Legal

Privacy Policy

Your privacy, by design.

We don't sell your data. We don't run ad trackers. Here's exactly what we do.

Effective date: 2026-05-09  ·  Updated: 2026-10-28  ·  Trove Deck Software Solution (202603284519 (AS0523835-T)), Malaysia

01

What We Collect

This policy is issued by Trove Deck Software Solution (Registration No. 202603284519 (AS0523835-T)), a software development business registered in Malaysia and trading as Trove Deck (“Trove Deck”, “we”, “us”).

Website (trovedeck.com): Standard server logs - IP address, user-agent string, and timestamp - for security and abuse detection only. No third-party analytics scripts or ad-tracking pixels.

Contact form: Name, email address, and message. Used solely to respond to your inquiry - not for marketing.

Project request form (trovedeck.com/request): the service you choose, your name and email address, an optional phone or WhatsApp number and company, your project description, your budget and timeline choices, any reference links and files you attach, the language of the form, and the IP address and browser user agent of the submission (to prevent abuse). Requests and files are stored on our own server, outside the public website, and uploaded files are never publicly accessible.

Custom development engagements: Project requirements, communication records, and any code or data you provide to fulfil the delivery. Governed by the terms of your engagement contract.

02

What We Do Not Do

  • Sell, rent, or broker your personal data to any third party.
  • Run ad tracking, retargeting, or third-party analytics on trovedeck.com.
  • Perform cross-site profiling or build behavioral advertising profiles.
  • Use your strategy logic, business data, or code for our own marketing.
  • Disclose your private code, configurations, or business intelligence without your explicit authorization.
03

Security Practices

Infrastructure:

  • Least-privilege access control across all services
  • Layered key management and environment isolation
  • Default minimum-visibility policy for sensitive data
  • Nightly encrypted backups with rolling retention

Confidentiality: All client data, strategy logic, and proprietary configurations shared during engagements are treated as confidential under the engagement contract.

04

Purpose of Data Use

  • To respond to contact-form inquiries
  • To review and reply to project requests, and to prepare a written draft and quote
  • To fulfil custom development engagements
  • To improve security posture and system stability
  • To fulfil contractual, legal, and risk-control obligations where applicable
05

Data Retention and Deletion

  • Website server logs: Retained 30 days for security, then rotated.
  • Contact-form submissions: Retained until your inquiry is resolved, plus a reasonable follow-up window.
  • Project requests and attached files: Retained until your request is resolved, plus a reasonable follow-up window; if it becomes an engagement, per the terms of your engagement contract.
  • Custom development data: Retained per the terms of your engagement contract.
06

Your Rights

You may request access, export, correction, or deletion of your personal data at any time.

07

Third-Party Services

  • Cloudflare - DNS and CDN for some subdomains. May log IP addresses at the edge per Cloudflare's Privacy Policy.
  • Telegram - for project requests, a short internal alert with the request's reference number and service type (no personal details) is sent to our own Telegram account.

Mail from the website (contact form, project requests, confirmations) is sent through our own mail server, not a third-party email service.

We do not use Google Analytics, Facebook Pixel, or any advertising network on trovedeck.com.

08

Updates and Contact

Material changes will be communicated with reasonable notice. The latest version is always at trovedeck.com/privacy.

Effective date: 2026-05-09

09

Chinese Summary

Trove Deck does not sell personal data, run ad trackers, or use your information for advertising. Website logs are used for security, contact-form data is used only to respond to inquiries, project requests and their files are used only to reply and prepare a quote, and client project data is governed by the engagement contract. For data access or deletion, contact [email protected].

10

TroveDial App Privacy

TroveDial is a separate Trove Deck product (internet radio & podcast streaming for Android). Its full privacy policy - covering account data, streaming behavior, Google Play purchases, and data retention - lives at its own dedicated page.

TroveDial Privacy Policy

Back to Home