Privacy Policy
Last updated 27 October 2026
This policy explains what personal data Wolf Street Academy collects, why, who we share it with and your rights under Malaysia's Personal Data Protection Act 2010 (PDPA). It applies to wolfstreetacademy.io, app.wolfstreetacademy.io, our Telegram bots and channels, and The KillZone Protocol.
1. Who is responsible
Resilient Elementrix Resources (SSM 003226583M), A-5-03, Street Mall, One South, Jalan OS, Taman Serdang Perdana 6, 43300 Seri Kembangan, Selangor, Malaysia is the data user responsible for your personal data. Contact: +60 12-342 0822 or officialwolffx@gmail.com.
2. What we collect
| Data | Why |
|---|---|
| Name, email address, password (stored only as a secure hash by our authentication provider) | To create and secure your account and contact you about it |
| Country, chosen plan | To show the right prices and payment methods and to run your plan |
| TradingView username | To grant and remove access to The KillZone Protocol |
| Telegram user ID and username (when you link Telegram) | To let you join, and remove you from, the private channel |
| Subscription and payment records (plan, amount, dates, status, payment reference). Card details are handled by our payment provider; we never see full card numbers | Billing, renewals, accounting and tax records |
| Referral code used and affiliate earnings | To credit and pay affiliate commission |
| Beta request notes and messages you send us | To handle your request |
| Technical data: IP address, browser, pages visited, error logs | Security, fraud prevention and keeping the service working |
We do not knowingly collect data from anyone under 18, and we do not sell personal data.
3. Cookies and local storage
We use essential cookies to keep you signed in. The app also stores small preferences in your browser, such as the instruments you follow and whether you have seen the tour. We do not use advertising cookies.
4. Who we share it with
Only with service providers that help us run the service, under contracts that require them to protect it:
- Supabase (database and sign-in, servers in Singapore)
- Vercel (website and app hosting)
- DigitalOcean (servers running our market bots, Singapore)
- Resend (sending account emails)
- Our payment provider (processing payments)
- Telegram and TradingView (when you link your accounts to use those features)
We may also disclose data where the law requires it, or to protect our rights in a dispute or against fraud. Some providers process data outside Malaysia; where they do, we take steps so it receives a level of protection comparable to the PDPA.
5. How long we keep it
Account data is kept while your account is open and for up to 12 months after it closes, then deleted or anonymised. Payment and tax records are kept for 7 years as Malaysian law requires. Server logs are kept for up to 90 days.
6. Security
Data is encrypted in transit, access is limited to the people who need it, and databases use row-level security so members can only see their own records. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
7. Your rights
You can ask to access a copy of your personal data, correct it, withdraw consent for optional processing, or have your account deleted. Email officialwolffx@gmail.com; we reply within 21 days. Deleting your account ends any active plan. You can also unsubscribe from non-essential emails at any time. If you are unhappy with our response, you may complain to the Personal Data Protection Commissioner, Malaysia.
8. Changes
We will post any update here with a new date, and email members about material changes.