PRIVACY POLICY

1.1 This Privacy Policy explains how TRADERPRENEUR XCELLENCE SDN BHD ("ABC Money Tools", "we", "us", or "our"), operating the website abcmoneytools.com (the "Site") and its related tools and services (collectively, the "Services"), collects, uses, discloses, and protects personal data belonging to users of the Services ("you" or "user").

1.2 ABC Money Tools is powered by TX Edu Group. The Services are operated by:

1.3 This Policy is intended to comply with Malaysia's Personal Data Protection Act 2010 ("PDPA"). By creating an account or otherwise using the Services, you acknowledge that you have read and understood this Policy.

1.4 If you are accessing the Services from outside Malaysia, note that this Policy is drafted primarily around Malaysian law. A brief note on other frameworks (such as the EU General Data Protection Regulation or the California Consumer Privacy Act) is included in Section 10 for context only; it does not change the substantive commitments in this Policy.

We collect the following categories of personal data:

2.1 Account data

• Email address
• Password (stored in hashed/encrypted form via our authentication provider; we never store your password in plain text)
• Display name, if you choose to provide one

2.2 Financial data you provide

When you use the Money Tracker or the Financial Workbook/Assessment, you may enter:

• Income, savings, and net worth figures
• Assets, debts, budgets, and financial goals
• Individual transactions you log or that are extracted from scanned receipts
• Retirement-related figures and your age
• Your answers and results from the Financial Workbook assessment (e.g. retirement readiness, portfolio review, peer ranking, 12-month action plan)

2.3 Uploaded files

• Receipt images or PDF files you upload using the "scan receipt" feature

2.4 TradingView username

• If you purchase a TradingView Indicators subscription, your TradingView username, which we use solely to grant or revoke your access to the relevant indicator(s) on TradingView

2.5 Payment data

• Payment processing is handled entirely by our payment processor, Stripe. We do not collect or store your full card number, CVV, or other full payment card details on our own servers. We store a Stripe customer reference ID and your subscription/purchase status (e.g. active, cancelled, expired)

2.6 Technical and usage data

• IP address (used for rate-limiting and abuse prevention)
• Browser type and device information
• Log data, such as pages visited and timestamps of activity

3.1 Directly from you. Most data is collected when you create an account, enter data into the Money Tracker or Workbook, upload a receipt, or enter your TradingView username at checkout.

3.2 Automatically. Certain technical and usage data (such as IP address, browser/device information, and log data) is collected automatically when you use the Site, for example through server logs and session cookies.

3.3 From our payment processor. When you make a payment, Stripe shares limited information back to us, such as your Stripe customer reference ID and the status of your payment or subscription. We do not receive your full card details from Stripe.

We use personal data for the following purposes. Under the PDPA, we process your data on one or more of the following bases: consent, performance of a contract with you, or our legitimate interests (balanced against your rights).

4.1 To provide and operate the Services (performance of contract)

• Creating and maintaining your account
• Operating the Money Tracker, including logging transactions, assets, debts, budgets, and goals
• Operating the Financial Workbook/Assessment and generating your results
• Providing access to TradingView Indicators

4.2 To generate AI-powered outputs (consent / performance of contract)

• Sending your Workbook answers to Anthropic (Claude) to generate your personalised financial synthesis/report
• Sending your uploaded receipt images/PDFs to Google (Gemini) to extract transaction data automatically

4.3 To process payments (performance of contract)

• Processing one-time Workbook purchases and recurring TradingView subscription billing via Stripe

4.4 To grant and manage indicator access (performance of contract)

• Sharing your TradingView username with TradingView to grant or revoke access to purchased indicators

4.5 For security and anti-abuse purposes (legitimate interest)

• Using IP address and log data to detect, prevent, and investigate fraud, abuse, and unauthorised access

4.6 To provide customer support (legitimate interest / performance of contract)

• Responding to your queries and troubleshooting issues with your account or the Services

4.7 To comply with legal obligations (legal obligation)

• Retaining records as required for tax, accounting, audit, or other legal or regulatory purposes

5.1 Financial Workbook. When you complete the Financial Workbook/Assessment, the financial figures and answers you provide are sent to Anthropic (the provider of the Claude AI model) in order to generate your personalised synthesis/report. This processing happens on a server-to-server basis; your data is not used by us to train our own AI models.

5.2 Receipt scanning. When you use the "scan receipt" feature, the image or PDF you upload is sent to Google (the provider of the Gemini AI model) so that transaction details (such as merchant, amount, and date) can be automatically extracted and pre-filled into the Money Tracker.

5.3 These AI providers process your data as our processors, under their own respective terms of service and data processing arrangements, and solely for the purpose of providing the relevant feature to you. We do not permit these providers to use your data to identify you for any purpose beyond delivering the feature you requested.

5.4 You should avoid including sensitive personal data (for example, full identification numbers or data revealing race, religion, or health) in free-text fields or receipt uploads where this is not required by the tool.

6.1 We do not sell your personal data.

6.2 We share personal data only with the following categories of third parties, and only to the extent necessary to provide the Services:

• Supabase -- database hosting, authentication, and secure data storage for your account and application data
• Stripe -- payment processing and subscription billing
• Anthropic (Claude API) -- generates your AI financial synthesis from your Workbook answers (see Section 5.1)
• Google (Gemini API) -- extracts data from uploaded receipt images/PDFs (see Section 5.2)
• TradingView -- receives your TradingView username so we can grant or revoke your access to purchased indicators
• Cloud hosting providers -- general infrastructure and hosting used to run the Site and Services

6.3 Legal disclosures. We may also disclose personal data where required to do so by law, regulation, court order, or a valid request from a competent public authority in Malaysia, or where necessary to protect our rights, property, or the safety of our users or others.

6.4 Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to equivalent protections being maintained.

7.1 All payments on the Site -- including the one-time Financial Workbook purchase and TradingView Indicators subscriptions -- are processed by Stripe.

7.2 We do not store your full card number, expiry date, or CVV on our servers. Stripe stores this information in accordance with its own security standards (including PCI-DSS compliance) and privacy policy, available at www.stripe.com/en-my/privacy.

7.3 We retain only a Stripe customer reference ID and your purchase/subscription status, which we use to determine what access to grant you on the Site.

8.1 We retain your personal data for as long as your account remains active, in order to provide the Services to you.

8.2 If you request deletion of your account, we will delete or anonymise your personal data within a reasonable period, except where we are required or permitted to retain certain records (for example, transaction and payment records) for tax, accounting, audit, dispute-resolution, or other legal purposes, for a period of 7 years after the relevant transaction.

8.3 To request deletion of your data, contact us at [email protected] or +60182202458.

9.1 We take reasonable technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Access controls restricting who can view or modify data
• Passwords stored in hashed form, never in plain text
• Row-Level Security (RLS) policies on our database, so that each user's data is only accessible to that user (and to authorised systems acting on their behalf)

9.2 However, no method of transmission over the internet, and no method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

10.1 Some of our service providers (including Supabase, Stripe, Anthropic, and Google) may process or store data on servers located outside Malaysia.

10.2 Where personal data is transferred outside Malaysia, we take steps to ensure it continues to be protected to a standard comparable to the protections under the PDPA, including relying on our service providers' own contractual, technical, and organisational safeguards.

10.3 Note for overseas users: if you access the Services from the European Economic Area, the United Kingdom, or California, other data protection frameworks (such as the GDPR or CCPA) may also apply to certain processing of your data. This Policy is drafted primarily to satisfy Malaysian law; users subject to those other frameworks should contact us at +60182202458 with any specific requests.

Subject to the PDPA and its exceptions, you have the right to:

• Access the personal data we hold about you
• Correct any personal data that is inaccurate, incomplete, or outdated
• Withdraw your consent to our processing of your personal data (which may limit or prevent your use of some or all of the Services)
• Limit or object to the processing of your personal data in certain circumstances
• Lodge a complaint with us, and, if unresolved, with the relevant Malaysian authority responsible for enforcing the PDPA

To exercise any of these rights, contact us at:

We may need to verify your identity before actioning your request and may charge a reasonable processing fee for access requests where permitted under the PDPA.

12.1 We use a small number of essential cookies, including authentication/session cookies, to keep you securely logged in and to remember your session while you use the Site.

12.2 We may use minimal, privacy-respecting analytics to understand overall Site usage (such as which pages are visited) in order to improve the Services. We do not use advertising cookies or sell data collected through cookies.

12.3 You can control or disable cookies through your browser settings; however, disabling essential cookies may prevent you from logging in or using core features of the Site.

The Services are not directed to, and are not intended for use by, individuals under the age of 18 (or the age of legal majority in their jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected] so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy on this page with a revised "Last updated" date. Material changes may also be notified to you by email or a notice on the Site.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at: