The short version
- We collect only what Raul needs to run your projects and your account.
- Your records are stored on Google Cloud in Singapore and backed up every day.
- No other company can see your records. We never sell data and run no advertising trackers.
- Documents you ask the AI to read are sent to Anthropic to be read. They are not used to train AI models.
- You can download a full copy any time, and ask us to correct or delete your data.
1.Who we are
Raul is project management software for contractors, run by RaulTech in Kuching, Sarawak, Malaysia. Until RaulTech is registered as a business of its own, it is operated by Wawas Trading, which also receives subscription payments. In this policy "we" and "us" mean RaulTech, and "you" means a person who uses Raul or visits raultech.my.
A company that subscribes to Raul (a "customer") decides what goes into its own account: its projects, clients, suppliers and staff. For that information, the customer is the data user under the PDPA and we process it for them as a data processor. For account and billing details, we are the data user.
2.What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, job title, role in the company | You, or the colleague who invited you |
| Google sign-in | Name, email address and profile photo | Google, only if you choose "Continue with Google" |
| Company details | Company name, registration no., address, phone, email, logo, bank details for your invoices | Your Owner or Management |
| Project records | Quotations, BQs, costs, invoices, payments, variations, site diaries, photos, receipts, documents, and the names of clients, suppliers and workers in them | Your company's users |
| Payment records | Amount, date, payment method and the receipt you upload for a subscription | You. We never see or keep card details. |
| Usage and security | Sign-in times, who changed a record and when, AI reads used, error reports | Raul, as you use it |
| Feedback you send | Your message, a screenshot if you add one, the page you were on, your browser, and any error the app showed | You, when you press Send feedback |
Raul does not use advertising cookies or tracking pixels. The app keeps a few settings in your browser (such as light or dark theme) so it remembers them on that device.
3.How we use it
- To run Raul: sign you in, show your company its records, produce quotations, invoices and reports.
- To keep it safe: stop one company seeing another's records, keep a change history, and detect misuse.
- To run the AI features you choose (see section 4).
- To manage your subscription: confirm payments, switch plans on, and send account emails such as verification, invitations and password resets.
- To answer you when you contact us, and to improve Raul by fixing faults and studying how features are used.
We use project records only to provide Raul to the customer that owns them. We do not read a customer's records unless the customer asks us to help, or we must to fix a fault or meet the law.
4.AI features
When you ask Raul to read a document (a receipt, DO, supplier invoice, price list or client BQ), draft a write-up or variation, or answer a question, the text or image needed for that task is sent to Anthropic, the company that makes the Claude AI model, and the result comes back to Raul.
- Only what that one task needs is sent.
- Under Anthropic's commercial terms, it is not used to train AI models.
- Nothing the AI produces is saved into your records until a person checks it.
5.Where your data is stored
Raul runs on Google Cloud (Firebase). Your records, files and photos are stored in Google's Singapore data centre (region asia-southeast1). AI requests are processed by Anthropic, which may be outside Malaysia.
By using Raul you agree to your data being transferred to and stored in these places. We choose providers that protect data to a standard at least as high as the PDPA requires.
6.Who else sees it
- People in your own company, according to the access your Owner or Management gives them.
- Service providers who run Raul for us: Google (hosting, database, file storage, sign-in, email) and Anthropic (AI). They act on our instructions only.
- Anyone you choose to send things to, such as a client you send a quotation or invoice.
- Authorities, only where the law requires it.
We never sell personal data, and we never share one customer's records with another.
7.How long we keep it
- Your records are kept for as long as your company's account is open, including while it is read-only after a trial or plan ends.
- A deleted job stays in the Recycle Bin for 30 days, then it is removed.
- Daily backups are kept for 30 days.
- When your company asks us to close its account, we give the Owner a final full copy first, then delete the records. Copies in backups are gone within 30 days after that.
- Payment records are kept for as long as Malaysian tax and accounting law requires.
8.Your rights
Under the PDPA you may:
- See the personal data we hold about you, and get a copy.
- Correct it if it is wrong. Most details can be changed in Raul's Settings yourself.
- Withdraw consent or ask us to stop using it. We may then be unable to keep providing Raul to you.
- Take your data with you. The Owner can export the company's records to Excel or a full backup file at any time.
If your data is in another company's Raul account (for example, you are their client or worker), please ask that company first. We will help them answer you. We reply to requests within 21 days, as the PDPA requires.
9.How we protect it
- Every company's records are walled off from every other company in the database, the file storage and the server.
- Data is encrypted while it travels and while it is stored.
- Passwords are handled by Google's sign-in service. We never see them.
- Site diaries lock after 24 hours and every change is logged, so the record cannot be quietly rewritten.
- If a data breach is likely to harm you, we will tell you and the Personal Data Protection Commissioner as the law requires.
10.Children
Raul is a business tool for adults. It is not meant for anyone under 18.
11.Changes to this policy
When we change this policy, we update the date at the top. If a change matters, we tell account Owners inside Raul before it takes effect.
12.Contact us
Message us on WhatsApp at +60 16-782 8223, or email support@raultech.my.
This policy is published in English and Bahasa Malaysia. If the two differ, the English version applies.