Privacy Policy

Last updated: 26 October 2026

This Privacy Policy explains how SMART DISRUPTIVE SOLUTIONS (202103024532 (003229928-U)) collects, uses, discloses and protects personal data in connection with the Invest Planner service and this website, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Personal data we collect

• Account data: name, email address, mobile number, company name, password (stored only in a protected, irreversible form) or Google sign-in identifier.
• Billing data: subscription plan, payment status and transaction references from our payment gateway. Card and bank details are entered on Razorpay Curlec's payment page and are not received or stored by us.
• Usage data: login times, security logs and basic technical data needed to run the Service.
• Enquiries: details you send through the contact form, email or WhatsApp.
• Client data entered by users: information about users' clients (see section 3).

2. How we use personal data

• To create and secure your account, including verifying your email address
• To provide, maintain and improve the Service
• To process subscriptions, payments, renewals, cancellations and refunds
• To send service notices (verification, password reset, billing, important changes) and to answer enquiries
• To comply with legal obligations and prevent fraud or misuse

We do not sell personal data and do not use it for third-party advertising.

3. Data about users' clients

Consultants may enter or import information about their clients (for example names, identity card numbers, account balances, investments, insurance policies and family details). For this data the consultant is the data user under the PDPA and is responsible for obtaining consent. We process it only on the consultant's instructions to provide the Service. PDF statements are read inside the user's browser; the original PDF files are not uploaded to our servers – only the figures and details extracted by the app are stored in the user's account.

4. Disclosure

We disclose personal data only to service providers that help us operate the Service – Cloudflare (hosting and database), Razorpay Curlec (payments), Resend (sending account emails) and Google (if you choose Google sign-in) – and where required by law or to protect our rights. These providers may store data outside Malaysia with appropriate safeguards.

5. Security

Data is encrypted in transit (HTTPS). Accounts require a verified email and password; repeated failed logins are blocked; sessions expire after 30 days. Each user's data is accessible only through their own account. No method of transmission or storage is 100% secure, but we take reasonable steps to protect personal data.

6. Retention

We keep account and client data while the account is active. If an account is closed, or remains unpaid for 12 months after expiry, we delete stored data within 90 days, except records we must keep by law (for example billing records).

7. Your rights

You may request access to or correction of your personal data, withdraw consent, or ask us to close your account, by contacting us. Clients of consultants should contact their consultant first. We will respond within 21 days as required by the PDPA.

8. Cookies

We use one essential cookie to keep you logged in. We do not use advertising or tracking cookies.

9. Changes

We may update this policy and will post the updated version on this page, notifying users by email of significant changes.

10. Contact

SMART DISRUPTIVE SOLUTIONS (202103024532 (003229928-U)) · Email: smartdisruptivesolutions@gmail.com · Tel: 011-51366817