Terms of Service

• You sign up, you pay your subscription, you use BukuCloud to do your books.
• Your accounting data is yours. We're a custodian — we don't sell it, train models on it, or hand it to anyone outside our published sub-processor list.
• Stop paying and we keep your data read-only for 30 days, then follow the retention rules in the Privacy Policy.
• We try hard to keep BukuCloud up. We're honest that we don't (yet) offer a contractual SLA on the SaaS plans — if downtime is critical for you, talk to us about Enterprise.
• Don't use BukuCloud for illegal stuff, don't abuse the system, and don't use it to spam.

The summary is here for clarity. If a provision below conflicts with this summary, the provision below wins.

By creating an account, accessing the BukuCloud website at bukucloud.com, or using the application, you agree to be bound by these Terms of Service (“Terms”) and our Privacy Policy. If you don't agree, don't use the service.

If you accept on behalf of a company or other legal entity, you represent that you have the authority to bind that entity. The terms then apply to that entity.

BukuCloud is a multi-tenant cloud-accounting platform for Malaysian SMEs and the accounting firms that serve them. Each company gets its own isolated database. We provide invoicing, bills, customers, suppliers, chart of accounts, journal entries, financial reports, sales-tax (SST) reporting, and (when shipped) LHDN MyInvois e-Invoicing. We also provide a Practice console for accounting firms managing multiple client books.

We may add, change, or remove features at any time. Material removals affecting a paid plan will be communicated in advance.

• You must be at least 18 years old (or the age of legal majority in your jurisdiction) to create an account.
• You must provide accurate information and keep it up to date.
• You are responsible for keeping your password and any 2FA recovery codes secure. We strongly recommend turning on two-factor authentication.
• You are responsible for all activity under your account, including any teammates or contractors you invite.
• Notify us immediately at support@bukucloud.com if you suspect unauthorised access.

• Plans, prices and feature limits are listed at bukucloud.com/pricing. Prices are in Malaysian Ringgit (MYR), inclusive of SST where applicable.
• Subscriptions are billed monthly or annually, in advance, via ToyyibPay (FPX, credit/debit card, e-wallets). Annual plans are discounted approximately 17%.
• Plans renew automatically until cancelled. You can cancel at any time from Settings → Plan.
• No refunds for partial periods on monthly plans. Annual plans cancelled within 14 days of first payment are eligible for a pro-rata refund of the unused portion; otherwise the annual fee is non-refundable. Self-hosted licences are governed by the separate licence agreement signed at deployment.
• We may suspend access if a payment fails. We send a reminder before suspension and a final notice before downgrading you to the free tier.
• Free tiers (Startup and Practice Free) are scoped (one user / one client) but have no time limit. We may change the free-tier scope with 30 days' notice.

You own your data.Anything you enter, upload, or generate inside your tenant — invoices, customers, receipts, journal entries, custom reports — remains your property. We don't claim any IP rights over your accounting data.

We process it on your behalf. When you store personal data of your customers (e.g. customer names, emails, TINs) in BukuCloud, you are the data controller and we are the data processor under PDPA. Our obligations are governed by the Data Processing Agreement, which forms part of these Terms.

Backups and export. We run daily encrypted backups for 30 days. You can export a full copy of your data at any time from Settings → Data export (PDPA right of access). On account closure we keep your data read-only for 30 days so you can export, then follow the retention rules in the Privacy Policy.

You agree not to:

• Use BukuCloud to break Malaysian or other applicable law (including tax, anti-money-laundering, sanctions and export-control law).
• Issue invoices or e-Invoices on behalf of someone who has not authorised you.
• Send spam, phishing, malware, or unsolicited bulk communications via the BukuCloud email features.
• Interfere with or compromise the integrity or security of the service (e.g. denial-of-service, scraping at high rates, probing for vulnerabilities outside our published bug-bounty channel).
• Reverse-engineer the service, or sell, sublicense, white-label or resell access without a written agreement (Practice Firm tier and self-hosted licences cover legitimate firm and white-label use).
• Use BukuCloud to process special-category personal data (health, biometric, criminal-record) — the platform is not designed for that.

We may suspend or terminate accounts that breach this section without refund.

BukuCloud integrates with third-party services (ToyyibPay for payments, optional Google Gemini for OCR, LHDN MyInvois for e-Invoice submission). Your use of those services is governed by their own terms. We're not responsible for outages or decisions made by those third parties.

BukuCloud calculates SST based on the rates and rules you configure. We provide tools to generate the Sales Tax report and (when shipped) submit e-Invoices to LHDN MyInvois on your behalf. You remain responsible for the accuracy of your tax filings, the timeliness of your submissions, and the correctness of your TIN, SST registration and other LHDN identifiers. BukuCloud is not a substitute for professional tax advice.

We are not liable for penalties imposed by LHDN, the Royal Malaysian Customs Department, or any other regulator, for filings made through BukuCloud.

The BukuCloud software, brand, logos and marketing copy are owned by BukuCloud Sdn Bhd and are protected by Malaysian and international copyright, trademark and other IP laws. We grant you a non-exclusive, non-transferable, revocable licence to use the service for your business while your subscription is active.

Self-hosted licences are governed by a separate licence agreement signed at deployment.

We provide BukuCloud on an “as is” and “as available” basis. To the maximum extent permitted by law, we disclaim all warranties — express, implied, or statutory — including merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the service will be uninterrupted, error-free, or that defects will be corrected. We do not (yet) offer a contractual uptime SLA on standard SaaS plans. Enterprise customers can negotiate an SLA in writing.

To the maximum extent permitted by Malaysian law, our total aggregate liability arising out of or related to these Terms or your use of BukuCloud is limited to the fees you paid us in the 12 months preceding the event giving rise to the claim.

We are not liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, revenue, data, goodwill, or business opportunity, even if we were advised of the possibility.

Nothing in these Terms limits liability for fraud, gross negligence, or anything that cannot lawfully be limited.

• You can cancel at any time from Settings → Plan. Your subscription stays active until the end of the paid period.
• We can suspend or terminate if you breach these Terms or the Acceptable Use policy, or if your payment fails after reminders.
• On termination we keep your data read-only for 30 days so you can export, then we follow the retention rules in the Privacy Policy.
• Sections 5 (Your data), 9 (IP), 10 (Warranties), 11 (Liability), 13 (Governing law) and 15 (Contact) survive termination.

These Terms are governed by the laws of Malaysia. The courts of Kuala Lumpur have exclusive jurisdiction over any dispute, unless mandatory consumer-protection law in your jurisdiction says otherwise.

We may update these Terms. Material changes are notified by email and a banner inside the app at least 14 days before taking effect. If you continue to use BukuCloud after the effective date, you accept the updated Terms.

BukuCloud Sdn Bhd (202401234567 (1234567-X)), Wisma KFC, Jln Sultan Ismail, 50250 Kuala Lumpur, Malaysia.

Legal: legal@bukucloud.com. Support: support@bukucloud.com.