Last updated 2 October 2026
This policy explains how NovaStack Systems Sdn. Bhd. (Company No. 202601026967) handles personal data in connection with AppVanguard, in line with the Malaysian Personal Data Protection Act 2010 (PDPA).
From this website: the details you submit in the pricing form (name, work email, company, and what you tell us about your app), plus basic request data such as your IP address. From the product: the SDK reports device integrity signals (whether a device is rooted, hooked, debugged, emulated or tampered) and an attestation token. These signals describe the device, not the individual, and are tied to an install identifier rather than a named person.
To respond to your enquiry, to provide and operate the service you buy, to detect and respond to threats against the apps we protect, and to meet our legal obligations. We do not sell personal data, and we do not use it for advertising.
Where agreed for your deployment, the console and logs are hosted in Malaysia or on your own infrastructure. Enquiry data is held on systems we operate.
We share personal data only with service providers that help us operate (for example, attestation verification with the relevant platform), and where required by law. We do not share it with third parties for their own purposes.
We keep enquiry data for as long as needed to follow up and for our records. Device signal reports are pruned on a retention schedule set for each deployment.
Under the PDPA you may request access to, or correction of, your personal data, and you may limit how we process it. To exercise these rights, contact us using the details below.
NovaStack Systems Sdn. Bhd., info@novastack.com.my. We will respond within a reasonable period.