Introduction and Scope

AddOriginFlowMatrix ("we," "our," or "us") operates addoriginflowmatrix.com and provides goal budget planning services to individuals and families in Malaysia. This privacy policy explains how we collect, use, store, and protect your personal information when you interact with our financial planning platform.

We understand that managing your finances requires trust, and we take your privacy seriously. This policy applies to all users of our services, whether you're browsing our website, using our budget planning tools, or participating in our financial education programs.

By accessing our services, you acknowledge that you have read and understood this privacy policy. If you disagree with any part of this policy, please discontinue use of our platform immediately.

Information We Collect

We collect several types of information to provide you with personalized budget planning services and improve your experience on our platform.

How We Use Your Information

Your information helps us deliver personalized budget planning services and continuously improve our platform. We process your data for several specific purposes, each designed to enhance your financial planning experience.

• Service Delivery: Create personalized budget plans, track your financial goals, and provide relevant planning tools
• Communication: Send important account updates, budget reminders, and educational content you've subscribed to receive
• Platform Improvement: Analyze usage patterns to enhance our features and develop new planning tools
• Customer Support: Respond to your inquiries and provide technical assistance when needed
• Security: Protect against unauthorized access and maintain the integrity of your financial data
• Compliance: Meet legal obligations and regulatory requirements in Malaysia

Data Sharing and Disclosure

We limit data sharing to essential service providers and legal requirements. Your financial information is sensitive, and we maintain strict controls over who can access it.

• Service Providers: Third-party companies that help us operate our platform, such as cloud hosting providers and payment processors, under strict confidentiality agreements
• Legal Requirements: When required by Malaysian law, court orders, or regulatory authorities
• Business Transfers: In the event of a merger or acquisition, your data would transfer under the same privacy protections
• Your Consent: When you explicitly authorize us to share specific information with trusted partners

We conduct thorough reviews of all service providers to ensure they meet our privacy and security standards. Any company that handles your data must demonstrate appropriate safeguards and agree to use your information only for specified purposes.

Your Privacy Rights

Under Malaysian data protection laws, you have significant control over your personal information. We respect these rights and provide clear processes for exercising them.

To exercise these rights, contact us using the information provided at the end of this policy. We typically respond to requests within 30 days and may need to verify your identity before processing certain requests.

Data Security and Protection

Protecting your financial information is our top priority. We implement multiple layers of security to safeguard your data against unauthorized access, alteration, or disclosure.

• SSL encryption for all data transmitted between your device and our servers
• Regular security audits and vulnerability assessments by independent third parties
• Access controls that limit employee access to your information on a need-to-know basis
• Secure data centers with physical security measures and redundant backups
• Regular staff training on data protection best practices and privacy requirements

While we maintain strong security measures, no system is completely immune to threats. We continuously monitor for security incidents and have response procedures in place. If we detect any unauthorized access to your information, we'll notify you promptly according to Malaysian data breach notification requirements.

Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Different types of data have different retention periods based on their purpose and legal requirements.

• Account Information: Retained while your account is active and for up to 7 years after closure for regulatory compliance
• Financial Planning Data: Kept for the duration of your subscription plus 3 years for service improvement analysis
• Communication Records: Stored for 2 years to maintain service quality and resolve disputes
• Technical Logs: Automatically deleted after 12 months unless needed for security investigations

When data reaches the end of its retention period, we securely delete it from our systems. You can request early deletion of certain information, though some data may need to be retained for legal or regulatory reasons even after account closure.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and provide personalized content. We believe in transparency about how these technologies work and give you control over their use.

• Essential Cookies: Required for basic website functionality, including login sessions and security features
• Preference Cookies: Remember your settings and choices to personalize your experience
• Analytics Cookies: Help us understand how visitors use our website to improve performance and content
• Marketing Cookies: Used to deliver relevant content and track the effectiveness of our communications

You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect website functionality, but you'll always be able to access core budget planning features.

International Data Transfers

While we primarily store data within Malaysia, some of our service providers may process information in other countries. When this occurs, we ensure appropriate safeguards are in place to protect your privacy.

All international transfers comply with Malaysian data protection requirements and include contractual protections that ensure your data receives the same level of protection regardless of location. We regularly review and update these arrangements to maintain the highest privacy standards.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our services, legal requirements, or privacy practices. When we make significant changes, we'll notify you through your registered email address and highlight the updates on our website.

We encourage you to review this policy regularly to stay informed about how we protect your information. The effective date at the top of this policy indicates when the current version was last updated.