Privacy Policy

Effective Date: 8 April 2026

Flowlytix.co (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the Thailand Personal Data Protection Act (PDPA), the General Data Protection Regulation (GDPR), and other applicable data protection laws.

1. Information We Collect

Account Information: Name, email address, job title, and company name provided during registration.
Analytical Data (User-Provided): Data sets, CRM leads, or business records you upload for processing. Note: We act as a Data Processor for this information; you remain the Data Controller.
Billing Information: Payment details processed via third-party secure gateways (e.g., Stripe, PayPal). We do not store full credit card numbers.
Technical Usage Data: IP address, browser type, device information, and interaction patterns with our analytical dashboards.

2. How We Use Your Information

Service Delivery: To generate growth intelligence, business patterns, and CRM insights.
Personalization: To tailor dashboard layouts and reporting to your specific business needs.
Communication: To send system updates, subscription alerts, and newsletters (with an opt-out option).
Product Improvement: Using anonymized, aggregated data to improve our machine learning models and platform performance.
Legal Compliance: To prevent fraud and meet regulatory obligations.

3. Legal Basis for Processing

We process data under the following conditions:

Consent: When you explicitly agree to data collection (e.g., cookies, newsletters).
Contract: Necessary to provide the services you have subscribed to.
Legitimate Interests: For platform security, internal analytics, and service optimization.
Legal Obligation: When required by Thai or international law.

4. Data Sharing and Disclosure

No Sale of Data: We never sell your personal or business data to third parties.
Service Providers: We share data with trusted partners (e.g., cloud hosting, AI processing units) who are contractually bound to protect your data.
Business Transfers: In the event of a merger or acquisition, your data may be transferred, subject to the same privacy protections.

5. International Data Transfers

As a global intelligence platform, your data may be processed on servers located outside of Thailand. We ensure all transfers meet PDPA/GDPR requirements through Standard Contractual Clauses (SCCs) or equivalent safeguards.

6. Data Security and Retention

Security: We implement SSL encryption, firewalls, and regular security audits. However, please note that no transmission over the internet is 100% secure.
Retention: We retain account information for the duration of your subscription. Uploaded analytical data is retained only as long as necessary to perform the requested analysis or as dictated by your subscription tier settings.

7. Your Rights (PDPA & GDPR)

You have the following rights regarding your data:

Access & Rectification: Request a copy of your data or correct inaccuracies.
Erasure (Right to be Forgotten): Request deletion of your account and associated data.
Object to Processing: Limit how we use your data for marketing or profiling.
Data Portability: Request your data in a machine-readable format (e.g., JSON or CSV).
Withdraw Consent: Revoke permissions at any time via your account settings.

8. Cookies and Tracking

We use cookies to maintain your session and analyze traffic. You can manage these settings through our Cookie Consent Banner or your browser settings.

9. Third-Party Links

Our platform may integrate with or link to third-party services (e.g., Salesforce, LinkedIn). We are not responsible for the privacy practices of these external sites.

10. Contact Us

For questions, data requests, or to contact our Data Protection Officer (DPO), please reach out to: Email: [email protected]