Your information

Privacy policy

This policy explains how SATU BUMI TECHK SDN. BHD. handles information used by the Satu Bumi Techk manpower app and this app companion website.

Effective date: 23 October 2026 · Contact: admin@satubumitechk.com

1. Information the service uses

• Account and business details: username, company name, contact person, phone number, optional email address, account role and approval status. Passwords are stored as hashes rather than readable passwords.
• Work records: manpower requirements, deployment site entered or selected by users, dates, shift details, notes, supplier assignments, status changes and completion sign-off.
• Uploaded evidence: images or PDF files you choose to upload, filenames, supervisor/sign-off names and completion notes.
• Service and support records: in-app notifications and read status, messages you send to support, and technical request information such as IP address, request time and errors that may appear in hosting or security logs.

2. Why information is used

Information is used to create and approve business accounts, authenticate access, coordinate requests, notify participants, verify completed work, maintain operational history, respond to support requests and protect the service against misuse. Provide only information needed for the job; avoid uploading identity documents, medical records or other unnecessary sensitive information.

3. Who can see it

Company administrators manage accounts and operational records. Approved suppliers can view available requests and the business contact details supplied with them. Assigned suppliers and owning clients can access the relevant job information. Completion evidence is restricted to the owning client, assigned supplier and administrators. Information included in a request or attachment may therefore be visible to the business participants involved in that workflow.

Authorized users can export or share certain records using their device. Once they do, handling of those copies also depends on the receiving organization or service.

4. Hosting and service providers

The application database and uploaded evidence are hosted on Namecheap infrastructure. Hosting and infrastructure providers process information needed to operate and secure the service; processing may take place outside your country. If you email support, your email provider and the company's email provider also process that correspondence.

The current release does not include advertising, advertising trackers, third-party analytics or Firebase. Remote push delivery is not configured in the current release. In-app updates synchronize while the app is active or when it reopens. If remote push is enabled later, this policy will be updated to describe the provider, device tokens and notification data involved.

5. Device storage and permissions

The app saves session and previously loaded account/job data on the device to maintain sign-in and display recent records. It may create temporary local copies of attachments for viewing or sharing. Sign out on shared devices and remove the app when you no longer use it. Notification permission is optional. The document picker lets you select individual files; the app does not upload your entire photo library. Deployment sites are entered or selected for a job; the app does not collect continuous device GPS location.

This website has no advertising, analytics scripts, tracking cookies or contact-form database. The hosting service may still keep technical access and security logs. Contact links open your own email or phone app.

6. Retention and deletion

Account and operational records are kept while needed to provide the service and manage business records, disputes, security and applicable retention obligations. Contact the team to request access, correction or deletion. Requests are reviewed to confirm identity and identify any records that must be retained; retained records should be limited to that purpose. Deleting an account does not necessarily remove business records shared with another organization or copies they exported.

Private recovery backups rotate separately from the active database. Deletion from active records may therefore precede expiry of backup copies. The current automated server backup rotation retains seven successful copies; separate recovery copies may also exist. Contact the team about the scope of a deletion request, including recovery copies.

Use the account and data request page. The current app does not yet provide an in-app self-service deletion control.

7. Security

The service uses HTTPS, hashed passwords, authenticated access and role/ownership restrictions for job records and completion evidence. No storage or transmission method eliminates all risk. Keep passwords private and contact support if you suspect unauthorized access. Do not send passwords or authentication codes by email.

8. Your choices and questions

You can ask about information associated with your account, request corrections or deletion, and turn off notification permissions in device settings. Available rights and any lawful retention exceptions depend on applicable law. The service is designed for business users and is not directed to children.

For privacy requests, email admin@satubumitechk.com with your username, company name and request. Do not attach identity documents unless the team specifically requests an appropriate verification method.

9. Changes

Updates will be posted on this page with a revised effective date. Material changes to how information is handled will be communicated through an appropriate service channel.