Legal & data governance
Privacy Policy
Effective: 6 August 2026 · Operator: T TWO J TECHNOLOGY, Malaysia
1. Scope
This policy explains how T TWO J TECHNOLOGY (trading as T2J Technology) processes information through its public website, T2J Universe OS, support services and customer-authorised platform integrations.
2. Information we process
Depending on the service and permissions approved by a customer or platform, we may process business account details, authorised staff identities, store and listing data, orders, inventory, fulfilment events, billing and settlement records, support conversations, technical logs and security events. We do not request unmasked marketplace personal data unless it is necessary, authorised and permitted by the platform.
3. Purposes
We process information to authenticate users, provide contracted commerce operations, synchronise approved stores, support picking and quality control, prepare reports, maintain security and audit trails, troubleshoot incidents, improve the service and meet legal obligations. We do not sell personal information.
4. Platform integrations
A company administrator must authorise each external platform connection. Access is limited to approved scopes. Connection status and permissions are shown in the product where available. Customers may request disconnection; tokens are revoked or removed and eligible synchronised data is handled under the deletion process and applicable platform requirements.
5. Access and sharing
Access is restricted by company, universe, role and operational need. We may use infrastructure and service providers necessary to operate the product, such as hosting, database, authentication, monitoring and communications providers. Information may also be disclosed where required by law, to protect security, or with the customer’s documented instruction.
6. Security
Controls include authenticated access, tenant scoping, least-privilege permissions, protected credentials, encrypted transport, activity logging, controlled administrative access and review of sensitive changes. No online service can guarantee absolute security; suspected incidents should be reported immediately.
7. Retention and deletion
Information is retained only as needed for the service, contractual support, security, audit, accounting or legal obligations. Retention varies by record type and customer agreement. Eligible data is deleted or de-identified after verified termination or deletion requests, subject to lawful retention and backup cycles.
8. Rights and requests
Authorised users may request access, correction, export, restriction, platform disconnection or deletion through their company administrator or T2J support. We verify the requester and the company’s authority before acting.
9. Contact
Privacy and security enquiries: [email protected] · WhatsApp: +60 14-386 5388.
This policy may be updated as product capabilities, approved platform scopes or legal requirements change. Material updates will be identified by a revised effective date.