Privacy Policy
Last updated: 8 July 2026
elematch Open The Door Company elematch is operated by Open The Door Company. This policy explains how we collect, use, retain, transfer and delete your personal data, and the rights you may exercise. We follow data minimisation and time-limited retention: a birth date is personal data, and we collect only what the Service needs.
This policy is intended to comply with the Hong Kong PDPO, the Singapore PDPA and the Malaysia PDPA 2010 (as amended in 2024), as applicable.
What we collect
- Account data: email address, for login, account and service notices.
- Analysis inputs: name (optional we recommend codenames or initials instead of real names), birth date and gender (gender is used solely for life-stage calculation).
- Stripe, Usage and transactions: plan, monthly usage, credit balance and transaction records. Card details are handled directly by Stripe we never see or store your card number.
- Technical data: basic logs needed for security and operation (e.g. IP address, browser type).
We never ask for birth time, and we do not collect government ID, health data or other sensitive categories.
Purposes & legal bases
| Purpose | Data | Basis |
|---|---|---|
Generate the analyses and team reports you request | Birth date, gender, name (optional) | Contract performance / consent |
Manage accounts, plans, usage and payments | Email, usage, transactions | Contract; legal obligations (billing) |
Security and abuse prevention | Technical logs | Legitimate interests |
Direct marketing (if any) | (opt-in) Only with your explicit prior opt-in; unsubscribe anytime, free |
We never sell or rent your personal data, nor use it for unrelated purposes. Reports are generated by automated systems (including AI models) as reference content; we make no solely automated decisions with legal or similarly significant effects, and never use your data for automated employment decisions.
Other people's data
elematch 2.3, contact@elematch.asia, If you enter another person's data in a team map, you must first obtain their explicit consent and explain the purpose your responsibility under clause 2.3 of the Terms. Anyone whose data was entered without consent may email contact@elematch.asia for deletion, which we will action promptly.
Retention & auto-deletion
- 90 Stored analyses and team data: auto-deleted 90 days after creation (daily automated cleanup).
- Basic account data (email, plan): kept until you delete your account.
- Transaction records: kept for the period required by tax and accounting law.
Security
- Each person sees only their own data: database row-level security prevents users from reading one another's data.
- All connections use HTTPS; data is encrypted at rest.
- Breach notification: if a breach is likely to pose significant risk to you, we will notify the relevant regulators and affected users as required by applicable law (including the mandatory notification regimes of the Singapore and Malaysia PDPAs), as soon as practicable.
Processors & cross-border transfers
We use only the processors needed to run the Service, contractually required to protect data to no lesser standard than this policy:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database & authentication | Cloud (may be outside HK, incl. SG/US) |
| Stripe | Payment processing | ( Stripe) Global (Stripe infrastructure) |
| Vercel | Hosting | Global edge network |
Because these processors' servers may be outside your jurisdiction, your data may be transferred and stored across borders. We take reasonable measures (including contractual terms) to ensure comparable protection abroad. By using the Service you consent to these transfers.
Cookies Cookies
Google Analytics),,IP;() cookies(Meta Pixel), cookies, We use three types of cookies: (1) essential cookies for login and operation; (2) analytics cookies (Google Analytics) to measure visits and usage, with IP anonymisation; (3) advertising cookies (Meta Pixel) to measure ad performance and conversions. You can block or delete cookies at any time in your browser settings without affecting core site functions.
Your rights
Depending on the law of your jurisdiction (HK PDPO, SG PDPA, MY PDPA), you may:
- Access and obtain a copy of your personal data held by us;
- Correct inaccurate data you can also amend your inputs (including birth date) in your account at any time and regenerate the analysis;
- Withdraw consent and request that processing stop (some services may then be unavailable);
- Request deletion of your account and all its data;
- Opt out of direct marketing, at any time and free of charge;
- Raise queries or complaints with us; you may also complain to your local regulator (HK: PCPD; SG: PDPC; MY: JPDP).
contact@elematch.asiaTo exercise these rights, email contact@elematch.asia. We normally respond within 30 days (or any shorter period required by law). We may need to verify your identity first.
The team-report red line
Our core promise to every member: team reports never show any individual's timing, promotion or retention suggestions. The team level presents only overall collaboration and pacing references; individual timing content appears in that person's own report, for self-reflection.
Children
The Service is for persons aged 18 or above. We do not knowingly collect minors' data; if you find a minor's data has been entered, contact us for deletion.
Changes & contact
Updates will be posted here with a revised "last updated" date; material changes will also be notified by email or in-service.
Open The Door Company
contact@elematch.asiaData user / operator: Open The Door Company Privacy contact: contact@elematch.asia