Draft for legal review. Version 2026-11-draft.
This agreement is between MYLEJA SDN. BHD. ("Leja") and the company that subscribes to Leja (the "Company"). The person accepting confirms they have authority to bind the Company. It works alongside the Terms of Service and Privacy Policy at leja.my/legal. If they conflict on licensed use of the software, this agreement applies.
Leja grants the Company a non-exclusive, non-transferable right to use the modules in its plan, for its own business in Malaysia, during the subscription. Plan limits on users, employees and modules apply. The Company may not resell, copy, reverse engineer or build a competing service from Leja.
The Company decides who has access and at what role, and is responsible for what its users do in its tenant. Every admin and employee accepts their own terms before first use. Their acceptance does not limit the Company's duties here. The Company removes access promptly when someone leaves.
The Company owns its data. Leja uses it only to provide, secure and support the service, and as the law requires. Leja does not sell it.
Under the Personal Data Protection Act 2010, the Company is the data controller for its employees' and customers' personal data, and Leja is its data processor. The Company gives the required notices, in Bahasa Melayu and English, and holds a lawful basis for what it records, including payroll, attendance and location data. If it turns on biometric checks, it obtains each employee's explicit consent and offers another way to record attendance. Leja processes on the Company's instructions and keeps the data secure. Leja tells the Company of a personal data breach within 24 hours of becoming aware of it, so the Company can meet its own duties to notify the Commissioner and affected individuals.
Leja calculates and prepares EPF, SOCSO, EIS, PCB, SST and MyInvois records from what the Company enters. The Company checks them, and stays responsible for its filings, payments and tax position. Leja is not a tax, legal or accounting adviser.
Fees follow the Company's plan, and refunds follow the Refund Policy. Leja may suspend access for non-payment after 14 days' notice, or at once to stop a security risk or unlawful use.
The Company gets one free trial of 30 days, starting when it signs up and ending at the exact time shown in Leja. When the trial ends, the Company must pay for a plan to keep using the Service. Until it does, it can sign in, read these terms and reach billing, but nothing else. There is no extra grace period for a trial, and the 14 days' notice in this section applies only to unpaid invoices on a paid plan.
The end of a trial does not delete the Company's data, and paying reopens the same company. If the Company does not pay, it can ask support@leja.my for a copy of its data within 30 days after the trial ends, and section 7 then applies as if the subscription had ended.
The Company can cancel at any time. It can export its data for 30 days after the subscription ends. Leja deletes or anonymises it within 90 days of the subscription ending, apart from what the law requires Leja to keep.
Leja provides the service with reasonable care and skill, and otherwise as is, as far as the law allows.
Each party stays liable for direct loss caused by its breach or negligence. Neither party is liable for indirect or consequential loss.
Each party's total liability for all claims arising in any 12 months, including claims about personal data and confidentiality, is limited to the greater of 12 times the Monthly Fee and RM1,000.
The "Monthly Fee" is the Company's subscription and add-on fee for one month when the claim arises. On annual billing it is one twelfth of the annual fee.
This limit does not apply to fraud, wilful misconduct, death or personal injury caused by negligence, fees owed, misuse of the other party's intellectual property, or any liability that cannot be limited by law. Nothing in this agreement stops a party from enforcing its rights in the Malaysian courts, or shortens the time to do so.
The Company indemnifies Leja against third-party claims, including claims by its employees, caused by User Content it had no right to provide, its failure to meet its duties under clause 4, or unlawful use of the service by the Company or its users. This indemnity is subject to the limit in clause 9.
Leja gives 30 days' notice of material changes, and may ask for fresh acceptance. For a dispute, the parties first contact each other through legal@leja.my. If that fails within 30 days, either may request mediation through the Asian International Arbitration Centre, and then go to the courts of Malaysia. Malaysian law governs this agreement.