Privacy notice

SPM Booster (spmbooster.com) is a Paradigm Pro product, operated by Tenang Teknologi Solutions (KT0560731-W) (“we”, “us”). We are responsible for the personal data you give SPM Booster. When Paradigm Pro Sdn Bhd is incorporated, it will take over SPM Booster and this responsibility, and we will tell you. Questions about your data: hello@paradigmpro.co.

• Account details: name, email, mobile number (optional), password (stored only in hashed form by our login provider), account type (student, parent or teacher), form and school if you give them, and your marketing choice.
• Learning data: answers you type in practice papers, photos of handwritten answers, papers and answer schemes you upload, and the marks, estimated grades, topic results and study recommendations we produce.
• Sharing data: links between a student and a parent, and class memberships.
• Purchase data: what you bought, the amount and the order reference. Card and bank details are handled by our payment provider; we never see or store them.
• Usage data: pages visited, device type, how you found us (for example an advertising campaign) and the cookies described in section 9.

• To run your account, mark your work and show your progress.
• To give AI-assisted marking and study recommendations.
• To process payments and send receipts and service emails.
• To let parents and teachers you have linked see a summary of your progress.
• To keep the service secure, prevent abuse and improve our papers and marking.
• To send revision tips and offers, only if you agreed. You can stop them at any time.

Most SPM students are under 18. If you are under 18, your parent or guardian must read this notice and agree to it before you create an account; you confirm this when you sign up. A student decides who sees their progress: only a parent who enters the student's share code, and teachers whose class the student joins. The student can remove either at any time.

To mark answers, we send them (and uploaded pages) to an AI provider that processes them on our behalf, currently Anthropic. We may add or switch to OpenAI or Google. Under their commercial terms these providers do not use this data to train their models. Their servers are outside Malaysia (section 7). AI marking can be wrong: unclear answers are flagged rather than guessed, and our team can review marks.

• Service providers acting for us: Vercel (hosting), Supabase (database, file storage and sign-in), Billplz (payments), Resend (email), our AI marking provider (section 5) and, if enabled, Meta for measuring our adverts.
• People you link: parents and teachers see a progress summary only, never your answers, photos or uploaded papers.
• Authorities, when the law requires it.
• A new owner of SPM Booster. If SPM Booster, or the business that runs it, is sold, merged or otherwise transferred, your personal data may be transferred to the new owner, who may use it only to continue providing SPM Booster on terms that protect it at least as well as this notice. We will tell you before this happens.

Our providers store or process data outside Malaysia, including in Singapore (hosting), India (database) and the United States (AI marking and email). We use established providers that protect personal data to a standard at least equivalent to the Personal Data Protection Act 2010.

• Account and learning data, including uploads: while your account is open. Ask us and we will delete it.
• Purchase records: seven years, as required for tax and accounting.

We use essential cookies to keep you signed in and to remember a purchase made before you created an account. We record visits and how you arrived (for example an advert's campaign code) to understand which campaigns work. If enabled, the Meta Pixel measures our Facebook and Instagram adverts. You can block cookies in your browser; signing in needs the essential ones.

You may ask to access or correct your personal data, withdraw consent, stop marketing, or close your account. Email hello@paradigmpro.co; we reply within 21 days. You may also complain to the Personal Data Protection Commissioner.

We will post changes on this page and email you about important ones.