Privacy Policy
TechnoNet Sdn Bhd ("TechnoNet", "we", "us") operates LexBill, a legal billing and LHDN e-Invoice system. This Privacy Policy explains how we collect, use, and protect personal data in connection with LexBill, in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. Data Controller
The data controller for personal data processed through LexBill is:
TechnoNet Sdn Bhd
SSM Registration No. 198901005373
Malaysia
Data Protection Officer: [email protected]
Phone / WhatsApp: 019-328 2828
2. Personal Data We Collect
We collect personal data in two categories:
a) Subscriber data (about your firm's account)
- Firm name and contact details
- Name and email address of the primary account holder
- Payment information (processed and stored by Stripe — we do not store card numbers)
- Subscription history and account activity logs
b) Client data (data your firm enters into LexBill)
- Your clients' names, contact details, and Tax Identification Numbers (TIN)
- Matter names, billing items, invoice amounts, and disbursements
- Payment records and outstanding balances
- E-Invoice submission records including LHDN reference numbers
Client data is entered by your firm and belongs to your firm. TechnoNet processes this data on your behalf as a data processor under the PDPA.
3. How We Use Personal Data
Subscriber data is used to:
- Create and manage your LexBill subscription
- Process subscription payments via Stripe
- Send subscription confirmations, renewal reminders, and account notifications
- Provide customer support
- Comply with legal and regulatory obligations
Client data is used to:
- Generate invoices and billing statements as directed by your firm
- Submit e-Invoices to LHDN MyInvois on your firm's behalf
- Send invoice notification emails to your clients as directed by your firm
- Produce billing reports for your firm's use
4. Legal Basis for Processing
We process personal data on the following bases under the PDPA:
- Contractual necessity — to provide the LexBill service you subscribed to
- Legal obligation — to comply with LHDN e-Invoice requirements and applicable Malaysian law
- Legitimate interests — to operate and improve the service, and to prevent fraud
- Consent — where you have explicitly consented, for example to receive marketing communications
5. Data Sharing
We do not sell personal data. We share data only as necessary to operate LexBill:
- LHDN MyInvois — invoice data is submitted to LHDN as required by Malaysian tax law and as directed by your firm
- Stripe — subscriber payment data is processed by Stripe (Stripe's privacy policy applies to data held by Stripe)
- Cloud infrastructure providers — data is hosted on secure servers; providers are bound by data processing agreements
We do not share client data with any third party other than LHDN for e-Invoice submission purposes.
6. Data Retention
- Subscriber data — retained for the duration of the subscription and for 7 years thereafter for legal and tax compliance purposes
- Invoice and billing records — retained for 7 years in accordance with Malaysian tax and company law requirements
- Account access logs — retained for 12 months
On cancellation of a subscription, your firm may request a data export before account closure. Requests must be made within 30 days of cancellation.
7. Data Security
TechnoNet implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include:
- Encrypted data transmission (HTTPS/TLS)
- Encrypted data storage
- Role-based access control within LexBill
- Regular data backups
- Access logging and monitoring
8. Your Rights Under the PDPA
Under the Personal Data Protection Act 2010, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete personal data
- Withdrawal of consent — withdraw consent for processing where consent is the legal basis (subject to contractual limitations)
- Erasure — request deletion of personal data, subject to legal retention obligations
To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 21 days.
9. Cookies
The LexBill website (lexbill.technonet.ai) sets no cookies of its own. Visits are counted with TechnoNet's own self-hosted analytics, which uses no cookies and does not store your IP address. The site is delivered through Cloudflare, which may set a strictly necessary security cookie, and the demo request form uses Cloudflare Turnstile to keep out automated submissions. The LexBill client portal (technonet.ai/portal) uses a session cookie to keep you signed in. No third-party tracking or advertising cookies are used.
10. Changes to This Policy
TechnoNet may update this Privacy Policy from time to time. We will notify active subscribers of material changes by email. The date of the last update is shown at the top of this page. Continued use of LexBill after notification of changes constitutes acceptance of the updated policy.
11. Contact and Complaints
For any privacy-related questions or to exercise your PDPA rights, contact:
TechnoNet Sdn Bhd
Data Protection Officer: [email protected]
Phone / WhatsApp: 019-328 2828
If you believe your PDPA rights have not been upheld, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia (pdp.gov.my).