Privacy policy
Malyon processes business, accounting and account data to provide the service. This policy explains what is collected, why it is used, and the choices available to users.
Who controls the data
The company subscribing to Malyon controls the business and employee data entered into its workspace. Malyon acts as its service provider. Account and support data is handled to operate and secure the platform.
Data we process
Account identity and access roles; company, licence, tax and banking details; contacts, documents, ledger entries, payroll and audit events; files intentionally uploaded for recognition; technical logs, IP address and security events. Payment-card data is handled by the chosen payment provider and should not be entered into free-text fields.
Why we process it
To provide accounting and CRM functions, generate documents, reconcile transactions, administer subscriptions, prevent abuse, support users and meet legal obligations. We do not sell personal data.
Hosting and international transfers
The production service is currently hosted in the AWS Europe (Frankfurt) region. Data supplied by UAE users therefore may be transferred outside the UAE. We use access controls, encryption in transit, backups and contractual safeguards appropriate to the service. Customers must ensure they have authority to upload data and provide required notices to employees and contacts.
Your rights and controls
Depending on applicable law, people may request access, correction, restriction, portability or deletion. Workspace owners can correct records, export data, manage members and request deletion. Accounting records subject to statutory retention or audit requirements may be retained or anonymised instead of immediately deleted.
Security and incidents
Malyon applies role-based access, audit logging, rate limits, restricted production access and monitored backups. No system is risk-free. Suspected unauthorised access should be reported promptly to support@malyon.pro.