Scope
This privacy policy applies to AzariX Cashier, AzariX OS admin and customer web services, demo and signup flows, support interactions, and related Microsoft Store listing activities operated by AzariX Software.
It is intended to support the notice and choice, disclosure, security, retention, data integrity, and access principles under Malaysia's Personal Data Protection Act 2010 (PDPA), where applicable.
If you use AzariX through a merchant, employer, outlet, or tenant administrator, that organisation may also control how your personal data is entered, used, retained, and exported in its AzariX workspace.
Personal data we collect
We may collect account, contact, business, outlet, staff, role, customer, order, booking, loyalty, inventory, invoice, payment status, support, device, app version, diagnostic, security, and audit information.
AzariX Cashier may store encrypted local operational data on the Windows device so the counter can continue working offline and sync safely when connectivity returns.
Sources of data
We collect data directly from account owners, staff users, customers, cashier devices, admin and customer web apps, support channels, payment or identity providers, and records uploaded or entered by a tenant.
We do not intentionally collect sensitive personal data unless a tenant, user, legal requirement, or supported business workflow provides it for a specific purpose.
How we use data
We use personal data to provide and secure the service, operate POS and cashier workflows, process orders, support offline sync, manage accounts, provide support, maintain audit records, issue invoices, support LHDN e-Invoice readiness, and comply with legal obligations.
We may also use contact details to send service notices, security alerts, product updates, onboarding messages, and marketing messages where permitted. You can opt out of marketing messages at any time.
Disclosure
We may disclose data to authorised tenant administrators, service providers, hosting providers, payment processors, email or support tools, security and analytics providers, Microsoft Store services, professional advisers, and authorities where required by law.
We do not sell personal data. Service providers must use data only for the service they provide to AzariX or the tenant.
Cookies and diagnostics
Our web services may use necessary cookies, session storage, security tokens, logs, and diagnostics to keep users signed in, protect accounts, remember settings, and troubleshoot service issues.
You can control browser cookies through your browser settings, but disabling necessary cookies may stop login or service features from working.
Retention
We keep personal data only as long as needed for the service, tenant instructions, legal, tax, accounting, audit, security, dispute, and backup purposes.
When data is no longer needed, we delete, anonymise, or archive it according to applicable law and operational requirements.
Accuracy
We rely on users, tenants, and service providers to keep account, business, staff, customer, and transaction records accurate and up to date.
If you believe personal data in AzariX is inaccurate, contact the tenant administrator or AzariX Software so the record can be reviewed and corrected where appropriate.
Security
We use technical and organisational safeguards including encryption where appropriate, access controls, tenant isolation, audit logs, and least-privilege operational practices.
No system is perfectly secure, so users should protect their credentials, cashier devices, and administrator access.
International transfers
AzariX may process or store data in Malaysia or other countries where our service providers operate.
Where data is transferred internationally, we rely on contractual safeguards with our service providers and transfer data only where needed to deliver the service, consistent with the PDPA cross-border transfer guidelines. We require processors to protect personal data consistently with this notice and applicable law.
Your choices and rights
Subject to applicable law and tenant-controlled records, you may request access, correction, deletion, export, restriction, withdrawal of consent, or marketing opt-out for your personal data.
Withdrawing consent or asking us to restrict processing may affect whether we or the tenant can provide parts of the service. Some records may still need to be retained for legal, tax, accounting, security, or audit reasons.
Children
AzariX is a business service and is not directed to children.
If a tenant enters data about a minor for a lawful business purpose, the tenant is responsible for having the authority or consent required to do so.
Contact and complaints
For privacy requests, questions, or complaints, contact AzariX Software at privacy@azari-x.com, which is our designated data protection contact for privacy matters.
If you are not satisfied with our response, you may contact the Malaysian Personal Data Protection Commissioner or another regulator that applies to your location.