Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024.

Questions about personal data — including a request to see what we hold or to have it corrected — go to blissauratrading@gmail.com and are answered by a person.

We do not currently meet the thresholds in sections 12A and 12B of the PDPA that require a registered Data Protection Officer. We monitor this, and will appoint and register one, and say so here, when we do.

2. What we collect about you

What	Why we need it	What happens without it
Name and email address	To create your account and let you sign in; to send you invoices, receipts and notices about the service	No account can exist. This is required.
Password (stored only as an Argon2id hash)	To verify it is you	Required. We never store the password itself and cannot recover it for you.
Business name, registration number, tax identification number (TIN), SST number, business address	These print on your invoices and are required by Malaysian tax and e-Invoice rules	You can use the software, but the documents it produces will not satisfy LHDN requirements.
Sign-in records: date, time, IP address, browser	Security. So that "who signed in, from where, when" is answerable after a lost laptop or a departing employee	Required. We would be unable to investigate unauthorised access.
Payment records: amount, date, reference, and the plan purchased	To take payment and to keep our own accounts	Required for paid plans. See section 5 on card details.
Employee records you enter (name, IC number, EPF/SOCSO numbers, date of birth, salary, bank account)	To calculate statutory deductions and produce payslips and EA Forms	Payroll cannot be run. You choose whether to use payroll at all.

What we do not collect

We do not use tracking or advertising cookies. We set three cookies: one keeps you signed in, one remembers your language, and one remembers that this browser has signed in to your account before, so that when somebody else keeps guessing your password, the lock that stops them does not shut you out as well. It holds no password. None of them follows you to other websites.
We do not sell, rent or share your data for marketing — not to anybody, for any price. This is not a policy we intend to change; if it ever did change we would have to ask your consent, not merely tell you.
We do not read your books to build profiles or train models. Your figures are used to give you your figures.

3. Why we are allowed to hold it

Under the PDPA, we rely on:

Performance of a contract — most of the above. You asked us to run your books; we cannot do that without them.
Legal obligation — records we must keep for tax and company law (section 6).
Legitimate interest — security logs, and preventing abuse of the service.
Your consent — anything else, asked for separately at the time, and refusable without losing the service.

4. Who sees it

People you invite. You decide who has access to your company and at what level. We do not add anybody.
Us — only when you ask, or when we must. Our staff do not routinely read customer data. Access happens when you raise a support request that requires it, or where the law compels us.
Service providers who host, store, read or transmit for us: our server provider; Cloudflare, which stores the receipts you upload and our encrypted backups; Anthropic, which reads a receipt or an order photo you upload into figures — only that file is sent, and only when it is read; our email provider (only if you enable server-sent invoices); and our payment provider. Each is bound to use the data only to provide that service.
Cloudflare — only on the sign-up page, and only when that check is switched on. Your browser then connects to Cloudflare to run a check that tells a person from an automated program (Turnstile), and Cloudflare sees your IP address and details of your browser.
Recipients you choose. If you send an invoice by WhatsApp or email, the document and the recipient's address leave our system because you told it to.
Authorities, where required by Malaysian law. Where we are permitted to tell you, we will.

5. Payment details

🔴 We never see or store your card or bank credentials. Payment is taken by a licensed payment provider on their own page. What reaches us is that a payment of a given amount succeeded, and a reference — never a card number, never online banking credentials.

6. How long we keep it

Data	Kept for	Why that long
Your accounting records, invoices and payroll data	7 years after the financial year they belong to	Section 82 of the Income Tax Act 1967 requires you to keep sufficient records for seven years. Deleting them earlier would put you in breach, so we hold them for the full period even if you close your account.
Sign-in and security logs	24 months	Long enough to investigate an incident found late; short enough not to accumulate a history nobody needs.
Your account and contact details	Until you close the account, then 7 years alongside the records above	An accounting record without the identity of whose it is answers nothing.
Support correspondence	24 months

When a retention period ends, the data is deleted or irreversibly anonymised. Backups are on their own schedule and are overwritten in rotation; data deleted from the live system disappears from backups as that rotation completes.

7. Your rights

Under the PDPA you may:

Ask what we hold about you, and get a copy.
Correct anything wrong. Most of it you can correct yourself in the software; write to us for the rest.
Withdraw consent where consent is what we relied on.
Ask us to stop processing for direct marketing — we do not do direct marketing to third parties, but the right stands.
Limit how we process it, in the circumstances the Act allows.

Write to blissauratrading@gmail.com. We reply within 21 days, which is the period the Act allows. There is no charge for a first request in any twelve months.

Some data we cannot delete on request, and we would rather say so here than at the moment you ask. Records we are required to keep for seven years under tax law stay for seven years. Closing your account stops us using them for anything else, but it does not shorten that period — for you or for us.

8. Your customers' and employees' data

When you record a customer, a supplier or an employee in Bliss Kira, that person's data is yours. You are the data controller; we are your processor. In particular:

We act only on your instructions, expressed through your use of the software.
We do not use that data for our own purposes.
You are responsible for having told those people what you do with their data, and for having a lawful basis to hold it.

The full terms of that relationship — including breach notification, our sub-processors, and what happens at the end — are in the Data Processing Terms, which form part of your agreement with us.

9. Where the data is

Your books — the database — are held on servers in Malaysia. Two sub-processors operate outside Malaysia: Cloudflare, which stores the receipts you upload and our encrypted backups, and Anthropic, which is sent a receipt or an order photo when it is read. An email relay, if you switch server-sent email on, may sit outside Malaysia too. In each case we transfer only what that service needs, and only where the transfer meets the conditions in section 129 of the PDPA. The current list of sub-processors and their locations is in the Data Processing Terms.

10. Security

Traffic is encrypted in transit (HTTPS).
Passwords are stored as Argon2id hashes — a form designed to be slow and memory-hungry to attack — never as text, and never in a form we can read back.
Sessions can be ended remotely, so a lost laptop is a five-minute problem rather than an open door.
The database enforces its own rules: posted accounting entries cannot be altered or deleted by the application at all, which means an intruder with application access still cannot quietly rewrite your books.
Backups are encrypted, held off the server, and test-restored on a schedule — because a backup nobody has restored is a belief, not a backup.

11. If something goes wrong

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable and within 72 hours, and will tell affected individuals within 7 days where the breach is likely to cause significant harm — as required by the Personal Data Protection (Amendment) Act 2024.

Where you are the controller and we are your processor, we will notify you without undue delay so that you can meet your own 72-hour deadline. We will not wait to finish investigating before telling you.

12. Children

Bliss Kira is business software and is not directed at children. We do not knowingly collect data from anyone under 18 as a user of the service. Data about a minor may legitimately appear in your records (a dependant on a payroll relief claim, for example) — that data is yours, under section 8.

13. Changes

If we change this policy we will show a notice inside the software before the change takes effect, and the version number and date at the top will change. A change that would materially reduce your protection will be notified at least 30 days in advance, so that you have time to leave if you disagree.

14. Complaints

Write to blissauratrading@gmail.com first — most things are a misunderstanding and are fixed the same week. If you are not satisfied, you may complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Malaysia.

Bliss Kira is operated by Bliss Aura Trading, Malaysia.
Terms of Service · Privacy Policy · Data Processing Terms