1. Data-controller identity
Controller: STARDEVZ TECHNOLOGIES. Registration number: 202603179406 (003868142-H). Address: PV16,6-6, PLATINUM LAKE CONDOMINIUM 2 JALAN DANAU SAUJANA, TAMAN DANAU KOTA, KUALA LUMPUR, 53300, W.P KUALA LUMPUR. Privacy contact: privacy@flowlts.com. Support contact: support@flowlts.com.
2. Personal data collected
Founder processing may include the following data. FlowLTS does not collect card numbers or CVC values; card details are entered directly with HitPay.
- Name, email, phone, optional company/team name, and selected Founder plan.
- Terms, privacy and refund-policy versions and acceptance records; optional marketing preference.
- Payment request identifiers/statuses, payment timestamps, receipt metadata, email-delivery metadata, and account-processing status.
- Technical request information, HMAC-derived abuse identifiers, and Turnstile verification/security metadata.
3. Sources
Data comes directly from you, from HitPay payment events, Resend delivery status, Cloudflare Turnstile verification, and technical interactions with FlowLTS.
4. Purposes
FlowLTS does not use Founder data for unrestricted unrelated marketing.
- Founder registration, RM10 payment processing, Founder Credit records and receipts.
- Transactional communications and account preparation.
- Fraud/abuse prevention, security monitoring and support.
- Refund handling and legal, regulatory or accounting obligations.
- Product improvement using aggregated or non-identifying information.
5. Required and optional information
Name, email, phone, plan selection, Terms/refund agreement, privacy acknowledgement, and Turnstile verification are required. Without them, registration or checkout cannot proceed. Company/team name and marketing consent are optional.
6. Disclosure classes
Data may be disclosed only as needed to HitPay, Resend, Supabase, Vercel, Cloudflare, professional advisers, auditors, regulators or authorities where lawfully required, and safeguarded successors in a legitimate business transfer. FlowLTS does not sell personal data.
7. Cross-border processing
Service providers may process or store data outside Malaysia. FlowLTS will assess and apply appropriate safeguards, but this draft does not claim that every transfer mechanism has received legal approval.
8. Security
Practical measures include restricted server-side access, encryption in transit, database access controls, secret separation, HMAC-based identifiers, signed payment webhooks, abuse protection, minimized logging, backups, and incident procedures. No system can guarantee absolute security.
9. Retention
Data is retained only as long as reasonably necessary for Founder participation, payments and receipts, support, security, accounting/legal obligations, and disputes. Final retention periods require owner, accountant and legal review.
10. Data-subject rights
You may contact privacy@flowlts.com to request access, correction, information about processing, withdrawal of optional marketing consent, limitation of direct marketing, or other rights available under applicable law. Deletion may be restricted where payment, accounting, security, dispute, or legal records must be retained.
11. Direct marketing
Founder registration, payment and receipt emails are transactional and are not marketing opt-in. Optional marketing consent is separate and unchecked. Promotional messages will not be sent without appropriate consent or another lawful basis, and optional consent may be withdrawn.
13. Children
The Founder Program is not intended for anyone under 18.
14. Changes
The effective date and version appear on this page. Material changes require a new policy version, and the current public version will remain accessible while effective.
15. Contact
Privacy enquiries: privacy@flowlts.com. Support: support@flowlts.com.