Legal

Privacy Policy

Last updated 12 August 2026

OnGo Invoice is a Ground Control product operated from Malaysia. This policy explains how we collect, use, disclose and protect personal data when you visit our website or use OnGo Invoice (the “Service”).

1. Information we collect

We may collect:

• Account information, such as your name, email address and login details.
• Waitlist information, such as the email address you provide to receive launch and early-access updates.
• Business and workspace information, including company profiles, logos, products, customers, invoices, quotations, receipts, payment records and terms you choose to store.
• Usage and technical information, such as device type, IP address, browser information, session data, security events and error logs.
• Support information you send when you contact us.
• Billing information needed to manage a paid plan. Card details, where applicable, are handled by our payment provider rather than stored by OnGo Invoice.

2. How we use information

We use information to provide and secure the Service, manage the waitlist and send requested launch updates, create and store your documents, maintain your workspace history, process subscriptions, respond to support requests, diagnose problems, improve the product and comply with legal obligations.

3. Customer data you enter

You control the business and customer data entered into your workspace. You are responsible for having an appropriate reason, notice or consent to collect and use that data. We process it only to provide the Service, follow your instructions and meet our legal obligations.

4. AI-assisted features

If you choose an AI-assisted feature, the instruction you submit may be sent to the AI provider identified in the product so it can structure the document. Please avoid entering information that is unnecessary for creating the document. We do not use your invoice or customer data to train our own general-purpose AI model.

5. When we share information

We do not sell personal data. We may share only what is necessary with hosting, security, email, payment, analytics or AI service providers that support the Service; with professional advisers; when required by law; or as part of a business transfer. Providers are expected to process data only for the agreed purpose and protect it appropriately.

6. International transfers

Some providers may process information outside Malaysia or Singapore. Where this happens, we take reasonable steps to use providers and safeguards that provide an appropriate level of protection under applicable law.

7. Retention and deletion

We keep personal data only for as long as needed to provide the Service, manage requested launch updates, protect it, resolve disputes and meet legal, tax or accounting requirements. Waitlist information is removed when you unsubscribe or ask us to delete it, subject to short backup cycles. Deleted data may remain temporarily in restricted backups until those backups are rotated. You may contact us to request account deletion or an export of your data.

8. Security

We use reasonable technical and organisational measures designed to prevent unauthorised access, alteration, disclosure or loss. No online system is completely secure, so please use a strong password and protect access to your account.

9. Cookies

The app uses essential cookies or similar technologies for sign-in, session security and core functionality. We will ask for any consent required before using non-essential cookies.

10. Your choices and rights

Depending on applicable law, you may ask to access or correct your personal data, withdraw consent, object to certain processing, or request deletion. Some requests may be limited where we must retain information for legal or security reasons. To make a request, contact us using the address below.

11. Children

The Service is intended for business users aged 18 or older and is not directed to children.

12. Changes to this policy

We may update this policy as the Service changes. We will post the revised version here and update the date above. If a change materially affects how we use personal data, we will provide reasonable notice.

13. Contact

For privacy questions or requests, email [email protected].