Privacy Policy

Last updated: 6 April 2026

Dokuva is operated by ADCX Lab Hub (JM1033406-H). This policy explains how we collect, use, store and protect your data in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

1. Data We Collect

• Account data: Username, email, contact number (provided by you during onboarding).
• Uploaded documents: PDF files, images (JPG, PNG) containing invoices, receipts, bank statements or other financial documents.
• Extracted data: Vendor names, dates, amounts, tax information, categories and other fields extracted by AI from your documents.
• Usage data: Number of documents processed, timestamps, job history.

2. How We Use Your Data

• To process your uploaded documents and extract financial data using AI.
• To generate output files (Excel, CSV, JSON, XML) for your use.
• To track your usage against your subscription plan.
• To improve extraction accuracy over time.

We do not use your data for marketing, advertising, or share it with third parties for their own purposes.

3. AI Processing Disclosure

Dokuva uses cloud AI services to process your documents with AI. Under cloud AI services's data policy:

• Your data is not stored by cloud AI services after processing.
• Your data is not used to train AI models.
• Data is transmitted securely via encrypted connections (TLS 1.2+).

3A. Zero-Access Policy

Dokuva staff and administrators do not have access to the content of your uploaded documents or extracted data. All processing is fully automated — documents are processed by AI only. No human reviews, reads, or accesses your files at any point. Your documents remain private and accessible only to you through your account.

4. Data Storage & Security

• All uploaded documents and extracted data are stored on secure cloud storage with encryption at rest (AES-256) and in transit (TLS).
• Access to your data is restricted to your account only.
• Passwords are hashed and never stored in plaintext.
• We do not store credit card or banking information.

5. Data Retention

• Uploaded documents are retained for 30 days after processing, then automatically deleted.
• Extracted data (Excel/CSV/JSON/XML outputs) are retained for 90 days, then automatically deleted.
• Account data is retained for the duration of your subscription.
• You may request immediate deletion of your data at any time by contacting us.

6. Your Rights (PDPA)

Under the Personal Data Protection Act 2010, you have the right to:

• Access your personal data held by us.
• Correct any inaccurate personal data.
• Withdraw consent for data processing (this will result in account deactivation).
• Request deletion of your data.

7. Data Breach

In the event of a data breach that affects your personal data, we will notify you within 72 hours via email or phone with details of the breach and steps taken.

8. Contact

For any privacy-related enquiries or data requests:

ADCX Lab Hub (JM1033406-H)
Email: admin@adcxlab.com.my
Phone: +6013-626 1332