Privacy Policy

Effective Date: 26 March 2026
U-Stay ("we", "our", "us") is a tenant management system operated by Utopia AI. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Data We Collect

We collect the following categories of personal data:
  • Identity Data: Full name, NRIC/passport number, nationality, gender, race
  • Contact Data: Phone number, email address, emergency contacts
  • Tenancy Data: Property details, room assignments, rental amounts, tenancy dates
  • Financial Data: Invoice records, payment history, bank mandate references
  • Usage Data: Login timestamps, pages visited, device information
  • Smart Home Data: Meter readings, lock access logs, equipment usage

2. How We Use Your Data

We process your personal data for the following purposes:
  • Managing tenancy agreements and property operations
  • Processing rental payments and generating invoices
  • Sending notifications about payments, bookings, and tenancy matters
  • Operating smart home devices (meters, locks, washers)
  • Improving our services and user experience
  • Complying with legal and regulatory requirements

3. Legal Basis for Processing

Under the PDPA 2010, we process your data based on:
  • Consent: You provide consent when registering or using our services
  • Contractual necessity: Processing required to fulfill your tenancy agreement
  • Legal obligation: Compliance with Malaysian laws and regulations
  • Legitimate interest: Improving our services and ensuring security

4. Data Sharing

We may share your data with:
  • Property owners/managers: To manage your tenancy
  • Payment processors (PayEx): To process rental payments
  • Cloud service providers (Supabase, Vercel): For hosting and data storage
  • Analytics tools (Google Analytics): For usage analytics (anonymised)
We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for the duration of your tenancy and for a period of 7 years after termination, in accordance with Malaysian tax and tenancy regulations. Usage data is retained for 2 years.

6. Your Rights (PDPA Section 30-44)

Under the PDPA, you have the right to:
  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Withdrawal of Consent: Withdraw consent for data processing
  • Data Portability: Request your data in a machine-readable format
To exercise these rights, contact us at utopiacoliving@gmail.com.

7. Data Security

We implement appropriate security measures including:
  • Encrypted data transmission (HTTPS/TLS)
  • Row-level security policies on all database tables
  • JWT-based authentication with secure session management
  • Role-based access control for admin users
  • Audit logging of sensitive operations

8. Cookies and Tracking

We use essential cookies for authentication and session management. Google Analytics is used for anonymous usage analytics. No advertising cookies are used.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:
Utopia AI
Email: utopiacoliving@gmail.com
Phone: +6014-686 9468