Privacy Policy

Last updated 16 September 2026

This policy covers tbwnsignal.my, operated by TBWN Solutions. It describes what we collect, why we hold it, and who else touches it. If anything here is unclear, email support@tbwnsignal.my.

What we collect

Name, email and phone number — given when you register, used to issue your access key and to reach you about your account.
Your access key and its expiry — this is what logs you in.
Notification subscription — if you allow browser notifications, we store the token your browser issues so we can send signal alerts. Revoking the permission ends this.
Basic usage — last login time, and which signals your dashboard has loaded.
Broker account reference — only if you apply for free access through a broker membership, so the introducing broker can verify it.

What we never see

Your card details. Payments are handled entirely by Stripe. Card numbers go from your browser to Stripe and never reach our servers. We only ever see that a payment succeeded, its amount, and the email attached to it.

Who processes your data

Stripe — payments, subscriptions, invoices and the billing portal.
Supabase — the database holding subscribers, access keys and signal history.
Vercel — hosting for this website and its API.
Resend — sending account emails, such as your access key and expiry reminders.

We do not sell your data, and we do not share it for advertising.

How long we keep it

Account records are kept while your account exists and for as long as we are required to keep payment records. Signal history is kept as part of our published performance record and is not linked to individual customers.

Your choices

See or correct your details — email us and we will send you what we hold.
Delete your account — email us. We remove your personal details; records we must keep for accounting are retained in a minimal form.
Stop notifications — turn them off in your browser, or in the dashboard.
Stop emails — every non-essential email has an unsubscribe link. We will still email you about payments and access.

Security

The site is served over HTTPS. Access keys are the credential for the dashboard, so treat yours like a password — anyone holding it can see your dashboard. If you think yours has leaked, email us and we will issue a new one.

Changes

If this policy changes materially we will update the date at the top of this page. Continuing to use the service after a change means you accept it.