Privacy Policy

Data controller

Abadi IT Sdn Bhd (Registration No. 201001041671 (925599-P)) is the data controller for personal data processed through the URUS mobile app and web platform.

Registered office: No. 40, Jalan SS 23/7, Taman SEA, 47400 Petaling Jaya, Selangor, Malaysia.

Scope

This policy covers personal data processed through:

• The URUS mobile app, distributed via Google Play (Android) and the App Store (iOS)
• The URUS web platform, accessed by supervisors and operations staff in a browser

Information we collect

URUS mobile app

• Account credentials — email and password (passwords are hashed at rest and never stored in plain text)
• GPS coordinates captured at work-order check-in and check-out
• Photos captured during work and attached to work records
• Device metadata — operating system version, application version, and device model

URUS web platform

• Account credentials — email and password (passwords are hashed at rest and never stored in plain text)
• Work orders, assets, locations, and audit-trail entries created or modified by the user
• Browser metadata — user agent and IP address, retained for security logging only

How we use your data

• Provisioning work assignments to authorised users within the deploying organisation
• Generating audit trails that support billing and dispute resolution
• Displaying historical activity to authorised users within the same tenant

Sharing and sub-processors

We do not sell your data and we do not share it with third parties for advertising or analytics. Your data stays within the tenant configured for the deploying organisation.

The platform is hosted on cloud infrastructure operated by Abadi IT Sdn Bhd in Malaysia. The URUS mobile app does not embed third-party analytics, advertising SDKs, or trackers.

International transfers

Your data is hosted in Malaysia. We do not currently transfer your data to any third country.

Retention

Data is retained for the duration of the deploying organisation’s contract with Abadi IT Sdn Bhd, plus a defined wind-down period after termination. After that period, the tenant’s data is permanently deleted from production systems. Specific retention periods follow the contract between Abadi IT and the deploying organisation.

Your rights under PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data, subject to legal and contractual retention obligations
• Withdraw consent for any optional processing

To exercise these rights, contact us at the address below. Where you have a URUS administrator within your deploying organisation, contacting them first is often the fastest route.

Children

URUS is a B2B platform. The mobile app is invitation-only and is not directed at children under 13. We do not knowingly collect personal data from anyone under 13.

Changes to this policy

We may update this policy as the platform evolves or to reflect legal requirements. Material changes will be notified through the URUS web console and via email to account holders.

Contact for data requests

support@abadiit.com

Abadi IT Sdn Bhd
Registered office:
No. 40, Jalan SS 23/7, Taman SEA
47400 Petaling Jaya, Selangor, Malaysia