Privacy Policy

1. Introduction

TrustNvelope ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we handle your personal information when you use our website and services.

Our registered office is at Level 30-11, The Gardens North Tower, Mid Valley City, Lingkaran Syed Putra, Kuala Lumpur 59200, Malaysia.

2. Personal Data We Collect

We may collect the following personal data:

• Identity Data: Name, username, company name, NRIC/ passport number (only when required for legal verification)
• Contact Data: Email address, phone number, billing address
• Technical Data: IP address, browser type, device information, cookies
• Usage Data: How you use our website and services
• Document Data: The documents you upload (encrypted and we cannot read them)

3. How We Collect Your Data

We collect data through:

• Direct interactions (registration forms, contact forms)
• Automated technologies (cookies, server logs)
• Third parties (payment processors, authentication services)

4. How We Use Your Data

We use your personal data only for:

• Providing and improving our services
• Processing transactions
• Communicating with you about your account
• Complying with legal obligations
• Sending service updates (not marketing unless you opt in)

Important: We do NOT sell your personal data to third parties. Your documents remain encrypted and unreadable by us.

5. Legal Basis for Processing (GDPR for international users)

For users in the European Union, we process data based on:

• Your consent
• Performance of a contract
• Legal compliance
• Legitimate interests (improving security)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• AES-256 encryption for all documents
• TLS 1.3 for data in transit
• Regular security audits
• Access controls and authentication
• Data stored in Malaysian data centers

7. Data Retention

We retain your personal data only as long as necessary:

• Account data: Until you delete your account
• Documents: Until you delete them or as per your retention settings
• Audit logs: 7 years (for legal compliance)
• Payment records: 7 years (tax requirements)

8. Your Rights Under PDPA

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Request access to your personal data
• Correct inaccurate data
• Withdraw consent
• Prevent processing that causes damage or distress
• Request deletion (subject to legal retention requirements)

To exercise these rights, email us at privacy@trustnvelope.com

9. Cookies and Tracking

We use cookies to:

• Keep you logged in
• Understand how you use our site
• Improve your experience

You can disable cookies in your browser settings, but some features may not work properly.

10. Third-Party Services

We use trusted third-party services:

• Payment processors: Stripe, Billplz (they handle payment data)
• Email: SendGrid (for transactional emails)
• Analytics: Google Analytics (anonymized data)

These services have their own privacy policies and data handling practices.

11. International Data Transfers

Your data is primarily stored in Malaysia. Some service providers may process data outside Malaysia. We ensure they provide adequate protection through:

• EU Standard Contractual Clauses
• Certification under Privacy Shield (where applicable)

12. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or website notice.

14. Contact Us

For privacy-related inquiries:

15. Complaints

If you are unsatisfied with our response, you have the right to complain to the Malaysian Personal Data Protection Department:

Jabatan Perlindungan Data Peribadi (JPDP)
Level 6, Setia Perkasa 4, Setia Perkasa Complex,
Pusat Pentadbiran Kerajaan Persekutuan,
62574 Putrajaya, Malaysia
Tel: +603 8000 8000
Email: aduan@jpdp.gov.my

---

This privacy policy was last updated on March 15, 2024 and is compliant with PDPA (Malaysia), GDPR (EU), and CCPA (California) requirements.