XWheels

Privacy Policy

Last updated: 1 February 2026

1. Introduction

XWheels ("we", "our", or "us") is operated by Rarticle Software Sdn. Bhd., a company incorporated in Malaysia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the XWheels Operator Portal ("Platform"). By accessing or using the Platform, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

When you register and use the Platform, we may collect:

  • Full name and operator/company name
  • Phone number (Malaysian numbers for OTP verification)
  • Email address
  • Account credentials (password, stored in encrypted form)

2.2 Business Information

  • Vehicle details (make, model, year, photos, daily rates)
  • Customer/renter records you create within the Platform
  • Booking and transaction history

2.3 Usage Data

We automatically collect device type, browser information, IP address, pages visited, and interaction patterns to improve the Platform experience.

3. How We Use Your Information

We use the information collected to:

  • Create and manage your operator account
  • Verify your identity via phone number OTP
  • Provide core Platform features (vehicle management, bookings, customer records, earnings tracking)
  • Send important service notifications and updates
  • Improve Platform performance, security, and user experience
  • Comply with legal obligations under Malaysian law

4. Data Isolation & Security

Each operator account is fully isolated using enterprise-grade row-level security. No other operator can access your vehicles, customers, or bookings. We employ industry-standard encryption for data in transit (TLS) and at rest. Access to production systems is restricted and audited.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

  • Service providers — trusted third-party services (hosting, SMS/OTP providers) that help operate the Platform, bound by confidentiality agreements.
  • Legal requirements — when required by Malaysian law, regulation, or legal process.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Withdraw consent for data processing
  • Request deletion of your account and associated data

To exercise these rights, contact us at the address below.

8. Cookies & Tracking

The Platform uses essential cookies and local storage for authentication and session management. We do not use third-party advertising trackers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or email. Continued use of the Platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact:

Rarticle Software Sdn. Bhd.
Email: privacy@xwheels.my