Privacy policy
Last updated 15 October 2026
Who we are
emsy is a payroll and HR service for Malaysian companies, run by Emsy Sdn Bhd. Questions about your data: privacy@emsy.my.
Whose data, and our role
A company signs up to emsy and enters its employees' records. For those records the company is the data user under the Personal Data Protection Act 2010, and emsy processes them for it. For the account you sign in with, emsy is the data user.
What emsy holds
- Your account: name, email address, a hash of your password (never the password itself), and, if you choose to sign in with Google or Apple, that account's identifier. With Apple, emsy also keeps a token Apple issues, encrypted, only so that deleting your account can revoke it; if you use Apple's Hide My Email, emsy receives only the relay address.
- Employee records your employer enters or you add: name, IC or passport number, date of birth, bank account, salary, EPF, SOCSO, EIS and tax numbers, leave, attendance, claims and their receipts, and payslips.
- Sign-in records: the time, the kind of device and the country — no IP address and no exact location. Deleted after 90 days.
- Billing: the company's plan and invoices. Card details are taken by Stripe; emsy never sees a card number.
In the emsy app
- Notifications: if you allow them, your phone's notification address (a token from Google or Apple) and whether it is an iPhone or Android. A notification says only that something is waiting — never a name or an amount.
- Camera: used only when you tap to photograph a receipt; the photo is attached to that claim and nothing else is taken.
- Face ID and fingerprint: checked by your phone alone. emsy never receives biometric data — only whether the phone said yes.
- No location, contacts, advertising identifier or tracking of any kind.
What emsy does with it
Runs your company's payroll and HR: calculating pay and statutory contributions, preparing the forms for KWSP, PERKESO and LHDN, payslips, leave, claims and attendance, and keeping your account secure. emsy does not sell data, does not use it for advertising, and does not share it with anyone for their own use.
Who processes it for emsy
- Cloudflare — hosting, the database and file storage, and the "Ask emsy" assistant (the question you type).
- Resend — delivering emsy's emails.
- Stripe — card payments for a company's plan.
- Google — sign-in with Google, if you use it; Firebase Cloud Messaging, to deliver notifications to the app.
- Apple — Sign in with Apple, if you use it; delivering notifications to an iPhone.
Your employer files statutory returns with KWSP, PERKESO and LHDN, as the law requires.
How long
Your account, until it is deleted. Employment and payroll records, for as long as your employer must keep them under Malaysian law (the Employment Act 1955 and the Income Tax Act 1967) — they stay with your employer after your account is deleted. Sign-in records, 90 days.
Your rights
You may ask to see or correct your personal data, and withdraw your consent. For employee records, ask your employer first; if there is no answer, write to privacy@emsy.my.
Deleting your account
In the app or on emsy.my: sign in, open My profile, then Delete my account. Your sign-in is removed at once, your phones stop receiving notifications, and if you signed in with Apple, emsy asks Apple to revoke its access. You can also ask by email to privacy@emsy.my from the address on the account. Records your employer must keep by law stay with your employer.
Security
Every connection is encrypted. Passwords are stored only as hashes. Owners can turn on two-factor authentication, and the app can lock itself with Face ID, a fingerprint or the phone's passcode.
Changes
When this policy changes, the date above changes with it. If a change affects what emsy holds about you, you will be told before it applies.