Privacy Policy

• Account data: your name, email address and profile picture from Stayrene Identity, our sign-in service, and the role, department and position Stayrene assigns to you.
• Owner data: property owners' contact details, identity document numbers, bank account details and the units they own.
• Property and operations data: properties, units, inventory, renovation and inspection records, housekeeping, maintenance requests and unit access credentials such as door PINs and keycards.
• Billing data: utility and service accounts for each unit, their bills, and the login details of utility provider accounts (such as myTNB) used to fetch those bills.
• Technical data: session cookies needed to keep you signed in, and a device token if you allow push notifications.

• To sign you in and decide what you may see and change in the system.
• To run and hand over unit operations between Stayrene departments.
• To show owners their units, inventory and bills in the Owner Portal.
• To fetch, store and record utility bills for the units we manage.
• To send in-app and push notifications related to your work.

We do not sell personal data and do not use it for advertising.

Stayrene UMS connects to a Google Drive account owned by Stayrene to store the utility bill PDFs it fetches. It does not ask staff, owners or anyone else to connect their own Google account.

• Scope: the app requests only the https://www.googleapis.com/auth/drive.file scope. It can see and change only the folders and files it created itself and has no access to any other file in that Drive.
• What it does: it creates a folder tree for the bills, uploads bill PDFs into it, checks whether a bill was already uploaded, and downloads those PDFs again when staff need them.
• Storage and sharing: the OAuth token is kept only on our server. Data obtained from Google APIs is used only to store and retrieve these bills, is not shared with third parties, and is not used to develop, improve or train AI or machine learning models.

Stayrene UMS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share personal data only as needed to run the system:

• Within Stayrene, with staff whose role needs it.
• With property owners, limited to their own units and bills.
• With service providers that host or support the system, such as our server hosting, Google Drive for bill storage and Firebase Cloud Messaging for push notifications.
• When required by law or to protect our rights.

Access credentials, owner bank account numbers, owner identity document numbers and provider login passwords are encrypted at rest with separate keys. Full values are never sent to the browser in lists; they are revealed only through a separate request by staff with the right permission. All traffic uses HTTPS, and every page and API checks the signed-in user's permissions on the server.

We keep data for as long as we manage the related unit or owner relationship, and afterwards as long as needed for accounting, legal or dispute purposes. Bill PDFs stay in Stayrene's Google Drive for the same period.

You may ask to access or correct your personal data, or ask us to stop using or delete it where the law allows, including under Malaysia's Personal Data Protection Act 2010. Contact us at the address below.

We may update this policy. The date at the top shows the latest version, and significant changes will be announced in the system.

Questions or requests about this policy: [email protected]