Privacy Policy

Running a financial analysis service means we need certain information from you. But we only ask for what's actually necessary to provide our services and improve your experience with us.

Information You Give Us Directly

When you create an account or use our services, you share information with us. This includes your name, email address, phone number, and company details. If you're using our business analysis tools, we'll also collect information about your business operations and financial data you choose to analyze through our platform.

Data Generated Through Service Use

Our platform automatically collects some information when you use it. We track which features you use most, how long you spend analyzing reports, and what types of financial insights you access. This helps us understand what's working and what needs improvement.

Every piece of data we collect serves a specific purpose. We're not in the business of hoarding information—we use what we need to run our service effectively and provide value to you.

We don't sell your personal information to anyone. Period. But we do share data in specific situations where it's necessary to provide our service or required by law.

Service Providers

We work with trusted third-party companies that help us run our platform. This includes cloud hosting providers, email service providers, and payment processors. These companies can only use your data to perform services for us—they can't use it for their own purposes.

Legal Requirements

If Thai authorities request information as part of a legal investigation, or if we're required to comply with a court order, we'll provide the necessary data. We'll notify you when possible, unless we're legally prohibited from doing so.

Business Transfers

Should forwardtechbox merge with another company or be acquired, your information would transfer to the new entity. We'd notify you before this happens and explain any changes to how your data is handled.

Security isn't just a checkbox for us—it's built into how we operate. We use multiple layers of protection to keep your data safe from unauthorized access, loss, or misuse.

All data transmitted to our servers uses TLS encryption. Your passwords are hashed and salted, so even we can't see them. Our databases are encrypted at rest, and we restrict access to personal data to only those employees who need it for their work.

We conduct regular security audits and vulnerability assessments. Our team receives ongoing training about data protection best practices. And we have incident response procedures ready if something does go wrong.

We don't keep your data forever. Once it's no longer needed for the purposes we collected it, we delete it—unless we're legally required to retain it longer.

Active account data stays with us as long as you maintain your account. If you close your account, we'll delete most of your personal information within 90 days. Some data might stick around longer if needed for legal compliance or dispute resolution—typically up to seven years for financial records, as required by Thai accounting regulations.

Anonymous usage statistics might be retained indefinitely since they can't be traced back to you. These help us understand long-term trends and improve our service for everyone.

How to Request Deletion

You can request deletion of your account and associated data at any time. Send us an email at [email protected] with "Data Deletion Request" in the subject line. We'll confirm your identity and process the request within 30 days. You'll receive confirmation once deletion is complete.

Our primary servers are located in Thailand, but some of our service providers operate in other countries. When we transfer your data outside Thailand, we ensure appropriate safeguards are in place to protect it according to PDPA requirements.

These safeguards include contractual clauses that require our partners to maintain data protection standards equivalent to Thai law, regular audits of their security practices, and encryption during transfer and storage.

Our services are designed for businesses and aren't intended for anyone under 18 years old. We don't knowingly collect personal information from children. If we discover that we've accidentally collected data from someone under 18, we'll delete it immediately.

If you're a parent and believe your child has provided us with personal information, contact us right away so we can address the situation.

Business needs and legal requirements change over time, so we might update this privacy policy occasionally. When we make significant changes, we'll notify you by email and update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our services after changes take effect means you accept the updated policy.

Like most websites, we use cookies and similar technologies to make our service work properly and understand how people use it. Some cookies are essential—without them, you can't log in or use key features. Others help us improve performance or remember your preferences.

You can control cookies through your browser settings, though disabling certain cookies might limit some functionality. We don't use cookies for advertising purposes since we're a business service, not a consumer product.