Skip to content
Orbit POS

Legal

Privacy policy

Orbit POS is a product of Built by Pali, operated by Mushnor Heritage Resources (201803323851 (002884313-T)), Pulau Pinang, Malaysia. This policy explains, under Malaysia's Personal Data Protection Act 2010 (PDPA), what personal data we handle and why.

Last updated: 04/10/2026

1. The Orbit POS app keeps your shop's data on your computer

Sales, products, stock, staff, members and every other record you create in the app are stored in a database file on your own computer. We do not receive, host or have access to that data. Backups are written where you choose.

If you use Orbit Finance, completed sales are passed to it through a folder on your own machine or network. Member identity is kept inside Orbit POS and is not sent across.

The licence check contacts our servers to see whether a key has been revoked. It sends the key, not your shop data, and the till keeps working if it cannot connect.

2. What this website collects

  • At checkout: your name, email address, optional business name and the edition you chose, so we can issue and email your licence key.
  • Payment details are entered on CHIP's hosted payment page. We never see or store your card or bank credentials.
  • If you email us: your message and email address, to reply.
  • Analytics: anonymous page-view counts through Vercel Web Analytics, which sets no cookies and does not identify you.

3. How we use it

  • To process your order and send your licence key
  • To provide support you ask for
  • To tell you when sales open, if you asked to be notified
  • To meet our legal and tax obligations

We do not sell personal data and we do not use it for third-party advertising.

4. Who we share it with

Only the processors needed to run the store: CHIP (payments), Supabase (order records), Vercel (website hosting) and our email provider. Each processes data on our behalf and only for that purpose.

5. How long we keep it

Order records are kept for seven years, as Malaysian tax and company law require for business records. Support emails are kept as long as needed to help you.

6. Your rights under the PDPA

You may ask to access or correct the personal data we hold about you, or withdraw consent for optional uses such as notifications. Email the address in section 7 and we will respond within 21 days.

7. Contact

Email support@builtbypali.com about anything in this policy.