Legal
Privacy Policy
Your privacy, by design.
We don't sell your data. We don't run ad trackers. Here's exactly what we do.
Effective date: 2026-05-09 · Updated: 2026-10-28 · Trove Deck Software Solution (202603284519 (AS0523835-T)), Malaysia
What We Collect
This policy is issued by Trove Deck Software Solution (Registration No. 202603284519 (AS0523835-T)), a software development business registered in Malaysia and trading as Trove Deck (“Trove Deck”, “we”, “us”).
Website (trovedeck.com): Standard server logs - IP address, user-agent string, and timestamp - for security and abuse detection only. No third-party analytics scripts or ad-tracking pixels.
Contact form: Name, email address, and message. Used solely to respond to your inquiry - not for marketing.
Project request form (trovedeck.com/request): the service you choose, your name and email address, an optional phone or WhatsApp number and company, your project description, your budget and timeline choices, any reference links and files you attach, the language of the form, and the IP address and browser user agent of the submission (to prevent abuse). Requests and files are stored on our own server, outside the public website, and uploaded files are never publicly accessible.
Custom development engagements: Project requirements, communication records, and any code or data you provide to fulfil the delivery. Governed by the terms of your engagement contract.
What We Do Not Do
- Sell, rent, or broker your personal data to any third party.
- Run ad tracking, retargeting, or third-party analytics on trovedeck.com.
- Perform cross-site profiling or build behavioral advertising profiles.
- Use your strategy logic, business data, or code for our own marketing.
- Disclose your private code, configurations, or business intelligence without your explicit authorization.
Security Practices
Infrastructure:
- Least-privilege access control across all services
- Layered key management and environment isolation
- Default minimum-visibility policy for sensitive data
- Nightly encrypted backups with rolling retention
Confidentiality: All client data, strategy logic, and proprietary configurations shared during engagements are treated as confidential under the engagement contract.
Purpose of Data Use
- To respond to contact-form inquiries
- To review and reply to project requests, and to prepare a written draft and quote
- To fulfil custom development engagements
- To improve security posture and system stability
- To fulfil contractual, legal, and risk-control obligations where applicable
Data Retention and Deletion
- Website server logs: Retained 30 days for security, then rotated.
- Contact-form submissions: Retained until your inquiry is resolved, plus a reasonable follow-up window.
- Project requests and attached files: Retained until your request is resolved, plus a reasonable follow-up window; if it becomes an engagement, per the terms of your engagement contract.
- Custom development data: Retained per the terms of your engagement contract.
Your Rights
You may request access, export, correction, or deletion of your personal data at any time.
- Email [email protected] - we respond within 7-14 business days.
- Telegram: @trovedeck
Third-Party Services
- Cloudflare - DNS and CDN for some subdomains. May log IP addresses at the edge per Cloudflare's Privacy Policy.
- Telegram - for project requests, a short internal alert with the request's reference number and service type (no personal details) is sent to our own Telegram account.
Mail from the website (contact form, project requests, confirmations) is sent through our own mail server, not a third-party email service.
We do not use Google Analytics, Facebook Pixel, or any advertising network on trovedeck.com.
Updates and Contact
Material changes will be communicated with reasonable notice. The latest version is always at trovedeck.com/privacy.
- Email: [email protected]
- Telegram: @trovedeck
Effective date: 2026-05-09
Chinese Summary
Trove Deck does not sell personal data, run ad trackers, or use your information for advertising. Website logs are used for security, contact-form data is used only to respond to inquiries, project requests and their files are used only to reply and prepare a quote, and client project data is governed by the engagement contract. For data access or deletion, contact [email protected].
TroveDial App Privacy
TroveDial is a separate Trove Deck product (internet radio & podcast streaming for Android). Its full privacy policy - covering account data, streaming behavior, Google Play purchases, and data retention - lives at its own dedicated page.
