Privacy Policy

This Privacy Policy explains how PropCashflow.my ("we", "us", "the Service") collects, uses, and protects your personal information when you visit our website or purchase our product.

1. Information We Collect

Information you provide

• Purchase information: Name, email address, and payment details when you buy our product. Payment card details are processed directly by Stripe and never stored on our servers.
• Email subscription: Email address if you subscribe to our newsletter.
• Contact: Any information you provide when contacting us via email.

Information collected automatically

• Analytics data: We use Google Analytics 4 (Measurement ID: G-P3W0RN5R5L) to collect anonymised usage data including pages visited, time on site, referral source, device type, and approximate location (country/city level).
• Cloudflare data: Our site is hosted on Cloudflare Pages, which may collect IP addresses, browser type, and request data for security and performance purposes. See Cloudflare's Privacy Policy.

2. How We Use Your Information

We use collected information to:

• Process and deliver your purchase.
• Send purchase confirmations and product access details.
• Send newsletter updates if you subscribed (you can unsubscribe at any time).
• Analyse site traffic and improve the Service.
• Prevent fraud and abuse.

We do not use your information for:

• Selling or renting to third parties.
• Targeted advertising or ad profiling.
• Automated decision-making that affects you.

3. Third-Party Services

We share data only with the following service providers, strictly for operating the Service:

We do not share your data with any other third parties.

4. Cookies

We use minimal cookies:

• Google Analytics cookies (_ga, _ga_*): Track anonymised site usage. These are first-party cookies with a 2-year expiry.
• Theme preference (pcf-theme): Stored in localStorage (not a cookie) to remember your dark/light mode preference. No data is sent to any server.

We do not use advertising cookies, tracking pixels, or social media widgets.

5. Data Retention

• Purchase records: Retained for the lifetime of your account and as required for tax and legal compliance.
• Analytics data: Google Analytics retains data for 14 months by default.
• Newsletter subscribers: Retained until you unsubscribe.
• IP addresses and browser metadata: Collected for fraud prevention and abuse detection. Retained for 90 days, then automatically deleted.
• Contact emails: Retained for as long as necessary to resolve your enquiry.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data (subject to legal retention requirements).
• Unsubscribe from marketing emails at any time.
• Object to processing of your data for analytics purposes.

To exercise any of these rights, contact us at the email below.

7. Data Security

We protect your data through:

• HTTPS encryption on all pages.
• Stripe PCI-DSS compliant payment processing (we never see or store your card details).
• Cloudflare DDoS protection and WAF.
• No storage of sensitive personal data on our own servers.

8. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. International Transfers

Your data may be processed in the United States (Stripe, Cloudflare, Google) and other countries where our service providers operate. These providers maintain appropriate data protection safeguards.

10. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions or requests, contact us at:

Email: [email protected]