01
What this notice covers
This notice applies to daulatlabs.com and the DaulatLabs products linked from it, including Santaka, DaulatID, and related operator tools. It is a product notice, not a law-firm opinion and not an insurance-only policy.
Privacy
We use data to run the product.
DaulatLabs stores account, shop, order, phone, and optional verification records so the software can operate. We do not claim PDPA compliant.
02
What we use data for
We use personal and business data to run the product the customer asked for: accounts, workspace membership, orders, payments confirmation, support, billing, and security. We do not sell personal data.
03
Santaka guest orders
On a public Santaka menu, store, or bazaar, we use a guest's name and phone only to complete that order and contact them about it. Staff see those details so they can confirm payment and fulfil the order.
04
Accounts, shops, and verification files
Signed-in users have identity, email, and workspace records. A Santaka shop may store menus, stock, orders, DuitNow QR images, and optional business documents (registration, address, bank proof). Verification is optional for live selling. Rejected or suspended shops can still be blocked.
05
Phones, messages, and operators
Phone numbers appear on orders and, when the shop enables it, on WhatsApp or SMS templates the shop sends. DaulatLabs operators may access a workspace to debug, grant a Command subscription, or review a verification file the shop submitted.
06
We do not claim PDPA compliant
We use data to operate the product. We do not claim PDPA compliant. Malaysia counsel review, JPDP class confirmation, a named DPO, and an independent pentest or restore drill are still open. Do not treat this page as a compliance certificate.
07
Access and questions
Shop owners can edit their workspace records in Santaka. Identity and account requests go through DaulatID. For a copy, correction, or deletion request, email hello@daulatlabs.com.
Related: Terms. Contact hello@daulatlabs.com.