Your records stay under your control.

Last updated:: 20 June 2026
Data controller:: Ruji Labs Services (CA0407027-X), Malaysia
Contact:: [email protected]

Berkira is operated by Ruji Labs Services (SSM registration no. CA0407027-X), a Malaysian product studio. This policy explains what we collect, how we use it, and your rights under Malaysia’s Personal Data Protection Act 2010 (PDPA). We store only what is needed to run the Service, and we do not sell your personal data.

1. What we collect

Account details (email address, and the name you provide); workspace and preference settings; the receipts, invoices, and attachments you upload and the data extracted from them; exports you generate; and technical usage and log data needed to run the Service reliably and securely. Payments are processed by our gateway — we receive confirmation and limited transaction metadata, and do not store full card details.

2. How we use your data

To authenticate your account; store and organise your receipts; perform OCR extraction; generate the exports you request; process subscriptions and billing; provide support; secure the Service against abuse; and improve reliability and features. We use uploaded documents strictly to power these features inside your workspace.

3. Legal basis

We process your data to perform our contract with you (providing the Service), with your consent where required, and to meet legitimate operational and legal needs, consistent with the PDPA.

4. Service providers we share with

We use trusted providers to deliver the Service, and share data with them only as needed: cloud hosting and file storage (Google Cloud), document text extraction (Google’s Gemini models), transactional email (Brevo), and payments (Curlec by Razorpay). These providers process data under their own terms and may operate outside Malaysia. We do not sell personal data.

5. Retention and deletion

We keep your data while your account is active. Deleted receipts are removed after a short retention window, and generated exports expire automatically. You may request deletion of your account and associated data; we may retain limited records where required by law.

6. Security

We protect data with encryption in transit, access controls, and constant-time handling of secrets. No system is perfectly secure, but we work to safeguard your information and limit access to authorised personnel and approved providers.

7. Your PDPA rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent where processing relies on it. Contact [email protected]; we may ask for reasonable verification before acting on a request.

8. Cookies and local storage

We use essential cookies and browser storage to keep you signed in and remember preferences. We do not use them to sell your data.

9. Children

Berkira is intended for users aged 18 and above and is not directed at children.

10. Changes and contact

We may update this policy from time to time; the “Last updated” date reflects the latest revision. For privacy or data requests, contact [email protected].

Berkira is a product of Ruji Labs Services (CA0407027-X), Shah Alam, Selangor, Malaysia. See also our Terms of Service.

← Back to berkira.com