Privacy Policy

Who we are

GajiWise is a Malaysian salary and budget planning tool. This policy explains what we collect, why we collect it, and how AI analysis uses your numbers.

Account data

When you create an account we store your name, email address, password hash, email verification status, and session cookies needed to keep you signed in.

We also store your subscription tier, saved salary snapshots, budget planner data, and AI usage counts for plan limits.

What you type in

Salary inputs and budget lines you enter can be saved to your account so you can return later. Guest use keeps salary and budget data only in the current browser session and is not written to local storage.

Car and house affordability figures (price, down payment, tenure, rate, and running costs) stay in the page you have open. They are not saved to an account and are not sent to a server unless you later save a salary snapshot that already includes related budget rows.

An EPF balance you type into the outlook, and a raise rate you type into the salary-growth path, are treated as salary inputs: they save with a snapshot if you are signed in, and otherwise stay in the session.

AI analysis and third-party LLM providers

If you run AI insights, GajiWise sends salary figures (such as gross pay, deductions, and net pay) and budget category totals to an external large language model (LLM) provider so the model can write suggestions.

We do not send free-text expense labels to the LLM. Amounts and allowlisted categories may still be included. Car and house calculator fields are not sent unless they already appear as budget category totals.

By running AI analysis you agree that this salary and budget information will be processed by that LLM provider under their terms. Do not run AI analysis if you do not want those numbers shared with the provider.

When no API key is configured, GajiWise falls back to built-in rules and does not call an external model.

Emails and security

We send verification and password-reset emails through our email provider. Magic links expire and should not be shared.

We use rate limits, optional CAPTCHA, and HTTPS in production to protect accounts.

Cookies

We use httpOnly session cookies for sign-in. Theme and language preferences may be stored in the browser as non-sensitive settings.

We use Vercel Web Analytics to count page views. It does not use advertising cookies or track you across other websites.

Contact

For privacy questions about GajiWise, contact us at hello@gajiwise.com.