Privacy Policy

Last Updated: February 15, 2025

At DesktopFlowConnect, we understand that your privacy matters. This comprehensive policy explains how we collect, use, protect, and handle your personal information when you use our cash flow budgeting platform. We're committed to transparency and giving you control over your data.

1. Information We Collect

Personal Information You Provide

When you register for DesktopFlowConnect, we collect information you voluntarily provide to us. This includes your name, email address, phone number, and company information. We also collect financial data you input into our budgeting tools, such as income sources, expense categories, and cash flow projections.

Account registration details (name, email, password)

Contact information (phone number, business address)

Financial data entered into budgeting tools

Payment information for subscription services

Communication preferences and support inquiries

Automatically Collected Information

Our platform automatically collects certain technical information to improve your experience and ensure security. This includes your IP address, browser type, device information, and how you interact with our platform features.

Data Type	Purpose	Retention Period
Usage Analytics	Platform improvement	24 months
Login Records	Security monitoring	12 months
Device Information	Technical support	18 months
Financial Data	Service provision	7 years (legal requirement)

2. How We Use Your Information

We use your personal information to provide and improve our cash flow budgeting services. Your financial data helps us generate accurate reports, forecasts, and recommendations tailored to your business needs. We also use your information to communicate important updates about your account and our services.

Service Delivery: Processing your financial data to generate budgets, forecasts, and analytical reports

Account Management: Managing your subscription, processing payments, and providing customer support

Communication: Sending service updates, security alerts, and educational content about cash flow management

Platform Improvement: Analyzing usage patterns to enhance our budgeting tools and user experience

Security: Monitoring for suspicious activity and protecting against fraud or unauthorized access

Legal Compliance: Meeting regulatory requirements for financial service providers in Thailand

Marketing Communications

We may send you educational content about financial planning and cash flow management. You can opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in our emails. Essential service communications cannot be disabled as they're necessary for platform operation.

3. Data Protection and Security

We take data security seriously. Your financial information is encrypted both in transit and at rest using industry-standard AES-256 encryption. Our servers are hosted in secure facilities with 24/7 monitoring, and we regularly conduct security audits to identify and address potential vulnerabilities.

Security Measures

End-to-end encryption for all data transmission

Multi-factor authentication for account access

Regular security audits and penetration testing

Secure data centers with physical access controls

Employee background checks and security training

Incident response procedures and breach notification protocols

Despite our robust security measures, no system is completely secure. We recommend using strong, unique passwords and enabling two-factor authentication on your account. If you suspect unauthorized access to your account, contact our security team immediately at security@desktopflowconnect.com.

4. Data Sharing and Third Parties

We don't sell your personal information to third parties. However, we may share your data with trusted service providers who help us deliver our platform services. These partners are contractually bound to protect your information and can only use it for specified purposes.

When We Share Information

Service Providers: Cloud hosting, payment processing, and customer support services

Legal Requirements: When required by Thai law or to protect our legal rights

Business Transfers: In case of merger, acquisition, or sale of assets (with user notification)

Consent: When you explicitly authorize us to share your information

International Data Transfers

Some of our service providers operate outside Thailand. When we transfer your data internationally, we ensure adequate protection through approved transfer mechanisms, including standard contractual clauses and adequacy decisions. Your data remains subject to this privacy policy regardless of processing location.

5. Your Privacy Rights

Under Thai privacy laws and our commitment to data protection, you have several rights regarding your personal information. We've designed our platform to make exercising these rights straightforward and transparent.

Your Rights Include

Access: Request a copy of all personal data we hold about you

Rectification: Correct inaccurate or incomplete information in your profile

Erasure: Request deletion of your personal data (subject to legal retention requirements)

Portability: Receive your data in a structured, machine-readable format

Restriction: Limit how we process your information in certain circumstances

Objection: Object to processing based on legitimate interests

Withdraw Consent: Revoke permission for data processing where consent is the legal basis

To exercise any of these rights, contact our privacy team at privacy@desktopflowconnect.com or use the data management tools in your account settings. We'll respond to your request within 30 days and may need to verify your identity before processing certain requests.

6. Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Financial data is subject to specific retention requirements under Thai banking and financial services regulations.

Retention Periods

Account Information: Retained while your account is active, plus 2 years after closure

Financial Data: 7 years from last transaction (regulatory requirement)

Communication Records: 3 years from last contact

Usage Analytics: 24 months in aggregated, anonymized form

Marketing Data: Until you unsubscribe or request deletion

When retention periods expire, we securely delete or anonymize your information. For financial data subject to regulatory requirements, we maintain secure archives that comply with Thai financial authority guidelines. You can request early deletion of certain data types that aren't subject to legal retention requirements.

7. Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze platform usage. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expired).

Cookie Type	Purpose	Duration
Essential Cookies	Platform functionality and security	Session
Analytics Cookies	Usage statistics and performance	24 months
Preference Cookies	Remember your settings	12 months
Marketing Cookies	Personalized content delivery	6 months

You can manage your cookie preferences through your browser settings or our cookie preference center. Note that disabling essential cookies may affect platform functionality. We respect "Do Not Track" signals where technically feasible.

8. Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our platform at least 30 days before the changes take effect.

Minor updates, such as clarifications or formatting changes, may be made without prior notice. We encourage you to review this policy regularly to stay informed about how we protect your information. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.

Notification Methods

For material changes to this policy, we'll send email notifications to your registered address and display a banner on your dashboard. You'll have the opportunity to review changes before they take effect. Continued use of our platform after the effective date constitutes acceptance of the updated policy.

Contact Our Privacy Team

Questions about this privacy policy or how we handle your data? Our privacy team is here to help.

Email: privacy@desktopflowconnect.com

Mail: Privacy Officer, DesktopFlowConnect
89, 1 Thanon Sookswat 4
เมือง Lampang 52000, Thailand

Phone: +66 2 573 0409

We respond to privacy inquiries within 48 hours during business days.