Privacy Policy

Last updated: 18 May 2026

1. Who We Are

HuangMotor M Sdn Bhd (Company No. 202101036347), referred to as "we", "us", or "the Company". This policy describes how we handle data in our internal employee-facing systems hosted at tools.huangmotor.com, team.huangmotor.com, and login.huangmotor.com.

Registered office: 585, 2nd Floor, Lorong Kemuning 1, Taman Kemuning, 09000 Kulim, Kedah, Malaysia
Business address: No 5593 & 5594, Jalan Datuk Haji Ahmad Badawi, 13200 Kepala Batas, Pulau Pinang, Malaysia

2. Information We Collect

We collect only the minimum data needed to operate our internal systems:

Email address (your Google account email)
Display name as provided by you or your administrator
Device passkey credential — only the public key half is stored. The private key remains on your device and we never see it.
Activity logs of actions performed inside the system (logins, edits, etc.)
Optional profile data if you provide it: phone, position, department, IC, etc.

3. How We Use It

To verify you are an authorized employee
To grant or deny access based on your role
To maintain a security audit trail
To run internal business functions (pricelists, tasks, attendance, payroll)

4. Who Sees Your Data

Only internal administrators of HuangMotor M Sdn Bhd. We do not sell, rent, or share your data with any external party for marketing purposes.

5. Third-Party Processors

We use these trusted services to deliver the system. They may process data on our behalf within their own privacy frameworks:

Google — OAuth identity verification (login)
Cloudflare, Inc. — access gate, network protection, and static hosting
Supabase — database and server-side compute

6. Data Retention

We retain data for up to 7 years from your last activity, or longer if required for tax, audit, or legal reasons. Data may be retained indefinitely at our discretion.

Disclaimer: Although we take reasonable measures, we do not guarantee against data loss caused by service outages, technical failures, or factors beyond our control. We will not be held liable for any such losses.

7. Your Rights

You may request to:

See what data we hold about you
Correct inaccurate data
Delete your account when you leave the company

To exercise these rights, contact us at zhengseang.tan@gmail.com.

8. Security

We use device-bound passkeys (WebAuthn), Cloudflare Access whitelisting, and row-level security in our database. However, no system is perfectly secure. Report suspicious activity immediately.

9. Changes to This Policy

We may update this policy at any time. The "Last updated" date above will reflect any changes. Continued use of our systems means you accept the latest version.

10. Contact

Privacy questions: zhengseang.tan@gmail.com

中文版

隐私政策

最后更新：2026年5月18日

1. 我们是谁

HuangMotor M Sdn Bhd（公司注册号 202101036347），以下称"我们"或"公司"。本政策说明我们如何处理 tools.huangmotor.com、team.huangmotor.com 和 login.huangmotor.com 上内部员工系统的数据。

注册地址：585, 2nd Floor, Lorong Kemuning 1, Taman Kemuning, 09000 Kulim, Kedah, Malaysia
营业地址：No 5593 & 5594, Jalan Datuk Haji Ahmad Badawi, 13200 Kepala Batas, Pulau Pinang, Malaysia

2. 我们收集的信息

仅收集运行内部系统所需的最少数据：

电子邮件地址（您的 Google 账户邮箱）
显示名称（由您或管理员提供）
设备 passkey 凭证 — 只存储公钥部分。私钥保存在您的设备上，我们永远看不到。
操作日志（登录、编辑等系统内操作）
可选个人资料（如您提供）：电话、职位、部门、身份证号等

3. 我们如何使用

验证您是授权员工
根据您的角色授予或拒绝访问
维护安全审计记录
运行内部业务功能（价目表、任务、考勤、薪酬）

4. 谁能看到您的数据

仅 HuangMotor M Sdn Bhd 内部管理员。我们不会出售、出租或为营销目的向任何外部方共享您的数据。

5. 第三方服务提供商

我们使用以下受信任的服务来运行系统。它们可能在自身隐私政策框架下代表我们处理数据：

Google — OAuth 身份验证（登录）
Cloudflare, Inc. — 访问网关、网络保护、静态托管
Supabase — 数据库和服务器端计算

6. 数据保留

自您最后一次活动起，数据保留最多 7 年，或在税务、审计或法律要求下保留更长时间。我们也可能根据需要无限期保留数据。

免责声明：尽管我们采取合理措施保护数据，但**不保证**不会因服务中断、技术故障或不可抗力造成数据丢失。我们不对此类损失承担任何责任。

7. 您的权利

您可以请求：

查看我们保存的关于您的数据
更正不准确的数据
离职时删除您的账户

请联系 zhengseang.tan@gmail.com 行使权利。

8. 安全措施

我们使用设备绑定的 passkey（WebAuthn）、Cloudflare Access 白名单、以及数据库行级安全保护。然而没有任何系统是 100% 安全的，请立即报告可疑活动。

9. 政策变更

我们可能随时更新本政策。顶部"最后更新"日期会反映任何变更。继续使用本系统即表示您接受最新版本。

10. 联系方式

隐私问题：zhengseang.tan@gmail.com