This policy explains how DZ Com Technologies handles personal data in SnapShiShan, in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia. For data a customer organisation records about its own staff and devices, that organisation is the data user and we process the data on its behalf. For workspace registration and account administration, we are the data user.
1. What we collect
| Workspace registration | Organisation name, workspace ID, administrator name, email address and username. Passwords are stored only as one-way hashes. |
|---|---|
| User accounts | Name, username, email, role and permissions of each user an administrator adds. |
| Inventory records | Items, categories, serial numbers, specifications, uploaded photos and files, check-out and check-in movements (event, location, responsible person, dates, notes) and checklists. |
| Windows Inventory Agent | Computer name, device ID, manufacturer, model, serial number, operating system, processor, memory, motherboard, BIOS, graphics, storage, display, battery, network adapters with MAC and IP addresses, and installed software. Each status message adds processor, memory and disk usage, uptime, IP address and the name of the Windows user signed in. collect-csv.exe writes the same hardware details to a file on the computer where it runs; that file reaches us only if you import it. |
| Security | IP address and time of sign-in attempts and registration requests, session identifiers, and a log of administrative actions. |
| Contact form | Name, email, phone number, company and your message. |
The phone scanner uses the camera only inside your browser. Camera images are never uploaded or stored; only the decoded code is sent.
2. Why we use it
- To create and run your workspace, sign users in and enforce permissions.
- To show inventory, device status and reports to your authorised users.
- To send verification codes and account and service notices by email.
- To protect the Service against abuse, investigate incidents and keep backups.
- To answer enquiries you send us.
We do not sell personal data or use it for advertising.
3. Notice to staff whose PCs run the agent
If your organisation installed the SnapShiShan Inventory Agent on your computer, it sends the hardware and software details listed in clause 1 to your organisation's workspace every hour, and a short status message every minute. While it runs, its icon is shown in the corner of your taskbar. It does not read your files, emails, browsing history, keystrokes or screen. Questions about how your organisation uses this data should go to your organisation, which is responsible for informing you about it.
5. How long we keep it
| Workspace data | While the workspace is active, plus 30 days after it closes |
|---|---|
| Agent status history | 24 hours |
| Agent change log | Until the computer's item is deleted from the workspace |
| Sign-in attempt records | 30 days |
| Backups | A limited period, then deleted |
6. Security
Each organisation has its own database. Traffic is encrypted with HTTPS. Passwords are hashed. The Agent key is checked against a SHA-256 hash; your workspace also keeps a copy so that its administrators can view it and download a ready-made agent, and it can be regenerated at any time. Sign-in attempts and agent requests are rate-limited, and each user may hold only one active session. No system is completely secure. Tell us immediately at info@dct.my if you suspect unauthorised access.
7. Cookies and local storage
We use a session cookie that is needed to keep you signed in. Your browser's local storage remembers display preferences such as light or dark theme. We do not use advertising or third-party tracking cookies.
8. Your rights
Under the PDPA you may ask for access to and correction of your personal data, withdraw consent, and object to direct marketing. If your data is held in a customer's workspace, send your request to that organisation and we will help them respond. For data we hold as data user, contact us below. We reply within 21 days.
9. Changes
We post updates on this page and change the date at the top. Material changes are emailed to workspace administrators.
10. Contact
DZ Com Technologies
18C, Jalan Perak P15, Presint 15, 62050 Putrajaya, Malaysia
info@dct.my · +60 17-818 1216
SnapShiShan