Privacy notice

Who we are

Kongsi is a tool for sharing the cost of plans and subscriptions among people who know each other. It is operated by Persatuan Kemajuan STEM & Inovasi Kelantan (PaKSI) (“we”). For anything about your personal data, contact info@paksikltn.org.

The person who runs a bill (the organizer) decides who is on it and what they are charged. We operate the platform that records it.

What we collect

• Your account: name, email address, and a password stored only as a one-way hash.
• People on a bill, entered by an organizer: a name, and optionally an email address and phone number — even if that person has no Kongsi account.
• Money records: bills, each person's share, payments reported and confirmed, and the payment details an organizer chooses to share (bank name, account holder, account number, a QR image link).
• Links you add: invoice, payment-proof and QR links point to files you host elsewhere. Kongsi stores the link, not the file.
• Messages: a copy of each bill email or WhatsApp message sent, so the organizer has a record.
• Technical: session data, IP address and browser type, for security.

Why we use it

To run the service you asked for: sign you in, let an organizer record a shared cost and each person's share, tell people what they owe, and keep track of who has paid. We don't sell personal data or use it for advertising.

Kongsi never holds money. You pay the organizer directly, by bank transfer or e-wallet.

Who sees what

• Everyone on a bill sees the total and every share, but never another person's name, email or phone — others appear as “Subscriber 2”, “Subscriber 3”.
• If you owe an organizer, you see their name, email address and the payment details they chose to share.
• The organizer sees the details they entered for the people on their bill, and what each has paid.
• PaKSI's administrators can see account details, spam reports and the record of emails sent (recipient, subject, result), only to run, secure and support the service.

Who we share it with

• Google (Google Workspace / Gmail) — delivers email (sign-in links, bill notifications).
• Microsoft Azure — the server Kongsi runs on: PaKSI's own server in Malaysia (Kuala Lumpur).
• WhatsApp (Meta) — if an organizer sends a bill by WhatsApp, the message goes through WhatsApp from the organizer's own phone, under WhatsApp's terms and privacy policy.
• Files and QR images an organizer adds are links to wherever they host them. A QR image is loaded when you view the bill or its email, and a file when you open it — that host may see your IP address and when it was loaded.

Each receives only what it needs for its job. Some of these providers may process data outside Malaysia.

If someone added you to a bill

An organizer can add your name, email or phone so they can send you your share. Every bill email has a link to stop emails about that bill, or to report it as spam if you don't know the sender. If you have an account, you can also accept, decline or report a new bill under “Pay”.

How long we keep it

• Account and money records: 2 years after a bill is closed or deleted, then deleted or anonymised. A deleted account is anonymised straight away.
• Server logs, sessions and the record of emails sent (recipient, subject, result — not the message): 30 days.
• Backup copies: 14 days, then overwritten.

Your rights

Under Malaysia's Personal Data Protection Act 2010 you can ask to access or correct your personal data, ask for a copy, withdraw consent, or ask us to stop processing it. Email info@paksikltn.org; we will respond within 21 days (most requests you can do yourself, instantly, in Settings → Your data). Records we must keep by law may be kept in anonymised form.

If you have an account you can do the main ones yourself, any time, in Settings → Your data: download a copy of everything we hold about you, or delete your account (your name, email, phone and bank details are removed; amounts stay as unnamed records in the organizers' books). Questioning a charge on a bill is done on that bill, under “Something wrong with this charge?”.

Security

Passwords are hashed, traffic is encrypted (HTTPS), access is limited to each account's own data, and we have a written procedure for handling a data breach, including notifying the authorities where the law requires.

Changes

We'll post updates on this page and tell account holders about significant changes.

Language

This notice is available in Bahasa Malaysia and English. If the two versions differ, the English version applies.