Privacy Policy

Last updated: 17 April 2026

Krofio ("we", "our", "us") is operated by ADCX Lab Hub (JM1033406-H). This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Information We Collect

We collect the following information when you use our services:

• Account information: name, email address, phone number
• Financial data: documents you upload for tax planning analysis (P&L, management accounts, financial statements)
• Usage data: report history, feature usage, login activity
• Technical data: browser type, device information, IP address

2. How We Use Your Information

• To provide AI-powered tax planning and advisory reports
• To manage your account and process transactions
• To communicate service updates and support
• To improve our services and user experience

3. Data Processing

Your financial documents are processed using AI technology (Azure OpenAI) to generate tax planning reports. Documents are transmitted securely using 256-bit encryption. We do not use your financial data to train AI models.

4. Data Storage & Security

• All data is stored on Amazon Web Services (AWS) with encryption at rest and in transit
• Access to personal data is restricted to authorized personnel only
• We implement industry-standard security measures to protect against unauthorized access

5. Data Retention

We retain your account data for as long as your account is active. Financial documents and reports are retained for 12 months from the date of upload, after which they are automatically deleted. You may request earlier deletion at any time.

6. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access your personal data held by us
• Correct any inaccurate personal data
• Withdraw consent for data processing
• Request deletion of your personal data

7. Third-Party Services

We use the following third-party services to operate Krofio:

• Amazon Web Services (AWS) — hosting and data storage
• Microsoft Azure — AI processing
• Google Analytics — website usage analytics

We do not sell, trade, or share your personal data with third parties for marketing purposes.

8. Cookies

We use essential cookies for authentication and session management. Analytics cookies are used to understand how visitors interact with our website. You may disable cookies in your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.