Privacy Policy

Information We Collect

We collect information you provide directly to us when you create an account, use our zero-based budgeting platform, or contact our support team. This includes your name, email address, phone number, and financial preferences you choose to share.

• Personal identification information including full name and contact details
• Account credentials and authentication information
• Financial goal settings and budgeting preferences you configure
• Communication records when you reach out to our team
• Device information and usage patterns to improve our service
• Location data if you enable location-based features

We also automatically collect certain technical information when you visit our website, including your IP address, browser type, operating system, and pages viewed. This helps us understand how users interact with our platform and identify areas for improvement.

How We Use Your Information

Your information serves specific purposes that directly benefit your experience with our zero-based budgeting tools and educational resources. We never use your data for purposes beyond what we explicitly state here.

We personalize your budgeting dashboard based on the preferences you set, send important account notifications, and provide customer support when you need assistance. Your financial data helps us recommend relevant educational content and budgeting strategies that align with your goals.

Data Protection & Security

We employ industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security protocols are regularly updated and audited by independent third parties.

• Multi-factor authentication for all user accounts
• Regular security audits and vulnerability assessments
• Strict access controls limiting who can view your data
• Automated intrusion detection and response systems
• Secure data transmission protocols (TLS 1.3)
• Regular employee training on data protection practices

In the unlikely event of a data breach, we will notify affected users within 72 hours and provide clear information about what happened, what information was involved, and what steps we're taking to address the situation.

Your Privacy Rights

Under Thai Personal Data Protection Act (PDPA) and international privacy laws, you have specific rights regarding your personal information. We respect these rights and provide easy ways for you to exercise them.

• Right to access your personal data and receive a copy of information we hold about you
• Right to rectification - you can update or correct inaccurate personal information
• Right to erasure - request deletion of your personal data under certain circumstances
• Right to restrict processing when you contest the accuracy of your data
• Right to data portability - receive your data in a structured, machine-readable format
• Right to object to processing based on legitimate interests

To exercise any of these rights, contact our privacy team using the information provided at the bottom of this policy. We typically respond to requests within 30 days and never charge fees for reasonable requests. We may need to verify your identity before processing certain requests to protect your privacy.

Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We only share your data in specific circumstances that directly benefit your use of our platform or when required by law.

All third-party service providers must sign data processing agreements that require them to protect your information according to the same standards we maintain. We regularly audit these relationships to ensure compliance with our privacy commitments.

Data Retention

We retain your personal information only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Different types of data have different retention periods based on their purpose and legal requirements.

When we delete your data, we use secure deletion methods to ensure it cannot be recovered. Backup copies are also securely deleted according to our data retention schedule. You can request early deletion of your data at any time by contacting our privacy team.

International Transfers

While our primary operations are based in Thailand, some of our service providers may process data in other countries. When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your privacy rights.

We maintain a current list of countries where your data may be processed and the legal mechanisms we use to protect your information during these transfers. This information is available upon request from our privacy team.

Cookies & Tracking

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze how our platform is used. You have control over most cookies through your browser settings.

• Essential cookies required for basic website functionality and security
• Preference cookies that remember your language and region settings
• Analytics cookies that help us understand user behavior and improve our platform
• Performance cookies that monitor website speed and identify technical issues

We do not use advertising cookies or allow third-party advertising networks to track your activity on our website. Our analytics cookies collect only aggregated, non-personally identifiable information about website usage patterns.

Children's Privacy

Our zero-based budgeting platform is designed for adults aged 18 and older. We do not knowingly collect personal information from children under 18 years of age. If we discover we have collected information from a child, we will delete it immediately.

Parents or guardians who believe their child has provided personal information to us should contact our privacy team immediately. We will work quickly to verify the situation and remove any collected information while taking steps to prevent future unauthorized access.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other operational needs. We will notify users of material changes at least 30 days before they take effect.

Notification methods include email announcements to registered users, prominent notices on our website, and updates to the "Last Updated" date at the top of this policy. Continued use of our services after changes become effective constitutes acceptance of the updated privacy policy.