BillLah. Invoicing. Simplified.

Legal

Privacy Notice

Effective date: 6 July 2026Version 1.0

This notice explains the types of data BillLah may process and why it is used to run the invoicing workspace.

Back to landing page

Data We Collect

BillLah may collect account name and email, business profile data, employee or user role data, customer data, invoice, quotation, receipt and payment records, and uploaded business logos or related files.

Where users enter it, BillLah may process TIN, SST number, NRIC number, passport number, business registration number, addresses, contact details, and MyInvois-related data.

BillLah may also collect technical data such as IP address, browser or user agent, logs, timestamps, device and session data, and security events.

Why We Use Data

Data is used for account creation, tenant or workspace management, invoice, quotation and receipt generation, payment record tracking, report generation, and MyInvois/e-Invoice submission or status handling.

Data may also be used for support, troubleshooting, security, audit trails, abuse prevention, service improvement, and maintaining the reliability of the platform.

Sharing and Service Providers

BillLah may share data with hosting, database, storage, infrastructure, and email providers that help operate the service.

When payment features are added, payment data may be shared with the selected payment gateway.

When a user enables e-Invoice functionality, relevant data may be submitted to or retrieved from LHDN/MyInvois.

BillLah may disclose information where required by law, regulation, court order, government request, or to protect the platform and users.

Data Retention

Active account data is generally retained while the account or workspace is active.

Backup copies may remain for a limited retention period after records are changed or deleted.

Users may need to retain accounting and e-Invoice records according to their own business, tax, accounting, or legal obligations.

User Rights

Users may request access to their personal data, ask for correction, or ask for deletion where legally and technically possible.

Users should export important records before requesting deletion or closing a workspace.

Some records may not be removable immediately where retention is needed for security, audit, dispute handling, backups, or external MyInvois records.

Security

BillLah uses reasonable technical and organizational measures to protect data.

No system can guarantee 100% security, and users should keep their passwords secure and manage employee access carefully.

Privacy Requests

For privacy requests, contact BillLah at Jaden@billlah.com. Include enough detail for the team to identify the account or workspace.

Contact

Contact BillLah support at Jaden@billlah.com.