Information We Collect

Personal Information You Provide

When you use our services or contact us, we collect information you choose to share:

• Contact details: name, email address, phone number, and business address
• Business information: company name, industry sector, and job title
• Financial data: cost records, budget information, and expense categories you upload for analysis
• Communication records: messages you send us, support tickets, and feedback

Information Collected Automatically

Our systems collect certain data when you visit our website:

• Usage patterns: pages viewed, features accessed, time spent on different sections
• Technical data: IP address, browser type, device information, operating system
• Performance metrics: load times, error reports, and system interactions

How We Use Your Information

We use your data to provide and improve our cost management services. Here's what that actually looks like:

Data Sharing and Disclosure

We share your information only when necessary and appropriate:

Service Providers

We work with trusted third parties who help us run our business:

• Cloud hosting providers for secure data storage
• Payment processors for transaction handling
• Email service providers for communication delivery
• Analytics tools for platform performance monitoring

These providers are contractually bound to protect your data and can only use it for the specific services they provide to us.

Legal Requirements

We may disclose information when required by Thai law, court orders, or government requests. This includes complying with:

• Tax audits and financial reporting requirements
• Law enforcement requests with proper legal documentation
• Regulatory compliance under Thai business regulations

Business Transfers

If EvolveAdvance is acquired or merges with another company, your information would be transferred as part of that transaction. We'd notify you before this happens.

Data Security

Protecting your information is a priority. We use multiple layers of security:

• Encryption: All data transmitted to and from our servers uses TLS 1.3 encryption
• Storage security: Financial data is encrypted at rest using AES-256 encryption
• Access controls: Employee access to personal data is restricted based on role and necessity
• Regular audits: We conduct security assessments and vulnerability testing quarterly
• Secure facilities: Our servers are hosted in certified data centers in Thailand with physical security measures

While we implement strong security measures, no system is completely invulnerable. If we detect a breach that affects your data, we'll notify you within 72 hours as required by Thai law.

Your Rights Under Thai Law

The Personal Data Protection Act gives you specific rights regarding your information. Here's what you can do:

Access and Portability

You can request a copy of all personal data we hold about you. We'll provide this in a commonly used electronic format within 30 days.

Correction

If your information is inaccurate or incomplete, you can ask us to correct it. You can update most account details directly through your dashboard.

Deletion

You can request deletion of your personal data, with some exceptions:

• We must retain certain financial records for 5 years under Thai accounting law
• Data needed for ongoing legal disputes or regulatory compliance cannot be deleted
• Anonymized usage statistics may be retained for platform improvement

Restriction and Objection

You can limit how we use your data or object to specific processing activities. For example, you can opt out of receiving marketing emails while keeping your account active.

Withdrawal of Consent

Where we process data based on your consent, you can withdraw that consent anytime. This won't affect any processing that occurred before withdrawal.

Data Retention

We keep your information only as long as necessary for the purposes outlined in this policy:

• Account information: Retained while your account is active, plus 12 months after closure
• Financial records: Stored for 5 years after account closure to comply with Thai Revenue Code requirements
• Support communications: Kept for 3 years to maintain service quality and resolve disputes
• Usage analytics: Anonymized after 18 months and retained indefinitely for platform improvement
• Marketing communications: Deleted within 60 days of unsubscribing

After retention periods expire, we securely delete or anonymize your data so it can no longer identify you.

International Data Transfers

Your data is primarily stored on servers located in Thailand. However, some of our service providers operate internationally, which may involve transferring data outside Thailand.

When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Transfers only to countries with adequate data protection regulations
• Additional safeguards specified in our agreements with international providers

Most of our critical infrastructure remains within Thailand to minimize cross-border data movement.

Cookies and Tracking

Our website uses cookies and similar technologies. These are small files stored on your device that help us provide a better experience.

Essential Cookies

These are necessary for basic website functionality — keeping you logged in, maintaining your session, and securing your account. You can't disable these without losing core features.

Analytics Cookies

We use analytics to understand how people use our platform. This helps us identify confusing interfaces, slow pages, and features that need improvement. These cookies don't identify you personally.

Managing Cookies

You can control cookies through your browser settings. Most browsers let you block or delete cookies, though this may affect website functionality.

Children's Privacy

EvolveAdvance's services are designed for businesses and professionals. We don't knowingly collect information from anyone under 18 years old. If we discover we've accidentally collected data from a minor, we'll delete it immediately.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website.

The "Last Updated" date at the top shows when the current version took effect. Continued use of our services after changes means you accept the updated policy.

Complaints and Disputes

If you're concerned about how we handle your data, contact us first. We'll investigate and respond within 30 days.

If you're not satisfied with our response, you have the right to file a complaint with:

You can also seek resolution through Thai courts if you believe we've violated your data protection rights.