Privacy Policy
Effective Date: January 15, 2025At FlowMotionCast, we understand that managing your finances involves trust. This policy explains how we collect, use, and protect your personal information when you interact with our budget automation services. We're committed to transparency about our data practices and your rights under Thai law.
Information We Collect
Running a budget automation platform means we need certain information to provide you with accurate financial insights. Here's what we gather and why it matters to your experience.
Account Information
When you sign up for FlowMotionCast, we collect basic details like your name, email address, and phone number. If you're registering a business account, we'll also need your company name and tax identification number as required by Thai revenue regulations.
Financial Data
This is where things get more specific. To automate your budget tracking, we collect transaction data, bank account information (with your explicit consent), income sources, expense categories, and spending patterns. We don't store your full banking credentials—we use secure API connections through licensed financial data providers.
Technical Information
Like most online services, we automatically collect certain technical data: your IP address, browser type, device information, operating system details, and usage patterns within our platform. This helps us improve performance and catch potential security issues early.
Important Note: We never sell your personal information to third parties. Your financial data is yours, and we treat it with the confidentiality it deserves.
How We Use Your Information
Everything we collect serves a specific purpose. We're not in the business of hoarding data—we use what we need to make FlowMotionCast work effectively for you.
| Purpose | Data Used |
|---|---|
| Service Delivery | Account info, financial data, transaction history |
| Budget Analysis | Income sources, expense patterns, spending categories |
| Security Monitoring | IP addresses, login patterns, device information |
| Customer Support | Contact details, service history, communication records |
| Legal Compliance | All relevant data as required by Thai financial regulations |
We also use aggregated, anonymized data for research and service improvement. This means stripping out anything that could identify you personally before analyzing trends across our user base.
Legal Basis for Processing (Thailand PDPA Compliance)
Under Thailand's Personal Data Protection Act (PDPA), we process your data based on several legal grounds:
- Contractual Necessity: We need your information to provide the budget automation services you've signed up for
- Consent: For certain activities like connecting to your bank accounts, we ask for your explicit permission
- Legal Obligations: Thai financial regulations require us to maintain certain records and report specific transactions
- Legitimate Interests: We process some data to improve our services, prevent fraud, and maintain platform security—always balanced against your privacy rights
You have the right to withdraw consent at any time for activities that rely on it. Just keep in mind that withdrawing consent might limit our ability to provide certain features.
Data Sharing and Third Parties
We don't run this operation entirely on our own. Some trusted partners help us deliver services, but we're selective about who we work with.
Service Providers
We share data with companies that help us operate FlowMotionCast: cloud hosting providers (for data storage and processing), payment processors (for subscription billing), financial data aggregators (for bank connection services), and email service providers (for transactional communications).
Legal Requirements
Sometimes we're legally obligated to share information with Thai government agencies, including the Revenue Department for tax compliance purposes, the Bank of Thailand for financial reporting, and law enforcement when presented with valid legal requests.
Business Transfers
If FlowMotionCast is acquired or merges with another company, your data would transfer as part of that transaction. We'd notify you beforehand and ensure the new entity honors this privacy policy.
All third-party service providers we work with are contractually required to protect your data and use it only for the specific purposes we authorize.
Your Privacy Rights
Thai PDPA gives you substantial control over your personal data. Here's what you can do:
Access Your Data
Request a copy of all personal information we hold about you. We'll provide it in a readable format within 30 days.
Correct Inaccuracies
Update or fix any incorrect information in your account. Most details can be edited directly through your dashboard.
Delete Your Data
Request deletion of your account and associated data, subject to legal retention requirements for financial records.
Restrict Processing
Limit how we use your data in certain circumstances, like if you're disputing data accuracy.
Data Portability
Receive your data in a structured, machine-readable format to transfer to another service if you choose.
Object to Processing
Oppose certain types of data processing, particularly for marketing purposes or automated decision-making.
To exercise any of these rights, contact us at [email protected]. We'll verify your identity and respond within the timeframes required by Thai law—usually 30 days, though complex requests might take up to 90 days.
Data Security Measures
Financial data deserves serious protection. We've implemented multiple layers of security to keep your information safe from unauthorized access, alteration, or disclosure.
- 256-bit SSL encryption for all data transmitted between your device and our servers
- AES-256 encryption for data stored in our databases
- Multi-factor authentication options for account access
- Regular security audits conducted by independent third-party firms
- Strict access controls limiting employee access to personal data on a need-to-know basis
- Automated monitoring systems that detect suspicious activity patterns
- Secure data centers located in Thailand with physical security measures
- Regular backup procedures with encrypted off-site storage
Despite our best efforts, no online service is 100% secure. We encourage you to use strong passwords, enable two-factor authentication, and monitor your account regularly for unusual activity.
Data Retention Periods
We don't keep your data forever. Different types of information have different retention schedules based on legal requirements and business needs.
Active Account Data
While your account is active, we maintain your financial data, transaction history, and account information for as long as you use our services. This allows us to provide continuous budget tracking and historical analysis.
After Account Closure
When you close your account, we delete most personal data within 90 days. However, Thai financial regulations require us to retain certain records for seven years, including transaction logs, tax-related information, and identity verification documents.
Marketing Communications
If you've opted into marketing emails, we keep your contact preferences until you unsubscribe. After that, we retain a record of your unsubscribe request to respect your wishes going forward.
International Data Transfers
FlowMotionCast primarily operates within Thailand, and we store data on servers located in the country. However, some of our service providers (like cloud hosting companies) may process data in other countries.
When we transfer data internationally, we ensure adequate protection through approved mechanisms under Thai PDPA, including standard contractual clauses and verification that the receiving country has adequate data protection laws.
You have the right to request information about where your data is processed and what safeguards are in place for international transfers.
Cookies and Tracking Technologies
We use cookies and similar technologies to make FlowMotionCast work properly and understand how people use our platform.
Essential Cookies
These are necessary for basic functionality—things like keeping you logged in, remembering your language preferences, and maintaining security. You can't opt out of these without breaking core features.
Analytics Cookies
We use these to understand usage patterns, identify popular features, and spot areas for improvement. This data is aggregated and doesn't identify you personally.
Your Cookie Choices
You can control cookie settings through your browser preferences. Keep in mind that blocking certain cookies might affect your ability to use some FlowMotionCast features. Our cookie banner lets you manage preferences when you first visit our site.
Children's Privacy
FlowMotionCast isn't designed for users under 20 years old (the age of majority under Thai law). We don't knowingly collect personal information from minors. If we discover we've inadvertently gathered data from someone under 20, we'll delete it promptly.
Parents or guardians who believe their child has provided us with personal information should contact us immediately at [email protected].
Automated Decision-Making
Our budget automation features use algorithms to categorize transactions, identify spending patterns, and provide financial insights. While these processes are automated, they're designed to help you make better decisions—not make decisions for you.
You always have the right to review automated categorizations, request human review of any automated analysis, and override automatic suggestions with your own judgments.
Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices, legal requirements, or service features. When we make significant changes, we'll notify you via email and display a notice on our platform.
The "Effective Date" at the top of this policy shows when it was last updated. We encourage you to review it periodically, especially before providing new types of personal information.
Continuing to use FlowMotionCast after policy changes take effect means you accept the updated terms. If you disagree with changes, you can close your account before they become effective.
Filing Complaints
If you believe we've mishandled your personal data or violated your privacy rights, you can file a complaint with us first by contacting [email protected]. We'll investigate and respond within 30 days.
You also have the right to lodge a complaint directly with Thailand's Personal Data Protection Committee (PDPC), the regulatory body overseeing PDPA compliance. Contact information for the PDPC is available on their official website.