Privacy Notice

This notice explains how FG Event Tech [legal entity name to be confirmed] ("FG Event Tech", "we", "us") collects, uses, shares and protects personal data when you use SLV Tools, the web application available at https://slv.fgeventtech.com (the "Service"). It is written in plain language so that you can understand what happens to your data and what choices you have.

For users in Malaysia, this notice is issued under the Notice and Choice Principle of the Personal Data Protection Act 2010 ("PDPA"). The Service is operated from Malaysia and is offered internationally, so we also describe the information that users in other countries (for example, the European Union or the United Kingdom) are entitled to receive.

1. Who we are

The Service is operated by FG Event Tech [legal entity name to be confirmed], [registered address to be confirmed], Malaysia. We are the data controller (in PDPA terms, the data user) for personal data processed through the Service.

• Privacy enquiries: [privacy contact email to be confirmed]
• General support: [support email to be confirmed]

2. Who this notice applies to

This notice applies to:

• people who register for an account on the Service;
• people whose details are entered into the Service by an organisation, for example as a business contact;
• people who visit the public pages of the Service.

SLV Tools is built for event-production companies (sound, lighting and visual crews). When an organisation enters data about its own staff, suppliers or clients, that organisation is responsible for having a proper basis to do so. We process that data on the organisation's behalf to provide the Service.

3. Personal data we collect

3.1 When you register

• Full name
• Email address
• Contact number
• Country
• For email and password accounts: a password. Passwords are handled by our authentication provider and are stored only in hashed form. We never store or see your password in plain text.

3.2 When you sign in with Google

If you choose to sign in with Google, Google provides us with your name and email address only. We do not request access to your Gmail, Google Drive or Google Contacts.

3.3 Organisation data you enter

Depending on how you use the Service, you or your organisation may enter:

• company name, logo and address;
• business contacts (names, roles, phone numbers and email addresses of colleagues, clients or suppliers);
• equipment lists and flight case lists;
• vehicle profiles;
• project and loading plans;
• optional photos and declared equipment values.

3.4 Technical and security data

When you use the Service, our hosting and authentication providers generate standard server and security logs (for example IP address, browser type, timestamps and the pages or actions requested). We use these only to keep the Service secure, to diagnose problems and to prevent abuse.

3.5 Data we do not collect

We do not use advertising cookies and we do not run third-party analytics at launch. We do not knowingly collect sensitive personal data (such as health, religious or biometric data) and ask that you do not enter it into the Service.

4. Why we use your data

We use personal data for the following purposes:

• creating your account and signing you in;
• administering your account and your organisation (members, roles, settings);
• enabling collaboration on projects within your organisation;
• sending service notifications, such as email verification, invitations and important changes to the Service;
• keeping the Service secure and preventing fraud and abuse;
• providing customer support when you contact us;
• delivering the product features you ask for (for example, generating a loading plan or a share link);
• sending optional marketing communications, only if you have given separate consent.

5. Our legal basis

Where a legal basis is required, we rely on:

• Performance of a contract – to provide the Service under our Terms of Service;
• Legitimate interests – to keep the Service secure, prevent abuse and improve how the Service works, in ways you would reasonably expect and that do not override your rights;
• Legal obligations – where we must keep or disclose data under applicable law;
• Consent – for marketing communications only. You can withdraw consent at any time.

Under the PDPA, providing the registration data listed in section 3.1 is necessary for us to create and operate your account. If you do not provide it, we will not be able to register you.

6. Who we share your data with

We do not sell personal data. We share it only with service providers (processors) that help us run the Service, and only to the extent needed:

We may also disclose personal data:

• to other members of your organisation, as part of the normal operation of the Service;
• to anyone you choose to share a plan or document with through a share link;
• where required by law, a court order or a competent authority;
• to a successor if our business is sold or merged, with notice to you.

We do not use your equipment data or private documents for purposes unrelated to providing the Service to you.

7. International transfers

Because our providers operate in Singapore and other locations, personal data is transferred outside Malaysia (and, for users elsewhere, outside your country). We put contractual safeguards in place with our providers, including data processing terms and, where required, standard contractual clauses, so that your data receives a comparable level of protection wherever it is processed.

8. How long we keep your data

• Account data is kept for the life of your account, plus a reasonable period afterwards for legal, dispute-resolution and security purposes.
• Organisation project records (such as plans you created for your company) belong to the organisation and may be retained by the organisation after you leave it.
• Backups are kept on a rolling schedule and roll off automatically.

See our Data Deletion Policy for what happens when you delete your account.

9. How we protect your data

We use reputable providers, encrypt data in transit, restrict access to data based on organisation membership and roles, and never store passwords in plain text. No system is perfectly secure, so please use a strong, unique password and keep your sign-in details private.

10. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your account and personal data;
• Withdraw consent to marketing at any time;
• Export your data in a portable format;
• Object to certain processing where applicable law provides for this.

You can exercise most of these rights yourself from Account Settings in the Service:

• update your profile details;
• request a data export;
• request account deletion;
• change your marketing preferences.

For anything else, email [privacy contact email to be confirmed]. We may need to verify your identity before acting on a request. We aim to respond within the time required by applicable law.

If you are not satisfied with how we handle your data, you may lodge a complaint with the Malaysian Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, JPDP) or with the data protection authority in your own country.

11. Marketing

We only send marketing emails if you have separately agreed to receive them. Every marketing email includes an unsubscribe link, and you can change your preference at any time in Account Settings. Service notifications (such as email verification or security alerts) are not marketing and will still be sent while you have an account.

12. Cookies

The Service uses only strictly necessary cookies to keep you signed in. We do not use advertising cookies or third-party analytics at launch. Details are in our Cookie Policy.

13. AI features

We do not use the data you upload to train external AI models by default. If we introduce a feature that sends your project data to a third-party AI provider, we will tell you clearly in the product before the feature is used, so that you can decide whether to use it.

14. Age requirement

The Service is intended for business use. You must be at least 18 years old, or the age of majority in your country if higher, to create an account. We do not knowingly collect data from anyone below that age.

15. Changes to this notice

We may update this notice as the Service develops. If we make a material change, we will notify you by email or in the product before it takes effect. The version number and effective date at the top of this page tell you which version applies.

16. Contact us

FG Event Tech [legal entity name to be confirmed]
[registered address to be confirmed]
Privacy: [privacy contact email to be confirmed]
Support: [support email to be confirmed]

Revision history

• Version 1.0 (22 October 2026) – Initial draft for public beta (English and Bahasa Malaysia). Prepared for review by legal counsel.