Who this notice is from
This notice covers the internal staff invoice generator, and its optional Google Drive backup, used by J STAR KIERANA (M) SDN. BHD. and J STAR KEERANAA ENTERPRISE. Contact: darmentradingjsk@gmail.com.
Status on 29 October 2026: the invoice generator is in use. The Google Drive backup is built but not active yet. This notice describes how it works once the owner switches it on.
Information the invoice generator holds
- Invoice details: the issuing company, invoice date and number, customer name and billing address, site or location, Skylift type, service dates, DO numbers, hours, basic charges, overtime hours and rates, and totals.
- The PDF of each confirmed invoice, and unconfirmed drafts.
- The name of the staff member who confirmed each invoice, and when.
- Staff accounts: username, display name and account status. Passwords are stored only as one-way scrambled values (password hashes), never as readable text.
- Temporary sign-in sessions, which expire after 12 hours.
This information is stored by the hosting provider that runs the invoice generator.
What goes into a Google Drive backup
- A copy of the invoice information above, including PDFs and drafts.
- A copy of the staff account list, including password hashes.
- A list of the files' fingerprints (SHA-256 checksums), used to check the backup is complete.
Sign-in sessions are removed from every backup. The whole backup is encrypted before upload, and can only be opened with the owner's backup key.
Google user data
- Whose Drive: the backup connects only to the business owner's own Google account, after the owner approves it.
- Permission: it asks for one permission,
drive.file. This lets it create a private folder in that Drive, upload backup files into it, and read back those files' details (size, checksum and the tool's own labels) to confirm each upload. - What it can't see: it cannot see, read or change any other files in the owner's Drive. It does not ask for email, contacts or profile information.
- How the data is used: only to store and check the owner's own backups. This tool does not sell the data or use it for advertising.
- Service providers: Google Drive stores the encrypted backup files, and the hosting provider that runs the invoice generator stores and processes the invoice data, so that those services can work.
Who holds the keys and tokens
- Google authorization token: created when the owner approves access. It is kept privately by the owner and in the hosting provider's secret settings.
- Backup encryption key: kept privately by the owner, in the hosting provider's secret settings, and in the owner's separate recovery copy.
- These are never published, placed in source code, or written to the service's logs.
Keeping and removing data
- Keeping backups: the tool never deletes files from Google Drive. The owner decides how long to keep backups and deletes old ones in Google Drive.
- Removing access: the owner can cancel the tool's access at any time: Google Account → Security → Your connections to third-party apps → J Star Invoice Backups → remove access. Backups then stop.
- Invoice records are kept in the invoice generator as business records.
Cookies and tracking
- The content of these three information pages adds no cookies, tracking or advertising of its own.
- The website that hosts them, and its hosting provider, may have their own separate cookie and data practices.
- The invoice generator sets one sign-in cookie, for authorised staff only.
Questions or changes
Questions or requests about this information: darmentradingjsk@gmail.com. If the way the tool handles information changes, this page will be updated and its date changed.