Privacy Notice

Last updated: 4 September 2026

AutoMates (automates.com.my) is operated by Roomie & Co Global (Registration No. 201903305397 (003039760-V)) ("we", "us"). This notice explains, as required by the Personal Data Protection Act 2010 (PDPA), what personal data we process when you use AutoMates, why, and your rights. A Bahasa Malaysia summary follows at the end.

1. What we collect

Dealer account data - name, email, phone/WhatsApp number, dealership name, SSM number, password (stored hashed, never readable by us).
Stock data you upload or sync - vehicle details, prices, and consignor/seller names and contact numbers from your Google Sheet.
Client leads you record - buyer names, contact numbers and requirements.
Billing data - subscription status and Stripe customer references. Card numbers go directly to Stripe; we never see or store them.
Usage data - log and activity data needed to run and secure the service.

2. Why we process it

To provide the service: stock boards, buyer-lead matching, Trade Pool sharing, WhatsApp match alerts, billing.
To secure accounts and prevent abuse.
To meet legal obligations (tax, accounting).

We do not sell personal data, and we do not use your stock, consignor or client data for advertising.

3. Who sees what

Other dealers see only the marketing card of stock you explicitly share to the Trade Pool. Consignor names, contacts, plate numbers, VINs, your remarks, and your client leads are never shown to anyone else - enforced at the database level.
Service providers (data processors) - Supabase (database hosting), Vercel (web hosting), Stripe (payments), Meta WhatsApp Business API (alerts), Resend (transactional email). Each processes data only to deliver its function. Some are located outside Malaysia; we transfer data to them only for these purposes.
Data Vault - if you enable the Vault, consignor names, contacts, plate numbers and VINs are encrypted on your own device before reaching our servers. We store only ciphertext and cannot read it.

4. Retention

We keep your data while your account is active. If you cancel, you may export everything (Settings → Export) and ask us to delete your account; we delete personal data within 30 days except records we must keep by law.

5. Your rights (PDPA)

You may access and correct your personal data, withdraw consent, and limit processing by contacting us. Most data is directly editable in the app. For anything else, email hello@automates.com.my - we respond within 21 days as the PDPA requires.

6. Your obligations for client data

Consignor and buyer details you enter are personal data you control as a business. By using AutoMates you confirm you collected that data lawfully and may store it with us as your processor. The Vault and Export tools exist so you can meet your own PDPA duties.

7. Changes and contact

We will notify account holders of material changes to this notice by email. Questions: hello@automates.com.my.

Ringkasan Bahasa Malaysia

Notis ini dikeluarkan menurut Akta Perlindungan Data Peribadi 2010. AutoMates (dikendalikan oleh Roomie & Co Global, No. Pendaftaran 201903305397 (003039760-V)) memproses data peribadi anda - maklumat akaun peniaga, data stok kenderaan, kenalan pemilik/penjual dan pelanggan - semata-mata untuk menyediakan perkhidmatan ini (papan stok, padanan pembeli, Trade Pool, makluman WhatsApp dan pembayaran). Data anda tidak dijual kepada pihak ketiga. Anda berhak mengakses, membetulkan dan menarik balik kebenaran pemprosesan data anda dengan menghubungi hello@automates.com.my.