Privacy Policy

1. Who we are

TraderSign Sdn. Bhd. (company no. 202501012050), a company incorporated in Malaysia with its registered address at 38, 3rd Floor, Jalan Radin Anum, Bandar Baru Sri Petaling, 57000 Kuala Lumpur, Malaysia, trading as Lumen Charts, is responsible for the personal data described here. This policy covers our website (https://lumencharts.com), our documentation (https://docs.lumencharts.com) and the account, licensing and download service behind them.

We handle personal data under the Personal Data Protection Act 2010 of Malaysia and other data protection laws that apply to us.

2. The chart collects nothing

The Lumen Charts library runs inside our customers' own apps. It does not contact us and sends us no data about those apps or the people who use them. If you use an app built with Lumen Charts, the company behind that app is responsible for your data.

3. What we collect

Account: your name, email address and a securely hashed password, or, if you sign in with Google or GitHub, your account ID and email address from that service.

Organisation and team: your organisation's name, its members and their roles, and the email addresses of people you invite.

Billing: our payment processor, Stripe, holds your payment details and the billing name, address and tax ID you give at checkout. We keep your Stripe customer reference, your card brand and its last four digits, and your subscription history. We never see your full card number.

Licences and downloads: the names and domains of your licensed apps, your plans, and each build you download, with the time and IP address.

Agreements: which version of our agreements you accepted, when, and from which IP address, and your confirmation that you meet a plan's eligibility rules.

Security and activity: your sign-in session, including your IP address and browser, and a log of changes made in your organisation, such as invitations and plan changes.

Messages: Enterprise enquiries, emails you send us, and your email preferences.

Website usage, where analytics are enabled: the pages visited, the actions taken and the links that brought people to the site.

4. How we use it

We use this data to run your account and team, issue licences and builds, take payments and send invoices, keep the service secure, prevent fraud and abuse, keep records of what you accepted and downloaded, understand and improve our websites, reply to you, and meet our legal, tax and accounting obligations.

We process it to perform our agreements with you, to meet legal obligations, for our legitimate interests in running and protecting the service, or with your consent where the law requires it.

5. Cookies and browser storage

We use cookies to keep you signed in and to protect forms from cross-site attacks. The website also remembers, in your browser, the plan you chose while you sign up.

Where website analytics are enabled, we use OpenPanel on our own servers to understand how people use the site. We do not use analytics data for advertising or sell or share it. We use no advertising or retargeting pixels. If we add analytics that need your consent, we will ask first.

None of this applies to the Lumen Charts library itself, which collects nothing.

6. Emails

We send emails you need: email verification, password resets, licence and download notices, team invitations, billing notices and changes to our terms.

We also send a short series of getting-started emails after you sign up. Every one of them has a link to stop the rest.

7. Who we share it with

We do not sell personal data. We share it only as needed with:

Service providers that run the service for us: Stripe (payments and invoices), Cloudflare (hosting our website and documentation, and storing builds), our server hosting provider and our email delivery provider. Google and GitHub receive sign-in requests only if you choose to sign in with them.

Professional advisers, such as lawyers and accountants, where needed.

Authorities, where the law requires it or to protect our rights, our users or the public.

A buyer or successor of our business, under confidentiality, if the business is sold or reorganised.

8. Transfers outside Malaysia

Our service providers may store or process data outside Malaysia. Where the law requires it, we take reasonable steps to make sure the data stays protected.

9. How long we keep it

We keep account, organisation and licence data while your account is open and for a reasonable period after it closes.

We keep billing records, agreement acceptances and download records for as long as tax, accounting and other laws require, and as evidence of the licences we granted.

Sign-in sessions expire, and we delete or anonymise other data when we no longer need it.

10. Security

We protect personal data with access controls, encrypted connections, hashed passwords and limited access for our team. No system is completely secure; if a breach affects your personal data, we will tell you and the authorities where the law requires it.

11. Your rights

You can ask to access or correct your personal data, to have it deleted, or to limit how we use it, and you can withdraw consent where we rely on it. Email support@lumencharts.com. We may need to confirm who you are, and some data we must keep by law.

12. Children

Our service is for businesses and is not meant for anyone under 18. We do not knowingly collect their data.

13. Changes to this policy

We may update this policy. If a change is significant, we will tell you by email or on our website before it takes effect.

14. Contact

Questions or requests about your personal data: support@lumencharts.com, or write to TraderSign Sdn. Bhd., 38, 3rd Floor, Jalan Radin Anum, Bandar Baru Sri Petaling, 57000 Kuala Lumpur, Malaysia.