Terms of Service

1. Acceptance

These Terms of Service ("Terms") govern your access to and use of Incorpus at incorpus.app and related Incorpus services ("Service"). The Service is operated by S Rank Sdn. Bhd. (Company No. 202501046409 (1647817-H)) ("Incorpus", "we", "us", or "our").

You agree to these Terms when you create an account, access a workspace, start a trial, subscribe, or use the Service on behalf of a business. If you use the Service for a company or other legal entity, you represent that you have authority to bind that entity.

2. What Incorpus Provides

Incorpus is business software for Malaysian workspaces. It supports source documents, bookkeeping, posted journal entries, bank activity, SST support, MyInvois workflows, tax support workpapers, reporting, compliance archives, and professional handoff exports.

Incorpus is not a licensed accounting firm, tax agent, audit firm, company secretary, payroll provider, legal adviser, or financial adviser. Outputs from the Service are software-generated records and workpapers for review. They do not replace professional advice, statutory judgment, official filings, audited financial statements, tax returns, company secretarial filings, or government portal decisions.

3. Product Boundaries

You remain responsible for the correctness, completeness, classification, approval, filing, and retention of your business records. The Service may help you record transactions and prepare supporting evidence, but it does not take that responsibility from you.

The Service, and any AI agent you connect to it, performs routine and mechanical recording. Originating or changing journal entries and determining account classifications stay with you or with the person you authorise to hold that permission.

Dedicated workflows for payroll, loans, hire purchase, dividends, and director remuneration may not be available as first-class modules. Where those items are supported, you may need to record them through journal entries, attachments, external reports, resolutions, or adviser-prepared schedules.

Audit Pack, Accounting Pack, Tax Pack, Compliance Archive, and Full Company Data Export are handoff and evidence tools. They do not create an auditor's report, statutory audit opinion, tax agent filing, secretarial certification, or regulatory approval.

4. Accounts and Workspace Access

4.1 Account Information

You must provide accurate information and keep your account secure. You are responsible for activity performed through your account, including activity by users you invite or authorise.

4.2 Workspace Ownership

Each company workspace has an owner. The owner controls billing, workspace access, roles, permissions, exports, subscription changes, and ownership transfer. Administrators and functional roles can hold broad access, depending on the permissions the owner grants.

4.3 Invited Users and Advisers

You are responsible for everyone you bring into a workspace. That includes employees, accountants, company secretaries, auditors, consultants, and other advisers. Confirm that each person is authorised to access the data in that workspace. Remove their access when it is no longer appropriate.

5. Subscription, Trial, and Billing

5.1 Plans

Incorpus offers paid plans such as Standard and Plus. Current product features are generally available on both plans. Plans differ mainly by file storage and database headroom. Trial access may be offered for onboarding, evaluation, or pilot use. There is no public free tier unless we state otherwise.

5.2 Payments

Billing is processed through Stripe in Malaysian Ringgit (MYR). Card payments may support recurring subscriptions. Where FPX is available, it gives you prepaid access for the billing period you select. You must renew FPX manually, because FPX does not support automatic recurring billing.

5.3 Changes, Cancellation, and Grace Period

You can change or cancel a subscription using the controls available in the Service. If payment fails or a subscription expires, access may become read-only or restricted after any applicable grace period. Data export may remain available for a limited period so that you can preserve your records.

5.4 Taxes and Fees

Prices may exclude applicable taxes, bank charges, currency conversion charges, or third-party payment fees unless we state otherwise. You are responsible for taxes or charges imposed on your subscription or on your use of the Service, where applicable.

6. Your Data and Records

6.1 Ownership

You retain ownership of the business data, documents, attachments, journal entries, reports, and workspace records you place in Incorpus. We do not claim ownership of your business records.

6.2 Accuracy and Review

You are responsible for reviewing your records before you rely on them. That review covers entries, mappings, classifications, reports, tax settings, MyInvois data, bank imports, exchange rates, opening balances, attachments, and generated exports. It applies before you use any of them for management decisions, professional review, statutory filings, or external reporting.

6.3 Export and Retention

Workspace owners can request exports such as Full Company Data Export, Accounting Pack, Audit Pack, Tax Pack, and Compliance Archive. You are responsible for exporting and retaining any records that your business must keep under accounting, tax, company, employment, audit, or other laws.

7. Data Protection and Processing

7.1 Our roles. For the personal data you and your colleagues place inside a workspace (your contacts, employees, directors, suppliers, and the individuals named in your records), you are the data controller and Incorpus acts as your data processor under the Personal Data Protection Act 2010. For your own account and billing data, Incorpus is the data controller. Our Privacy Policy explains the second role.

7.2 Processing on your instruction. We process workspace personal data only to provide the Service to you, to comply with Malaysian law, and on your documented instructions, which include your use of the Service and its features. We do not process workspace personal data for our own purposes, and we do not use it to train machine-learning models.

7.3 Confidentiality. Personnel with access to workspace data are bound by confidentiality obligations and are granted access only where needed to operate or support the Service.

7.4 Security. We maintain the technical and organisational measures described in Section 7 of the Privacy Policy, consistent with the Security Principle in section 9 of the Act, which since the 2024 amendments binds data processors directly.

7.5 Sub-processors. We use the sub-processors identified in Section 5 of the Privacy Policy to run the Service, and we remain responsible to you for the processing they carry out on our behalf. When we add or replace a sub-processor that processes workspace personal data, we will update the Privacy Policy to identify it.

7.6 Cross-border transfer. Some sub-processors process data outside Malaysia, as set out in Section 6 of the Privacy Policy. By using the Service you acknowledge that transfer.

7.7 Personal data breach. If we become aware of a personal data breach affecting workspace personal data, we will notify you without undue delay after becoming aware of it, and give you the information we hold about it, so that you can assess and meet your own obligations under section 12B of the Act.

7.8 Assisting you with individual rights. Where an individual exercises a right under the Act against you, including access, correction, withdrawal of consent, or data portability under section 43A, we will provide reasonable assistance, including the export tools in the Service, so that you can respond. Where an individual contacts us directly about workspace data, we will refer them to you rather than act on it ourselves.

7.9 Return and deletion. On cancellation, workspace data is retained for 120 days so you can reactivate or export it. It is then deleted as described in Section 8 of the Privacy Policy, subject to Section 6 of these Terms and to any statutory retention obligation that applies to the records. You may export your workspace at any time while the subscription is active.

7.10 Your responsibilities as data controller. You remain responsible for your own obligations under the Act as data controller, including issuing personal data notices to your data subjects, having lawful grounds for the personal data you place in a workspace, and keeping the records the Act and the Commissioner’s guidelines require of you. These Terms and the Privacy Policy provide the information about our sub-processors and processing locations that you need for that purpose.

7.11 Duration. This Section applies for as long as we process workspace personal data, including during the retention window in clause 7.9.

8. MyInvois, Emails, and Third-Party Workflows

If you configure LHDN MyInvois workflows, you authorise Incorpus to use the credentials, certificates, entity settings, and document data you provide to prepare and submit the relevant payloads. You are responsible for the accuracy and lawfulness of the submitted data. Incorpus does not guarantee that LHDN will accept a submission.

If you use document emails, payment links, reminders, or similar workflows, you are responsible for the recipients, the message content, the commercial relationship, and any consent or notice required before sending communications.

9. Acceptable Use

You must not:

• Use the Service unlawfully, fraudulently, or to mislead customers, advisers, authorities, or users
• Upload data that you are not authorised to process or disclose
• Attempt to access another company workspace or bypass tenant isolation, roles, or permissions
• Interfere with platform security, availability, billing, quotas, or infrastructure
• Store or transmit malware, credential dumps, exploit payloads, or intentionally harmful content
• Reverse-engineer, scrape, resell, or automate the Service outside approved interfaces
• Use the Service to send spam, abusive messages, or unauthorised commercial communications

10. CLI, Automation, and External Tools

Incorpus may provide CLI, API, export, or automation features. You are responsible for securing the tokens, keys, devices, scripts, and third-party tools connected to your account or workspace. If you pass exported data to external AI tools, advisers, storage providers, or other software, you are responsible for that disclosure and for reviewing any output before you use it.

11. Availability and Changes

We aim to provide a reliable service, but we do not guarantee uninterrupted or error-free operation. Maintenance, incidents, third-party outages, internet issues, government portal issues, or payment provider issues may affect availability. We may modify, improve, remove, suspend, or replace features as the product evolves.

12. Suspension and Termination

We may suspend or restrict access if payment fails, a subscription expires, a security risk is detected, usage threatens the Service, or these Terms are breached. You may stop using the Service or cancel your subscription through the available controls. Cancellation does not remove your responsibility to export and retain records required by your business or by law.

13. Disclaimers and Liability

The Service is provided on an "as is" and "as available" basis, to the maximum extent permitted by law. We do not warrant that records, calculations, reports, submissions, or exports will be error-free, accepted by an authority, or suitable for every business scenario.

To the maximum extent permitted by Malaysian law, Incorpus is not liable for indirect, incidental, special, consequential, punitive, or loss-of-profit damages. Our total liability for claims relating to the Service is limited to the amount you paid for the Service in the 12 months before the event giving rise to the claim.

14. Changes to These Terms

We may update these Terms from time to time. We will communicate material changes through the Service, by email, or by another reasonable method. If you continue to use the Service after a change takes effect, you accept the updated Terms.

15. Governing Law

These Terms are governed by the laws of Malaysia. The courts of Malaysia have jurisdiction over disputes relating to these Terms or the Service, subject to any mandatory dispute-resolution process required by applicable law.

16. Language

These Terms are provided in English and Bahasa Malaysia. If there is any inconsistency between the versions, the English version prevails.

17. Contact

For questions about these Terms, contact fikri@srank.com.my.