Skyline ERP Privacy Policy

 

Effective date: 17 October 2026

Skyline ERP ("the app") is an internal business management system operated by Skyline Optical Trading Sdn. Bhd. ("we", "us"), B1-10-1, Midfields Square West, Jalan 11/108C, Off Lebuhraya Sungai Besi, 57100 Kuala Lumpur, Malaysia. It is used only by our own staff to take orders, manage stock, and handle deliveries. It is not offered to the general public.

​

1. Who can use the app

Accounts are created by our company administrator. Nobody can register an account inside the app. The app is intended for adult staff only and is not directed at children.

​

2. Information we collect

Account information. Login ID, name, mobile number, email address (where provided), role, and assigned warehouse. Passwords are stored only as a salted hash.

​

Business records entered by staff. Customer (optical shop) details such as shop name, address, contact person, phone number and credit terms, together with orders, invoices, deliveries, stock movements, and sales prospects.

Photos. The camera or photo gallery is used when a staff member chooses to:

​

• photograph a courier label (kept for 30 days, then deleted);

• photograph a signed delivery note as proof of delivery (kept with the delivery record);

• add product pictures;

• attach a picture to a question for the in-app assistant (used to answer the question and not stored afterwards).

 

Barcode scanning is processed on the device. Scanned camera frames are not uploaded.

​

Voice. If a staff member uses the voice feature, the microphone audio is sent to our server and to our speech recognition provider so that it can be turned into text. The audio is not stored. Dictating into the question box instead uses the phone's own speech recognition (Apple on iPhone, Google on Android), under Apple's or Google's terms. The text of assistant questions and answers is kept for 30 days, and the question text is also recorded in our audit log.

​

Activity records. For security and accountability we keep an audit log of actions taken in the system, including the acting user, the time, and the IP address.

​

Information stored on the device. Sign-in tokens, an unfinished order, orders waiting to be sent while offline, and display preferences.

We do not collect location, contacts, advertising identifiers, analytics, or crash reports, and the app contains no advertising.

​

3. How we use information​

• to sign staff in and control what each role may see or do;

• to run our business: orders, stock, deliveries, customer accounts and reporting;

• to answer questions put to the in-app assistant;

• to keep the system secure and to keep a record of who did what.

 

4. Service providers

We do not sell personal data and do not share it for advertising. We use the following providers, which process data only to deliver their service to us:

​

• Exabytes (Malaysia): hosts our server and database. Data involved: all data held by the system.

• Alibaba Cloud Model Studio (Singapore): speech recognition and read-aloud voice; reading order messages and order photos. Data involved: voice audio; answer text; order messages and photos.

• Anthropic, DeepSeek: in-app assistant. Data involved: question text, attached pictures, and the business records needed to answer.

• Google Maps Platform: finding optical shops that are not yet customers. Data involved: search words, such as a town name.

• Tracking.my: parcel tracking. Data involved: tracking number and courier.

• SQL Accounting (eStream): our accounting system. Data involved: customer, invoice and payment records.

• Cloudflare: domain name service (DNS) only. Data involved: no app data.

• Google Play, Apple App Store: app distribution and updates. Data involved: handled by Google and Apple.

 

5. Security

All communication between the app and our server is encrypted (HTTPS). Sign-in tokens are kept in the device's secure storage. Access to data is limited by role.

​

6. How long we keep information​

• Courier label photos: 30 days.

• Assistant conversations: 30 days.

• Account information: for as long as the staff member has an account.

• Business records, proof of delivery, and the audit log: for as long as needed for our business, accounting, and legal obligations.

 

7. Your choices and rights

Camera and microphone access are optional and can be withdrawn at any time in the device settings.

Staff may ask to see or correct their personal data, or to have their account and personal data deleted, by contacting the company administrator or writing to skylineopticaltradingsdnbhd@gmail.com. When an account is deleted we remove or anonymise the personal data in it, except for records we are required to keep (for example accounting records and the audit log). These rights are provided in line with the Malaysian Personal Data Protection Act 2010.

​

8. Changes to this policy

We may update this policy. The latest version will always be published on this page with its effective date.

​

9. Contact

Skyline Optical Trading Sdn. Bhd.
B1-10-1, Midfields Square West, Jalan 11/108C, Off Lebuhraya Sungai Besi, 57100 Kuala Lumpur
Email: skylineopticaltradingsdnbhd@gmail.com