Legal

Terms of Service & Data Processing Agreement

Version 2026-08-01. This page is maintained by the platform owner and describes the terms governing use of this OTP delivery platform. It is not legal advice or an independent certification.

1. Acceptance

By creating an account, creating a workspace, or accessing the admin console you agree to these Terms and the Data Processing Agreement set out below. Consent is recorded with your IP address, device metadata and a timestamp.

2. Limitation of liability

The platform is provided on an "AS IS" basis. Under no circumstances shall the Platform Owner be liable for indirect or consequential damages. Maximum financial liability is strictly capped at the amount paid by the user for the single most recent subscription month.

No warranty is given that OTP email delivery, third-party mail providers or upstream services will be uninterrupted, timely or error-free.

3. Indemnification and sub-admin liability

Workspace Master Admins agree to indemnify the Platform Owner against any legal claims. Master Admins are solely responsible for all actions, data handling, and potential breaches caused by Sub-Admins/staff invited into their workspace.

A workspace may seat one Master Admin and up to four Sub-Admins. Every invited Sub-Admin must accept a confidentiality pledge before accessing customer data, and all of their actions are logged with IP address and timestamp.

4. Data processor role (PDPA 2010)

The Platform acts strictly as a Data Processor under PDPA 2010. The Workspace Admin acts as the Data Controller responsible for obtaining consent from their end-customers.

As Processor, the Platform processes personal data only on the Controller's instructions, keeps workspace data logically isolated through row-level security, and makes the workspace audit trail available to the Controller.

5. Acceptable use and account security

Accounts, inboxes and OTP codes may only be used for subscriptions the Workspace Admin is lawfully entitled to operate. Credential sharing, resale of access without disclosure, and any use intended to bypass a third party's security controls are prohibited and may result in immediate suspension.

Security Checkpoints and Account Verification: Users are strictly prohibited from sharing their accounts with others. We monitor login patterns, IP addresses, and device signatures to enforce this rule. If we detect high-risk or suspicious activity, we may place your account in a "Strict Mode" security checkpoint. You agree to provide exact GPS location verification if prompted by the system. Refusal to complete this security checkpoint may result in temporary or permanent suspension of your access without a refund.

6. Suspension, cancellation and deletion

The Platform Owner may suspend a workspace that breaches these Terms. On subscription cancellation the Workspace Admin may request full deletion of that workspace's data; administrative audit records are retained where required for legal accountability.

7. Governing law

These Terms are governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (Act 709).

See also the Privacy Policy.