Privacy Policy

This Privacy Policy explains how PropCashflow.my ("we", "us", "the Service") collects, uses, and protects your personal information when you visit our website or purchase our product.

1. Information We Collect

Information you provide

• Purchase information: Name, email address, and payment details when you buy our product. Payment card details are processed directly by Stripe and never stored on our servers.
• Email subscription: Email address if you subscribe to our newsletter.
• Checkout-intent email: If you enter an email on our pricing page to begin checkout, we store it temporarily for payment pre-fill and abandoned-checkout recovery. See section 9 for details.
• Contact: Any information you provide when contacting us via email.

Information collected automatically

• Analytics data: We use Google Analytics 4 (Measurement ID: G-P3W0RN5R5L) to collect anonymised usage data including pages visited, time on site, referral source, device type, and approximate location (country/city level).
• Cloudflare data: Our site is hosted on Cloudflare Pages, which may collect IP addresses, browser type, and request data for security and performance purposes. See Cloudflare's Privacy Policy.

2. How We Use Your Information

We use collected information to:

• Process and deliver your purchase.
• Send purchase confirmations and product access details.
• Send newsletter updates if you subscribed (you can unsubscribe at any time).
• Analyse site traffic and improve the Service.
• Prevent fraud and abuse.

We do not use your information for:

• Selling or renting to third parties.
• Targeted advertising or ad profiling.
• Automated decision-making that affects you.

3. Third-Party Services

We share data only with the following service providers, strictly for operating the Service:

We do not share your data with any other third parties.

4. Cookies

We use minimal cookies:

• Google Analytics cookies (_ga, _ga_*): Track anonymised site usage. These are first-party cookies with a 2-year expiry.
• Theme preference (pcf-theme): Stored in localStorage (not a cookie) to remember your dark/light mode preference. No data is sent to any server.

We do not use advertising cookies, tracking pixels, or social media widgets.

5. Data Retention

• Purchase records: Retained for the lifetime of your account and as required for tax and legal compliance.
• Analytics data: Google Analytics retains data for 14 months by default.
• Newsletter subscribers: Retained until you unsubscribe.
• IP addresses and browser metadata: Collected for fraud prevention and abuse detection. Retained for 90 days, then automatically deleted.
• Abandoned checkout data: If you begin but do not complete a purchase, your email address (if entered), approximate country, and page visited may be retained for up to 30 days for checkout analytics and service improvement, then automatically deleted.
• Contact emails: Retained for as long as necessary to resolve your enquiry.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data (subject to legal retention requirements).
• Unsubscribe from marketing emails at any time.
• Object to processing of your data for analytics purposes.

To exercise any of these rights, contact us at the email below.

7. Data Security

We protect your data through:

• HTTPS encryption on all pages.
• Stripe PCI-DSS compliant payment processing (we never see or store your card details).
• Cloudflare DDoS protection and WAF.
• No storage of sensitive personal data on our own servers.

8. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Checkout-Intent Email Capture

When you click a "Buy" button on our pricing page and enter your email address to continue to payment, we store that email (referred to internally as your "checkout intent email") for two specific, narrow purposes:

1. Pre-filling the Stripe checkout form so you don't have to re-enter your email on the next page.
2. Sending you a single abandoned-checkout reminder email within 24 hours if you leave before completing payment.

We do NOT use this email for marketing, newsletters, product announcements, or any other purpose. Adding yourself to our newsletter requires a separate, explicit opt-in (either via the checkbox on the checkout form, via our blog footer, or via our exit-intent popup).

Retention

• If you complete the purchase, your email is retained as part of your purchase record per section 3.
• If you don't complete the purchase, the checkout-intent email is purged from our database after 30 days.
• You can request earlier deletion by emailing help@propcashflow.my.

What we share

The checkout-intent email is sent to Stripe (for payment form pre-fill) and Resend (our transactional email provider, for the abandoned-checkout reminder). It is not shared with any advertising platform, analytics vendor, or third party beyond those two service providers.

Legal basis

• Singapore PDPA: consent given by entering your email on the pricing page and clicking "Continue to payment". The consent is narrowly scoped to checkout-recovery as described above.
• Malaysia PDPA: same — explicit consent at the point of entry. You may withdraw consent at any time via help@propcashflow.my.

10. International Transfers

Your data may be processed in the United States (Stripe, Cloudflare, Google) and other countries where our service providers operate. These providers maintain appropriate data protection safeguards.

11. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at:

Email: help@propcashflow.my