KiraDigit

KiraDigit Legal Centre

KiraDigit Terms and Conditions

The commercial terms governing account registration, subscription access, permitted use, billing, data ownership, uploaded files, AI features, backups, exports, and platform responsibilities.

T&CFull document

KiraDigit Terms and Conditions

Document Details

Effective Date
09 JUNE 2026
Last Updated
14 AUGUST 2026

1. Agreement and Definitions

1.1.These Terms and Conditions (the "Terms") govern access to and use of the KiraDigit Platform Services provided by MONZTECH SYSTEM (the "Provider", "we", "us" or "our").

1.2.By registering an account, accessing the Platform Services, starting a trial, or paying for a Subscription Plan, the Subscriber agrees to be bound by these Terms and the Privacy Policy.

1.3.If the person accepting these Terms does so on behalf of a company, partnership, sole proprietorship, or other business, that person represents that they are authorised to bind that business to this Agreement.

1.4.In these Terms:

Agreement means these Terms, the Privacy Policy, any applicable order form, and any additional terms accepted by the Subscriber.

Account Owner / Administrator means a person authorised by the Subscriber to manage the Organisation Account, billing, subscription settings, Invited Users, roles, permissions, and account-level instructions.

Invited Users means employees, directors, officers, contractors, accountants, auditors, advisers, agents, representatives, or other persons authorised by the Subscriber to access the Platform Services under the Subscriber's Organisation Account.

Organisation Account means a Platform account created, registered, maintained, or used by or on behalf of a Subscriber, including all workspaces, business profiles, users, roles, permissions, settings, subscriptions, integrations, and Your Data associated with that account.

Platform Services means the KiraDigit cloud-based accounting, e-invoicing, business finance management software, integrations, mobile access features, support services, and related digital tools provided by the Provider.

AI means artificial intelligence technologies, systems, models, tools, and services, including large language models (LLMs), generative AI models, machine-learning models, and other automated or assisted technologies that can analyse, classify, extract, generate, summarise, predict, suggest, or assist with content or data.

AI Services / AI Features means any feature in or connected to the Platform Services that uses AI, machine-learning, optical character recognition (OCR), document extraction, chatbot, AI assistant, summarisation, classification, matching, drafting, prediction, anomaly detection, or similar automated or assisted technology made available in or through the Platform Services.

Credentials and Secrets means usernames, passwords, multi-factor authentication methods, API keys, access tokens, refresh tokens, webhook signing secrets, private keys, integration credentials, or similar access credentials and secrets used to authenticate users or connect third-party services.

Provider means MONZTECH SYSTEM, operating the KiraDigit platform.

Subscriber means the company, business, partnership, sole proprietorship, association, organisation, or individual business owner that creates or maintains an account, subscribes to the Platform Services, or on whose behalf the Platform Services are used.

Subscription Plan means the pricing tier, billing cycle, features, limits, and service level selected by the Subscriber.

Generated Files / Exports means PDF files, Excel files, CSV files, JSON files, XML files, images, reports, documents, e-invoice files, or other downloadable outputs generated by the Platform Services from Your Data at the request of the Subscriber or an Invited User.

Uploaded Files means supported document files, spreadsheet files, CSV or text-based import files, image files, receipts, bank statements, invoices, supporting documents, attachments, import files, or other files uploaded, imported, attached, or stored by the Subscriber or an Invited User in the Platform Services.

Supported Upload File Types means the categories and formats of files made available for upload in the Platform from time to time, including supported document files, spreadsheet files, image files, text files, and business import files such as PDF, DOC, DOCX, XLS, XLSX, CSV, TXT, JPG, JPEG, PNG, HEIC, TIFF, XML, or similar formats. The Provider may add, remove, limit, or change supported formats, size limits, and upload rules from time to time for security, compatibility, or operational reasons.

Your Data means all data, documents, files, content, records, and materials uploaded, imported, entered, created, generated, exported, saved, stored, or otherwise processed by the Subscriber or Invited Users in or through the Platform Services, including accounting ledgers, invoices, tax records, customer records, supplier records, employee salary details, transaction records, attachments, Uploaded Files, and Generated Files / Exports.

2. Organisation Account, Registration, and Invited Users

2.1.The Subscriber must provide accurate, current, and complete registration, company, billing, and contact information, and must keep that information updated.

2.2.Where the Platform Services are registered, purchased, or used on behalf of a company, business, partnership, sole proprietorship, association, or other organisation, the account will be treated as an Organisation Account of that Subscriber.

2.3.The person completing registration, starting a trial, accepting these Terms, or managing an Organisation Account represents that they are authorised to do so on behalf of the Subscriber. If that person is not authorised, they must not create or use the Organisation Account on behalf of the Subscriber.

2.4.The Subscriber may appoint one or more Account Owners or Administrators to manage the Organisation Account, including billing details, subscription plan, business profile, Invited Users, roles, permissions, integrations, data exports, and account settings. The Provider may rely on instructions given by an Account Owner or Administrator as authorised instructions of the Subscriber.

2.5.Subject to the applicable Subscription Plan, the Subscriber may invite employees, directors, officers, contractors, accountants, auditors, advisers, agents, or other representatives to access the Platform Services as Invited Users. Each Invited User must use their own login credentials. Shared logins, shared passwords, and unauthorised credential sharing are not permitted.

2.6.The Subscriber is responsible for assigning appropriate roles and permissions to Invited Users, reviewing user access regularly, and promptly removing or disabling access for any person who is no longer authorised to use the Organisation Account.

2.7.The Subscriber is responsible for all activity carried out through the Organisation Account, including activity by Account Owners, Administrators, and Invited Users. Any action, omission, upload, approval, submission, change, deletion, instruction, export, integration, or use of the Platform Services by an Account Owner, Administrator, or Invited User will be treated as an action of the Subscriber.

2.8.The Provider is not responsible for resolving internal disputes between the Subscriber and its owners, directors, partners, employees, contractors, Account Owners, Administrators, or Invited Users. Unless required by law or unless the Provider has received sufficient evidence that account authority has changed, the Provider may continue to follow the instructions of the Account Owner or Administrator recorded in the Platform.

2.9.All data uploaded, imported, created, processed, generated, saved, exported, or downloaded through an Organisation Account is treated as Your Data of the Subscriber and not as the personal property of any individual Account Owner, Administrator, or Invited User, except where applicable law requires otherwise.

3. Licence and Permitted Use

3.1.Subject to the Subscriber's compliance with this Agreement and payment of all applicable fees, the Provider grants the Subscriber a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform Services during the active subscription term solely for the Subscriber's internal business purposes.

3.2.The Subscriber must not, and must ensure that Invited Users do not:

Reverse engineer, decompile, disassemble, copy, or attempt to extract the source code or underlying structure of the Platform Services.

Modify, adapt, translate, reproduce, distribute, resell, rent, lease, sublicense, or create derivative works from the Platform Services.

Use the Platform Services to provide a competing product or service, benchmark the Platform for publication without our written consent, or access the Platform for unauthorised commercial exploitation.

Bypass access controls, usage limits, authentication controls, security controls, or technical restrictions.

Use the Platform Services in a way that may damage, disable, overburden, impair, or interfere with the Platform, its infrastructure, or other users.

4. Acceptable Use

4.1.The Subscriber must use the Platform Services lawfully and responsibly. The Subscriber must not upload, transmit, process, or store any content or data that:

Is unlawful, fraudulent, defamatory, infringing, misleading, or collected without proper authority.

Contains malware, malicious code, ransomware, spyware, worms, viruses, or harmful scripts.

Violates third-party intellectual property, confidentiality, privacy, employment, tax, accounting, or data protection rights.

Attempts to gain unauthorised access to systems, accounts, networks, data, or infrastructure.

Is unnecessary or excessive for the Subscriber's legitimate business use of the Platform Services.

4.2.We may suspend or restrict access where we reasonably believe the Subscriber or an Invited User has breached this section, created a security risk, or exposed the Provider or other users to legal or operational risk.

4.3.The Platform Services are designed to accept only Supported Upload File Types made available in the Platform, such as supported document files, spreadsheet files, CSV or text-based files, image files, and business import files. The Platform is not intended to accept executable files, software installers, system files, command files, scripts, active code, or other high-risk files unless the Provider expressly enables a controlled feature for that purpose.

4.4.The Provider may apply upload controls, including file type validation, file extension checks, MIME type checks, file-size limits, malware or suspicious-content scanning, metadata review, content conversion, preview generation, quarantine, rejection, deletion, or access restriction where reasonably necessary for security, compatibility, service integrity, or legal compliance.

4.5.The Provider may reject, block, quarantine, disable, or remove Uploaded Files that are unsupported, corrupted, encrypted, password-protected, misleadingly named, disguised as another file type, contain macros, embedded scripts, external active content, malware indicators, or otherwise create security, legal, technical, or operational risk.

4.6.File validation and scanning are risk-reduction measures only and do not guarantee that every harmful, corrupted, misleading, or inappropriate file will be detected. The Subscriber must ensure that files uploaded by the Subscriber or Invited Users come from trusted sources and are appropriate for the Subscriber's business use of the Platform Services.

4.7.The Subscriber must not use AI Services / AI Features to process unlawful data, data collected without proper authority, unnecessary sensitive data, harmful content, malware, or content that infringes third-party rights. The Subscriber is responsible for ensuring that any data submitted to AI Services / AI Features may lawfully be processed for the intended business purpose.

5. Subscription Plans, Trials, Billing, Payment, and Taxes

5.1.The Platform Services are provided on a recurring subscription basis, usually monthly or annually depending on the Subscription Plan selected during registration or purchase.

5.2.Unless the relevant Subscription Plan, order form, or checkout page states otherwise, subscriptions renew automatically at the end of each billing cycle until cancelled by the Subscriber or terminated in accordance with these Terms.

5.3.Subscription fees are charged in advance in Ringgit Malaysia (MYR), unless otherwise stated. Fees are exclusive of Sales and Service Tax (SST), withholding tax, bank charges, currency conversion charges, and other applicable taxes or charges, which may be added or borne by the Subscriber where required by law.

5.4.The Subscriber must provide accurate billing information and authorises the Provider, Stripe as the Provider's main payment gateway, and any other authorised payment service provider made available in the Platform to charge the selected payment method for subscription fees, renewals, upgrades, usage-based charges, and applicable taxes.

5.5.Where payment is processed by Stripe or another third-party payment service provider, the Provider does not intentionally store full payment card numbers, CVV/CVC codes, PINs, or online banking credentials. The Provider may store limited payment metadata such as transaction IDs, payment status, invoices, receipts, card brand, last four digits, and expiry month/year.

5.6.We may offer free trials or promotional plans. Unless the trial offer states otherwise, trial access may be limited, may be modified or withdrawn at any time, and may be suspended or deleted if the Subscriber does not convert to a paid plan before the trial ends.

5.7.If payment fails, we may retry payment during a grace period of up to ten (10) days. If payment remains unresolved, we may suspend the account, make it read-only, downgrade access, or terminate the subscription.

5.8.The Subscriber may cancel its subscription through the billing dashboard or another method made available by the Provider. Cancellation takes effect at the end of the current billing cycle.

6. Refunds and Credits

6.1.Unless required by law or expressly stated in the relevant Subscription Plan, subscription fees are billed in advance and are generally non-refundable.

6.2.Monthly subscription fees are non-refundable once paid, except where required by law or where the Provider approves a refund for duplicate, erroneous, or exceptional circumstances.

6.3.Annual subscription refunds or credits may be considered case-by-case at the Provider's discretion. Approval may depend on the reason for the request, usage, remaining subscription period, account status, and any costs already incurred by the Provider.

6.4.A cancellation stops future renewal charges but does not automatically create a refund or credit for the current billing cycle.

7. Customer Data Ownership and Processing

7.1.The Subscriber retains all rights, title, and interest in Your Data. The Provider does not claim ownership of Your Data.

7.2.The Subscriber grants the Provider a limited, non-exclusive, worldwide licence to host, process, transmit, display, copy, secure, and, for application database records, back up Your Data solely as necessary to provide, maintain, secure, support, improve, and operate the Platform Services and comply with this Agreement and applicable law. Uploaded Files are stored for use in the Platform but are not backed up by the Provider as separate recoverable file backups unless expressly stated in these Terms, the Privacy Policy, or a separate written agreement.

7.3.The Subscriber represents and warrants that it owns Your Data or has all rights, notices, consents, permissions, and lawful bases required to upload, import, attach, disclose, store, generate, export, download, and process Your Data through the Platform Services, and that Your Data does not violate the rights of any person or business.

7.4.For Your Data, the Provider will act as a data processor and will process Your Data only to provide and support the Platform Services, comply with lawful instructions, meet legal or security obligations, and perform the limited processing described in the Privacy Policy.

7.5.The Provider will maintain reasonable confidentiality, technical, and organisational safeguards and will use authorised personnel and service providers only where reasonably necessary for Platform operations.

7.6.The Provider will provide reasonable assistance, where technically feasible and commercially reasonable, for data subject requests, data export, security incidents, and compliance enquiries relating to Your Data.

7.7.The Subscriber is responsible for the accuracy, legality, reliability, quality, retention, and suitability of Your Data.

7.8.The Platform Services may generate PDF files, Excel files, CSV files, JSON files, XML files, e-invoice files, reports, summaries, statements, attachments, or other Generated Files / Exports based on Your Data. These outputs are generated for the Subscriber's internal business use and remain the responsibility of the Subscriber to review, validate, retain, share, and use lawfully.

7.9.Uploaded Files and Generated Files / Exports may contain personal data, confidential business information, accounting records, tax records, payroll information, customer or supplier details, or other sensitive business data. The Subscriber is responsible for ensuring that only authorised users can upload, generate, view, download, store, or share such files and for configuring Organisation Account permissions accordingly.

8. Backups, Data Availability, Export, and Deletion

8.1.The primary storage location for active Platform database records and Uploaded Files is Supabase managed cloud services hosted on AWS Asia Pacific (Singapore) (ap-southeast-1) region.

8.2.We may perform automated periodic backups of application database records for disaster recovery, continuity, security, and operational resilience. Backup frequency, retention, restoration process, and restore points may vary depending on infrastructure, feature, and Subscription Plan. Database backups may include account records, business records, settings, audit records, file metadata, and file references.

8.3.Uploaded Files and saved file attachments are stored in the Platform for the Subscriber's use, but they are not included in the Provider's routine database backup process and are not backed up by the Provider as separate recoverable file backups unless we expressly state otherwise or enable a specific file-backup feature. A database backup may restore database records or file references without guaranteeing restoration of the actual Uploaded File contents.

8.4.Because Uploaded Files normally originate from the Subscriber, Invited Users, the Subscriber's devices, or the Subscriber's own business systems, the Subscriber is responsible for retaining original source copies of Uploaded Files outside the Platform and for backing up, protecting, retaining, and restoring those files according to the Subscriber's own business, accounting, tax, audit, statutory, and legal requirements.

8.5.Backups, monitoring, redundancy, and security controls are risk-reduction measures only. They do not guarantee that Your Data, Uploaded Files, Generated Files / Exports, settings, logs, or records will never be lost, corrupted, delayed, unavailable, overwritten, or unrecoverable.

8.6.If data loss, corruption, deletion, outage, or availability issues occur, the Provider will use commercially reasonable efforts, where technically feasible, to investigate the issue and restore affected database records from available backups or other recovery sources. Restoration may be incomplete, delayed, or unavailable due to backup timing, technical limitations, unavailable Uploaded File backups, data corruption, third-party service failure, user action, security incident, legal requirement, or other unexpected events.

8.7.To the maximum extent permitted by Malaysian law, the Provider is not responsible for loss, corruption, deletion, unavailability, or failure to restore Your Data, Uploaded Files, Generated Files / Exports, or file contents except to the extent directly caused by the Provider's fraud, gross negligence, wilful misconduct, or any liability that cannot legally be excluded. This limitation applies even where the Provider maintains normal backup, monitoring, security, disaster recovery, and operational controls.

8.8.The Subscriber should maintain independent exports and backups of important business, accounting, tax, payroll, statutory, and operational records, and should keep original copies of all files uploaded to the Platform. The Platform Services are not a substitute for the Subscriber's own recordkeeping, file backup, audit, and business continuity controls.

8.9.Upon cancellation or termination, the account will generally enter a thirty (30) day read-only export period, during which the Subscriber may export Your Data in supported formats such as PDF, Excel, CSV, JSON, XML, or other formats made available in the Platform.

8.10.After the export period, active account data will be deleted or made inaccessible from production systems, unless retention is required or permitted by Malaysian law, tax, accounting, audit, security, fraud-prevention, backup, or dispute-resolution requirements.

8.11.Encrypted database backup copies may remain for up to ninety (90) days after production deletion and will be overwritten according to the normal backup cycle. Backup data is not normally restored except for disaster recovery, legal, security, or operational purposes, and database backups are not intended as a guaranteed recoverable backup of Uploaded File contents.

8.12.When a Subscriber or Invited User requests a PDF, Excel, CSV, JSON, XML, report, statement, e-invoice file, or other download, the Platform Services may temporarily process, assemble, convert, cache, or transmit the Generated File / Export solely to make the file available for download or delivery.

8.13.Unless the Subscriber or an Invited User chooses to save, attach, archive, upload, or store a Generated File / Export within the Platform Services, the Provider does not intentionally retain a separate permanent copy of that generated file after it has been generated and delivered for download. The underlying Your Data, related records, limited metadata, audit logs, security logs, and billing or operational logs may continue to be stored in accordance with this Agreement and the Privacy Policy.

8.14.Temporary copies of Generated Files / Exports may exist for a limited time in memory, processing queues, temporary storage, download links, cache, error logs, or security systems while the file is being generated, delivered, retried, scanned, monitored, or troubleshot. Such temporary copies will be deleted, expired, or overwritten according to the Provider's normal technical processes.

8.15.Once a Generated File / Export or Uploaded File is downloaded, emailed, printed, shared, saved to a user device, retained as an original source file, or transferred to a third-party service outside the Platform Services, the Subscriber is responsible for its storage, confidentiality, security, backup, sharing, retention, deletion, and lawful use. The Provider is not responsible for loss, disclosure, alteration, misuse, or deletion of files after they leave the Platform Services, except to the extent caused by the Provider's breach of this Agreement or applicable law.

8.16.If a Subscriber or Invited User uploads, imports, attaches, or saves any file in the Platform Services, including a previously downloaded Generated File / Export, that file will be treated as Your Data and may be stored, processed, exported, and deleted in accordance with this Agreement and the Privacy Policy. Such file contents are not backed up by the Provider as separate recoverable file backups unless expressly stated otherwise.

8.17.The Subscriber must ensure that Uploaded Files are lawful, accurate where relevant, free from malware, within the Supported Upload File Types and file-size limits made available in the Platform, not excessive for the intended business purpose, and uploaded only by authorised users. The Provider may restrict, scan, reject, quarantine, delete, or disable access to Uploaded Files where reasonably necessary for security, legal compliance, service integrity, or acceptable-use enforcement.

9. Credentials, Secrets, Security, and Support Access

9.1.The Subscriber is responsible for maintaining the confidentiality and security of all Credentials and Secrets, including usernames, passwords, multi-factor authentication methods, devices, email accounts, integrations, API keys, access tokens, refresh tokens, webhook signing secrets, private keys, and Organisation Account permissions.

9.2.The Platform may use Supabase Auth or another authorised authentication provider for user login, password handling, session handling, password reset, and account authentication. The Provider does not intentionally store user passwords in plaintext in the Platform application database.

9.3.Where integration credentials, API keys, access tokens, refresh tokens, webhook signing secrets, private keys, or similar secrets are required for a Platform feature or integration, the Provider may store them using Supabase Vault or another secure secrets-management mechanism.

9.4.The Subscriber must not upload, paste, share, or submit unnecessary passwords, API keys, access tokens, refresh tokens, private keys, webhook secrets, or other sensitive credentials or secrets into Uploaded Files, AI Services / AI Features, chatbot messages, support messages, prompts, or free-text fields unless required for the intended feature or integration.

9.5.The Provider may apply masking, redaction, access restrictions, logging restrictions, or other security controls for Credentials and Secrets where technically and operationally reasonable. The Provider is not responsible for loss, misuse, exposure, unauthorised access, third-party use, or compromise of Credentials and Secrets caused by the Subscriber's sharing, misconfiguration, insecure storage, disclosure, or failure to revoke, rotate, or update compromised credentials.

9.6.The Subscriber must promptly notify the Provider of suspected unauthorised access, credential compromise, security incidents, misuse of the Platform Services, or unauthorised changes to Organisation Account permissions.

9.7.Authorized support or engineering personnel may access the Subscriber's account or Your Data only where reasonably necessary to provide requested support, troubleshoot issues, maintain system stability, investigate suspected security incidents, comply with legal obligations, or prevent operational harm.

9.8.Where practical, support access will be based on Subscriber authorisation or a support request. Support access will be limited to authorised personnel and recorded in audit logs where technically available.

10. Accounting, Tax, E-Invoicing, and Filing Disclaimer

10.1.The Platform Services are software tools only. The Provider does not provide accounting, audit, tax, legal, payroll, corporate secretarial, investment, or financial advice.

10.2.The Subscriber remains responsible for reviewing, validating, approving, retaining, filing, and submitting all invoices, e-invoices, tax records, statutory records, payroll records, reports, entries, calculations, AI/OCR-extracted data, AI-generated suggestions, and other outputs generated by or through the Platform Services before relying on them.

10.3.The Provider does not guarantee that Subscriber-entered data, imported data, Uploaded Files, AI/OCR-extracted data, AI-generated suggestions, third-party integrations, calculations, tax treatment, e-invoice submissions, statutory filings, or reports are complete, accurate, current, accepted by any authority, or suitable for the Subscriber's particular circumstances.

10.4.The Subscriber should seek advice from qualified accountants, tax agents, auditors, legal advisers, or other professionals where appropriate.

11. AI Services, OCR, and Automated Assistance

11.1.The Platform Services may include, or may in the future introduce, AI Services / AI Features such as OCR, document extraction, invoice or receipt data capture, image-to-text processing, transaction categorisation, matching suggestions, summaries, search assistance, chatbot support, AI assistants, workflow suggestions, drafting assistance, anomaly detection, and similar automation.

11.2.When the Subscriber or an Invited User uses an AI Service / AI Feature, the Subscriber authorises the Provider to process, transmit, disclose, and receive relevant data, prompts, Uploaded Files, extracted text, outputs, feedback, and metadata as reasonably necessary to provide, secure, monitor, troubleshoot, and improve that feature.

11.3.AI Services / AI Features may be provided using authorised third-party AI, OCR, document-extraction, machine-learning, model, or automation service providers. Those providers may process, log, review, or retain inputs, outputs, prompts, Uploaded File contents, extracted text, technical metadata, and related information according to their own terms, privacy notices, data processing terms, service settings, abuse-monitoring requirements, security controls, and retention practices.

11.4.AI Services / AI Features may use reputable or suitable AI model and service providers, which may include, without limitation, OpenAI/GPT, Google Gemini, Anthropic Claude, Qwen, DeepSeek, or other AI, OCR, document-extraction, model, machine-learning, automation, or chatbot providers selected by the Provider based on the relevant feature, availability, performance, security, cost, and business needs. The Provider may add, remove, replace, or change AI providers or models from time to time, and different features may use different providers or models. The Provider does not guarantee that every AI service provider will offer zero retention, zero logging, or identical data-residency terms unless those terms are expressly made available for the relevant feature.

11.5.Third-party AI service providers may have terms or service settings that permit inputs, outputs, prompts, Uploaded File contents, extracted text, technical metadata, or related information to be used to develop, improve, optimise, or train their models or services. The availability, scope, and effectiveness of opt-out, zero-training, zero-retention, regional-processing, or similar controls depend on the relevant provider, service tier, region, feature, and configuration. Third-party providers may change their terms, privacy notices, data-processing terms, service settings, retention practices, or model-training practices from time to time, including without prior notice to the Provider. Where such controls are expressly made available and reasonably practicable, the Provider may apply them, but does not guarantee their availability, scope, continued operation, or effectiveness. To the maximum extent permitted by applicable law, the Provider is not responsible for a third-party provider's terms, policy changes, data-handling practices, or acts or omissions that are outside the Provider's reasonable control. The Subscriber acknowledges that third-party processing remains subject to the relevant provider's then-current terms, privacy notices, service settings, security controls, retention practices, and data-handling practices and should not assume that any provider offers zero-training or similar treatment unless expressly stated for the relevant feature, provider, service tier, region, and configuration.

11.6.The Subscriber must ensure that it has all rights, notices, consents, permissions, and lawful bases required to submit Your Data, Uploaded Files, personal data, confidential information, Credentials and Secrets, or third-party data to AI Services / AI Features. The Subscriber should avoid submitting unnecessary, excessive, sensitive, or regulated data unless it is required for the intended business purpose.

11.7.The Subscriber and Invited Users must not submit unnecessary Credentials and Secrets, passwords, API keys, access tokens, private keys, webhook secrets, or similar sensitive credentials into AI Services / AI Features, OCR, chatbot messages, support messages, prompts, Uploaded Files, or free-text fields unless required for the intended feature. If such information is submitted, it may be processed by the Provider and authorised third-party AI, OCR, model, or automation providers in accordance with these Terms, the Privacy Policy, and the relevant provider terms, service settings, security controls, and retention practices. The Subscriber remains responsible for revoking, rotating, or updating any credential that may have been exposed.

11.8.AI, OCR, extraction, categorisation, chatbot, and assistant outputs may be inaccurate, incomplete, duplicated, outdated, biased, misread, or unsuitable for a particular purpose. The Subscriber and Invited Users must review, verify, correct, and approve all AI-generated or OCR-extracted outputs before relying on them, posting them to ledgers, sending them to third parties, filing them with authorities, or using them for business, accounting, tax, payroll, legal, or financial decisions.

11.9.AI Services / AI Features are software-assistance tools only. They do not provide accounting, audit, tax, legal, payroll, corporate secretarial, investment, financial, or professional advice. The Subscriber remains responsible for decisions, approvals, filings, submissions, communications, and actions taken based on AI-generated or OCR-extracted outputs.

11.10.To the maximum extent permitted by Malaysian law, the Provider is not liable for loss, damage, penalties, filing errors, incorrect records, business decisions, missed obligations, or third-party claims arising from reliance on unreviewed, incorrect, incomplete, or unsuitable AI-generated or OCR-extracted outputs, except where directly caused by the Provider's fraud, gross negligence, wilful misconduct, or liability that cannot legally be excluded.

11.11.AI Services / AI Features may be experimental, beta, usage-limited, paid, modified, suspended, or discontinued from time to time. The Provider may apply additional limits, notices, settings, acceptable-use rules, or fees to AI Services / AI Features.

11.12.The Provider does not intentionally use Subscriber business data, Uploaded Files, prompts, or AI outputs to train its own general-purpose AI models unless the Subscriber has given permission, the data has been aggregated or de-identified so that it no longer identifies the Subscriber or individuals, or the use is otherwise permitted by applicable law.

12. Service Availability, Maintenance, and Changes

12.1.We aim to provide reliable Platform Services, but the Platform Services are provided on an "as is" and "as available" basis. We do not guarantee uninterrupted, error-free, completely secure, or always-available access.

12.2.We may perform scheduled or emergency maintenance, upgrades, security updates, bug fixes, or infrastructure changes. Where practical, we will provide advance notice and schedule maintenance during lower-usage periods in Malaysian time.

12.3.We may modify, improve, add, remove, or discontinue features from time to time, provided that we will use reasonable efforts to avoid materially reducing core paid functionality during an active subscription term without reasonable notice.

13. Third-Party Services, Integrations, and Links

13.1.The Platform Services may integrate with, rely on, or link to third-party services such as Stripe for payment processing, Supabase and AWS for infrastructure, AI/OCR/model providers for AI Services / AI Features, email/SMS delivery providers, analytics tools, customer support tools, banking feeds, e-invoicing systems, websites, APIs, or other services selected by the Provider or connected by the Subscriber.

13.2.Third-party services may be subject to separate terms, privacy notices, fees, availability limits, or technical restrictions. The Provider is not responsible for third-party service outages, data errors, integration failures, website content, external advice, changes, or decisions outside the Provider's reasonable control.

13.3.The Subscriber is responsible for reviewing and complying with any third-party terms that apply to services the Subscriber chooses to connect or use with the Platform Services.

13.4.AI/OCR/model providers are third-party services. Their availability, accuracy, data-retention practices, model behaviour, content restrictions, service regions, and security controls may differ from the Provider's Platform Services and may change over time. The Provider is not responsible for third-party AI service outages, model errors, provider-side retention, provider-side security incidents, or provider policy changes except to the extent liability cannot legally be excluded.

14. Intellectual Property and Feedback

14.1.The Provider and its licensors retain all rights, title, and interest in and to the Platform Services, software, source code, design, user interface, workflows, documentation, trademarks, service marks, and related intellectual property.

14.2.The Subscriber receives only the limited licence expressly stated in these Terms. No ownership or intellectual property rights are transferred to the Subscriber except for the Subscriber's ownership of Your Data.

14.3.If the Subscriber provides ideas, suggestions, feature requests, feedback, or recommendations, the Provider may use them without restriction or obligation, provided that we do not disclose the Subscriber's confidential information in doing so.

15. Confidentiality

15.1.Each party may receive confidential information from the other party. The receiving party must use confidential information only for the purposes of this Agreement, protect it using reasonable care, and not disclose it except to personnel, advisers, contractors, or service providers who need to know it and are bound by confidentiality obligations.

15.2.Confidentiality obligations do not apply to information that is public through no breach of this Agreement, already known without restriction, independently developed, lawfully received from a third party, or required to be disclosed by law or regulatory authority.

16. Suspension and Termination

16.1.We may suspend or restrict access to the Platform Services if:

Fees are overdue and not resolved after the applicable grace period.

The Subscriber or an Invited User breaches this Agreement or applicable law.

Use of the Platform creates a security, operational, legal, or reputational risk.

Suspension is required by law, court order, regulator, payment provider, infrastructure provider, or government authority.

16.2.Either party may terminate the Agreement if the other party materially breaches the Agreement and fails to remedy the breach within thirty (30) days after written notice, unless the breach is incapable of remedy or immediate termination is required for security or legal reasons.

16.3.Termination does not affect accrued rights, unpaid fees, confidentiality obligations, liability limitations, intellectual property rights, indemnities, or provisions intended to survive termination.

17. Indemnity

17.1.The Subscriber agrees to indemnify and hold the Provider harmless from claims, losses, liabilities, penalties, damages, and reasonable legal costs arising from:

The Subscriber's or Invited Users' misuse of the Platform Services.

The Subscriber's breach of this Agreement or applicable law.

Your Data, including claims that Your Data infringes third-party rights or was collected, disclosed, uploaded, retained, or processed without proper authority.

The Subscriber's or Invited Users' disclosure, misuse, exposure, misconfiguration, failure to secure, or failure to revoke or rotate Credentials and Secrets.

The Subscriber's accounting, tax, e-invoicing, payroll, statutory filing, or business decisions based on Subscriber-entered data or Platform outputs.

18. Disclaimers and Limitation of Liability

18.1.To the maximum extent permitted by Malaysian law, the Platform Services, including AI Services / AI Features, OCR, extraction, categorisation, chatbot, and assistant features, are provided on an "as is" and "as available" basis. We disclaim all implied warranties, guarantees, and conditions, including merchantability, fitness for a particular purpose, non-infringement, uninterrupted availability, error-free operation, complete security, complete accuracy, and suitability of AI-generated or OCR-extracted outputs.

18.2.To the maximum extent permitted by Malaysian law, and except as expressly stated in these Terms, the Provider will not be liable for indirect, incidental, special, exemplary, punitive, or consequential losses, including lost profits, lost revenue, lost business opportunities, loss of goodwill, loss or corruption of data, loss of Uploaded Files, failure to restore data or file contents, AI/OCR extraction errors, AI-generated inaccuracies, model errors, chatbot or assistant responses, business interruption, payment disputes, third-party service failures, credential misuse or compromise caused by Subscriber action, or cost of substitute services.

18.3.To the maximum extent permitted by Malaysian law, the Provider's total aggregate liability arising out of or related to the Platform Services or this Agreement is limited to the amount actually paid by the Subscriber to the Provider for the relevant Subscription Plan during the twelve (12) months immediately before the event giving rise to the claim.

18.4.Nothing in this Agreement limits liability that cannot legally be limited or excluded under applicable law. The liability cap does not apply to unpaid fees, fraud, gross negligence, wilful misconduct, or misuse of the other party's intellectual property.

19. Changes to these Terms

19.1.We may update these Terms from time to time. Material changes will be notified by email, dashboard notice, or another reasonable method. Where practical, we will provide at least fourteen (14) days' notice before material changes take effect, unless a shorter period is required for legal, security, fraud-prevention, or operational reasons.

19.2.Continued use of the Platform Services after the effective date of the updated Terms constitutes acceptance of the updated Terms. If the Subscriber does not agree to the updated Terms, the Subscriber should stop using the Platform Services and cancel the subscription before the updated Terms take effect.

20. General Terms

20.1.This Agreement is the complete agreement between the Provider and the Subscriber regarding the Platform Services and replaces prior discussions or agreements about the same subject matter.

20.2.If any provision of this Agreement is found to be invalid or unenforceable, the remaining provisions will continue in effect, and the invalid provision will be replaced or interpreted as closely as legally possible to its original purpose.

20.3.A failure or delay in enforcing any provision of this Agreement does not waive the right to enforce that provision later.

20.4.The Subscriber may not assign or transfer this Agreement without the Provider's prior written consent. The Provider may assign or transfer this Agreement in connection with a merger, acquisition, corporate restructuring, financing, or sale of all or part of its business, provided that the successor continues to protect Your Data in accordance with the Privacy Policy.

20.5.The Provider will not be responsible for delay, failure, interruption, data unavailability, service degradation, or inability to perform caused by events outside its reasonable control, including failures of cloud infrastructure, data centres, internet service providers, telecommunications networks, payment gateways, banking systems, e-invoicing systems, power supply, cyberattacks, malware, denial-of-service attacks, natural disasters, fire, flood, war, civil unrest, labour disputes, government action, regulatory action, or other unexpected events. The Provider will use reasonable efforts to mitigate the impact and restore affected Platform Services where practical.

21. Governing Law and Dispute Resolution

21.1.This Agreement is governed by the laws of Malaysia.

21.2.If a dispute arises, the parties agree to first try to resolve it through good-faith informal discussions. If the dispute is not resolved within thirty (30) days after written notice of the dispute, either party may submit the dispute to the non-exclusive jurisdiction of the ordinary courts of Malaysia.

22. Notices and Contact

22.1.Notices to the Subscriber may be sent by email, dashboard message, in-product notice, invoice notice, or another reasonable method using the latest contact information in the Subscriber account.

22.2.Notices to the Provider and general contact information should use the details below, unless the Platform or a separate written agreement provides another valid notice method. KiraDigit is the product/platform website, while the Provider may use the monztechsys.com domain for official company, support, billing, privacy, and notice communications.

Provider
MONZTECH SYSTEM
Company Registration No.
202103253078 (TR0248202-U)
Brand / Platform
KiraDigit
Product Website
https://kiradigit.my
Platform Website
https://app.kiradigit.my
Company Website
https://monztechsys.com
Privacy Email
privacy@monztechsys.com
Support Email
support@monztechsys.com