Privacy Policy

1. Introduction

NakResit ("we", "our", or "us") operates the NakResit web application at nakresit.com. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

• Account information: Name, email address, and password when you register.
• Business information: Business name, registration number, address, phone number, and logo that you provide.
• Customer data: Names, email addresses, and contact details of your customers that you enter.
• Invoice data: Invoice and receipt records, line items, amounts, and payment information.
• Usage data: Log data, device information, and how you interact with our service.

3. How We Use Your Information

• To provide, operate, and maintain our services.
• To generate PDF invoices and receipts on your behalf.
• To send transactional emails (invoice delivery, payment notifications).
• To process subscription payments via our designated payment gateway.
• To improve and personalise your experience.
• To comply with legal obligations.

4. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security (RLS) policies to ensure that users can only access their own data. All data is encrypted in transit using TLS/HTTPS. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services to operate NakResit:

• Supabase — database and authentication hosting.
• Our designated payment gateways (including but not limited to ToyyibPay and/or Billplz for local transactions; and other designated processors for international transactions) — Used for secure subscription payment processing. Payment data is handled according to the respective processor's privacy policy.
• Resend — transactional email delivery.
• Vercel — web hosting and deployment.

6. Cookies

We use essential cookies for authentication and referral tracking purposes for our Affiliate Programme. We do not use advertising cookies or sell cookie data to third parties.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data.

To exercise any of these rights, contact us at [email protected].

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days, except where we are required to retain it by law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of the service after changes constitutes acceptance.

10. Contact Us

For any questions regarding this Privacy Policy, please contact us at: