Privacy Policy
Effective Date: January 15, 2025
At download-flow, we believe transparency isn't just a buzzword. It's how we operate. This policy explains what information we collect when you use our budget deviation analysis services, why we need it, and what we do with it. We've written this in plain English because legal jargon helps no one.
Information We Collect
Running a financial analysis platform means we need certain data to make things work. We're talking about the stuff you give us directly and some technical information that gets collected automatically.
Information You Provide
- Contact details when you sign up: name, email address, phone number
- Business information for accurate budget analysis services
- Financial data you upload for deviation tracking purposes
- Payment information when you subscribe to our services
- Communications you send us through our contact forms
Automatic Collection
Like most websites, we collect technical data automatically. This includes your IP address, browser type, device information, and how you interact with our platform. We use cookies and similar tracking tools, but you can manage these through your browser settings.
How We Use Your Information
Your data serves specific purposes. We don't collect information just because we can. Everything we gather helps us deliver better budget analysis services to you.
| Purpose | How We Use It |
|---|---|
| Service Delivery | Process your financial data and generate deviation reports |
| Communication | Send important updates about your account and analysis results |
| Platform Improvement | Analyze usage patterns to enhance our tools and features |
| Security | Protect against unauthorized access and fraudulent activity |
| Legal Compliance | Meet regulatory requirements under Thailand's data protection laws |
Data Protection Under Thailand Law
We operate in Thailand, which means we follow the Personal Data Protection Act (PDPA). This law gives you specific rights over your information, and we take these obligations seriously.
Your Legal Rights: Under Thailand's PDPA, you have the right to access, correct, delete, restrict processing, object to processing, and request data portability. These aren't just theoretical rights—we've built systems to make exercising them straightforward.
We maintain records of consent, process data only for legitimate purposes, and implement security measures that meet Thailand's regulatory standards. Our data processing activities are registered with the relevant authorities as required by law.
How We Protect Your Data
Security isn't an afterthought. We've invested in multiple layers of protection because financial data deserves serious safeguards.
- Industry-standard encryption for data transmission and storage
- Regular security audits and vulnerability assessments
- Access controls that limit who can view your information
- Secure data centers with physical and digital protection
- Staff training on data protection and confidentiality
- Incident response procedures for potential breaches
That said, no system is completely bulletproof. While we work hard to protect your data, we can't guarantee absolute security. What we can promise is that we'll notify you promptly if a breach affects your information, as required by Thailand law.
Sharing Your Information
We don't sell your data. Period. But we do share information with specific third parties who help us run our services. Here's who sees your data and why:
Service Providers
Cloud hosting companies, payment processors, and technical support providers need access to certain data to deliver their services. We vet these partners carefully and require them to protect your information through contractual agreements.
Legal Requirements
Sometimes we're legally obligated to share information with government authorities, regulators, or in response to valid legal requests. We only disclose what's required and will challenge overly broad requests when possible.
Business Transfers
If download-flow is acquired or merges with another company, your data would transfer as part of that transaction. We'd notify you before this happens and explain any changes to how your information is handled.
Data Retention
We keep your information only as long as necessary. For active accounts, that means while you're using our services plus a reasonable period after you stop (typically six months). Some data must be retained longer for legal or regulatory reasons.
Financial records might need to be kept for seven years under Thailand tax regulations. Personal identifiers can be deleted sooner once they're no longer needed for business purposes. When we delete data, we make sure it's gone from our active systems and backups within 90 days.
Your Rights and Choices
You're in control of your personal information. Here's what you can do and how to do it:
Access Your Data
Request a copy of the personal information we hold about you. We'll provide this in a portable format within 30 days of your request.
Correct Inaccuracies
If your information is wrong or outdated, let us know. You can update most details through your account settings, or contact us for help with other corrections.
Delete Your Account
Want to leave? You can delete your account and associated data. Some information may need to be retained for legal reasons, but we'll delete everything else within the timeframes mentioned above.
Withdraw Consent
For processing based on your consent, you can withdraw that consent anytime. This won't affect the lawfulness of processing that happened before withdrawal.
To exercise any of these rights, email us at info@download-flow.com with your request. We'll verify your identity and respond within the timeframes required by Thailand law (usually 30 days).
Cookies and Tracking
We use cookies to make our platform work properly and understand how people use it. Essential cookies keep you logged in and remember your preferences. Analytics cookies help us spot problems and improve features.
You can control cookies through your browser settings. Blocking certain cookies might affect how well our platform works for you, but essential functions should still operate.
International Data Transfers
Our servers are located in Thailand, but some service providers operate in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place through standard contractual clauses or other approved mechanisms.
For transfers outside Thailand, we verify that recipient countries have adequate data protection laws or that our partners have implemented suitable protective measures.
Children's Privacy
Our services aren't designed for anyone under 18. We don't knowingly collect information from children. If we discover we've inadvertently gathered data from someone underage, we'll delete it promptly.
Changes to This Policy
Privacy practices evolve. When we update this policy, we'll post the new version here and update the effective date. Significant changes will be communicated through email or a prominent notice on our platform.
Continuing to use our services after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account before they become effective.
Questions or Concerns?
If something in this policy isn't clear, or you have questions about how we handle your data, reach out to us:
Email: info@download-flow.com
Phone: +66 2 962 0817
Address: 3 Buppha Buri Alley, Chong Nonsi, Yan Nawa, Bangkok 10120, Thailand
You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe we've mishandled your information.