← Back

Privacy Policy

Last updated: 8 May 2026

1. Introduction

MekaHub.my ("we", "our", or "us") is a workshop management platform operated by BalootMY Digital Agency (Registration No. NS0322595-U). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at mekahub.my and any associated services.

By using MekaHub.my, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following categories of information:

Account Information

  • Workshop name, owner name, email address, and password when you register
  • Business address, phone number, and operating hours during onboarding
  • Workshop logo (if uploaded)

Customer Data (entered by you)

  • Your customers' names, phone numbers, email addresses, and vehicle information
  • Service records, job cards, quotations, and invoices
  • Payment records and transaction history
  • Loyalty points balances

Usage Data

  • IP address, browser type, and device information
  • Pages visited and features used within the platform
  • Error logs and performance data

Payment Information

We do not store full card numbers. Your MekaHub subscription is billed through the Apple App Store (iPhone) and Google Play (Android, coming soon), so your card details are held by Apple or Google, never by us. Customer payments you collect are recorded manually (cash, bank transfer or cheque). We store only the amount and method you enter.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the MekaHub.my platform
  • Process your subscription payments and manage your account
  • Send service-related emails (account confirmation, password reset, billing receipts)
  • Monitor and analyse usage to improve our platform
  • Respond to your support requests

We do not use your data for advertising purposes. MekaHub.my products are ad-free.

4. How We Share Your Information

We do not sell your personal data to third parties. We share data only in the following circumstances:

Payment Processors

  • Apple App Store (subscription billing): apple.com/legal/privacy
  • Google Play (subscription billing, coming soon): policies.google.com/privacy
  • Your customers' payment data is subject to these providers' privacy policies.

Service Providers

  • Supabase (database and authentication, hosted in Singapore)
  • Vercel (hosting and content delivery)

These providers are contractually obligated to protect your data.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

5. Data Security

We implement industry-standard security measures including:

  • All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • Row-level security (RLS) ensuring each workshop can only access its own data
  • Payment credentials stored with AES-256-GCM encryption
  • Database hosted in Singapore (Supabase) with regular automated backups
  • Access to production systems limited to authorised personnel only

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take all reasonable steps to protect your information.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your workshop data (customers, vehicles, job cards, invoices) in CSV format
  • Withdraw consent for non-essential data processing

To exercise any of these rights, contact us at hello@mekahub.my.

8. Cookies

MekaHub.my uses only essential cookies necessary for authentication and session management. We do not use advertising or tracking cookies.

9. Children's Privacy

MekaHub.my is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform. Your continued use of MekaHub.my after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy:

Email: hello@mekahub.my
Website: mekahub.my