Privacy Policy

Client Portal · effective 27 September 2026

This notice explains how Novastack Systems Sdn. Bhd. handles personal data in the Client Portal, in line with the Personal Data Protection Act 2010.

What we collect

• Your name, work email and your company's details, from you or from your company's account owner.
• Your password (stored only in scrambled, one-way form) and the secret for your two-factor codes (stored encrypted).
• A record of sign-ins and actions, with date, time and IP address, to protect your account and investigate misuse.

Why we use it

• To let you sign in and open the services your company has with us.
• To show your company's subscriptions and invoices.
• To keep the portal secure and to meet our legal obligations.

Who we share it with

When you open a Novastack service from the portal, we pass that service your name, email, role and company so it can sign you in. We do not sell personal data or use it for advertising. We only disclose it to others where the law requires.

Where it is kept and for how long

Data is kept on servers we manage. Account data is kept while your account is active and for up to 7 years afterwards where needed for accounting or legal reasons. Activity records are kept for up to 2 years.

Your rights

You may ask to see or correct your personal data, or ask us to stop using it, by writing to support@novastack.com.my. We will reply within 21 days.

Novastack Systems Sdn. Bhd. (Company No. 202601026967 (1689063-M)) · Lot 1, Kompleks Perindustrian SME Bank Bangi, Jalan 6C/13A, Seksyen 16, 43650 Bandar Baru Bangi, Selangor · support@novastack.com.my