Privacy policy

3X Advisor Agreements · Updated 14 October 2026

3X Advisor Sdn Bhd operates this agreement preparation and signing service. This policy explains how the service handles consultant account information, customer agreements, and Google Drive access.

Information the service handles

Google sign-in provides your Google account identifier and verified email address to identify your consultant account. The service stores agreement details entered by consultants, including customer names, IC numbers, dates, fees, and agreement wording. When a customer signs, it records the signature, acceptance, signing date and time, and available IP address and browser information. It also stores document identifiers and integrity hashes, signing-link credentials, and account sessions.

Why this information is used

The service uses this information to prepare agreements, show the customer the document, record acceptance, generate and download PDFs, separate consultant accounts, and support troubleshooting and document integrity.

Connecting your Google Drive

Connecting Drive is optional and requires your permission. The service requests the Google Drive “drive.file” permission to create and access files and folders created by this app or otherwise explicitly made available to it. It does not request access to your entire Drive or your Gmail messages. Your Google account identity is checked so the connected account matches your consultant login.

Signed PDFs are saved privately in your Drive under 3X Advisor Agreements → Year → Month. The service stores file and folder identifiers and an encrypted authorization token so it can save documents and retrieve PDFs without asking you to connect for every document. It reads uploaded PDFs back to verify their integrity and retrieves them when authorized users request a download.

Storage and retention

Agreement records, signatures, account information, and encrypted connection credentials are held in the app’s hosted database. PDFs are initially stored in hosted file storage. After a PDF is successfully saved to Drive and verified, the app removes its temporary PDF copy. Copies may remain while Drive saving is unavailable or unsuccessful, and some older agreement formats retain an original audit PDF in app storage. Agreement records and signatures remain in the database after a PDF moves to Drive.

There is no automatic 30-day deletion. The Delete action removes an agreement from the consultant’s list and disables its signing link; it does not permanently erase the stored record or delete a Drive file. Contact the support address below to request access, correction, or permanent deletion. Requests are reviewed against applicable record-retention obligations. Downloads and copies already shared with others are outside the app’s control.

Access and sharing

The consultant who created an agreement can access it through their account. Anyone who possesses its customer signing link can access that agreement, so share the link only with its intended recipient. The app does not make Drive files publicly shared; customer downloads are delivered through the app.

Google processes sign-in and Drive requests. The app’s hosting infrastructure, including Sites and Cloudflare database and file services, processes the data needed to run the service. Authorized administrators may access data for support, security, and operation. Information may also need to be disclosed where legally required. The service does not use Google user data for advertising, sell it, or use it to train AI models.

Google API data

3X Advisor Agreements’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your controls and security

You can revoke the app’s Google access through your Google Account connections. Revoking access stops future Drive access but does not remove existing Drive files or app records. Removing or altering an app-created PDF in Drive can make its download unavailable in the app. Download documents you need before removing them.

The service uses HTTPS, account-based access checks, protected session cookies, and encrypted stored Drive authorization tokens. Keep your account and signing links private. No online service can guarantee absolute security.

Contact and updates

For questions, corrections, or deletion requests, contact hello@3xadvisor.my. Avoid sending full IC numbers or signed documents in your initial enquiry. This page will be updated when the service’s data practices change.