AdvantaFlow Logo
Certified Coordination Platform
Mon-Fri: 8:00 AM - 6:00 PM ICT

Privacy Policy

Last Updated: February 15, 2025

At AdvantaFlow, we understand that your privacy matters. When you coordinate teams and manage contractors through our platform, you're trusting us with information that keeps your business running. This policy explains how we handle that trust – in plain language, without legal gymnastics.

Who We Are and How to Reach Us

AdvantaFlow operates from our office in Songkhla, Thailand, serving businesses across Southeast Asia. We're subject to Thailand's Personal Data Protection Act (PDPA), which came into full effect in 2022 and gives you specific rights over your information.

If you have questions about how we use your data – or want to exercise any of the rights described here – you can reach our data protection team directly:

  • Email: contact@advantaflow.com
  • Phone: +66 32 305 122 (Monday-Friday, 9:00-17:00 ICT)
  • Mail: 439/9 หมู่ 2 ตำบล พะวง ถนน สงขลา-เกาะยอ เมือง Songkhla 90100, Thailand

What Information We Collect

We collect different types of information depending on how you use our services. Here's what that looks like in practice:

Information You Give Us Directly

When you create an account or use our platform, you provide:

  • Account details (name, email address, phone number, company name)
  • Team member information you add to projects
  • Contractor profiles and contact information
  • Project details, timelines, and task assignments
  • Messages and communications sent through our platform
  • Payment information when you subscribe to paid features

Information We Collect Automatically

Like most online services, we collect technical information when you use our platform:

  • Device information (browser type, operating system, device identifiers)
  • Usage data (which features you use, when you log in, how long you spend on tasks)
  • IP addresses and general location information
  • Cookie data to keep you logged in and remember your preferences

This helps us keep the service running smoothly and spot any security issues before they become problems.

Information From Other Sources

Sometimes we receive information about you from third parties – but only when you've authorized it. For example, if you sign up using a Google or Microsoft account, we receive basic profile information from those services.

How We Use Your Information

We use your information to provide and improve our coordination services. Here are the specific ways we put your data to work:

Primary Service Functions:

  • Managing your account and authentication
  • Coordinating team members and contractors on your projects
  • Processing payments and managing subscriptions
  • Sending notifications about project updates and team activities
  • Providing customer support when you need help

Service Improvement: We analyze usage patterns to understand which features help businesses coordinate most effectively. This might mean looking at which tools are used most often or where users encounter difficulties.

Security and Fraud Prevention: We monitor for unusual activity that might indicate unauthorized access or misuse of the platform. This includes checking login patterns and flagging suspicious behavior.

Legal Obligations: Sometimes Thai law requires us to retain certain records or provide information to authorities. We only do this when legally required and will notify you when permitted by law.

Communications: We'll send you service-related emails about your account, projects, and important updates. You can opt out of marketing communications but we'll still need to send essential service messages.

Sharing and Disclosure

We don't sell your personal information to anyone. Period. But we do share data in specific situations:

With Your Team and Contractors

When you add someone to a project, they see the information relevant to their role. A contractor assigned to a task will see project details, deadlines, and communication related to that work. This is how the platform functions – it's coordination software, after all.

Service Providers

We work with third-party companies that help us run the platform:

  • Cloud hosting providers (for secure data storage)
  • Payment processors (to handle subscription billing)
  • Email service providers (for sending notifications)
  • Analytics tools (to understand how the service is used)

These providers only access the data they need to perform their specific function and are contractually required to protect your information.

Legal Requirements

We may disclose information if required by Thai law, court order, or government request. We'll notify you unless prohibited by law or if the request involves imminent harm.

Business Transfers

If AdvantaFlow is acquired or merges with another company, your information would transfer to the new entity. We'd notify you before this happens and explain any changes to how your data is handled.

Your Rights Under Thai Law

Thailand's PDPA gives you specific rights over your personal information. Here's what you can do and how to do it:

Right What It Means How to Exercise It
Access Request a copy of the personal data we hold about you Email contact@advantaflow.com with "Data Access Request" in the subject line
Correction Fix inaccurate or incomplete information Update directly in your account settings or contact support
Deletion Request deletion of your personal data Submit a deletion request through your account or email us
Portability Receive your data in a machine-readable format Request a data export through account settings
Object Object to certain types of data processing Contact us with specific objections to discuss options
Restriction Limit how we process your data Request processing restrictions via email

We'll respond to rights requests within 30 days. In some cases, we may need to verify your identity before proceeding – this protects your information from unauthorized access.

Important Limitations: Some rights have exceptions. For instance, we can't delete information we're legally required to retain, or data that's essential to fulfill our contractual obligations to you. If we can't fulfill a request, we'll explain why.

Data Security

We take security seriously because your business depends on it. Our approach includes:

  • Encryption: Data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
  • Access Controls: Team members only access data necessary for their specific role
  • Regular Audits: We conduct quarterly security reviews and penetration testing
  • Monitoring: Automated systems watch for suspicious activity 24/7
  • Backups: Regular backups ensure data recovery in case of system failures

But security is a shared responsibility. Use a strong, unique password for your account. Enable two-factor authentication. Don't share login credentials with team members – create separate accounts for each person instead.

If we discover a security breach that affects your data, we'll notify you within 72 hours and explain what happened, what data was involved, and what steps we're taking to address it.

Data Retention

We keep your information for as long as you maintain an active account. When you close your account, here's what happens:

  • Active project data is deleted within 30 days
  • Account information is deleted within 90 days
  • Backup copies are purged within 180 days
  • Financial records are retained for 7 years to comply with Thai tax law
  • Anonymous usage statistics may be retained indefinitely for service improvement

If you want faster deletion, contact us directly. We'll accommodate reasonable requests when legally permitted.

International Data Transfers

AdvantaFlow primarily stores data on servers located in Singapore and Thailand. However, some of our service providers operate from other countries, which means your data might be processed outside Thailand.

When we transfer data internationally, we ensure:

  • Recipients provide adequate data protection standards
  • We use standard contractual clauses approved by Thai authorities
  • Data transfer agreements are in place with all international partners
  • We conduct due diligence on providers' security practices

Your rights under Thai PDPA apply regardless of where your data is processed.

Cookies and Tracking

We use cookies to keep you logged in and remember your preferences. Here's what we set:

Essential Cookies

These are necessary for the platform to work. They handle authentication, session management, and security. You can't opt out of these because they're required for basic functionality.

Functional Cookies

These remember your preferences – like language settings or which view you prefer for project lists. They make the platform more convenient but aren't strictly necessary.

Analytics Cookies

We use analytics to understand how people use the platform. This helps us identify confusing features or performance issues. You can opt out of analytics cookies in your account settings.

Most browsers let you control cookies through their settings. But blocking essential cookies will prevent you from using the platform.

Children's Privacy

AdvantaFlow is a business coordination tool. Our services aren't directed at children under 13, and we don't knowingly collect information from them. If you discover that a child has created an account, please contact us immediately so we can delete it.

Changes to This Policy

We update this policy occasionally to reflect new features, legal requirements, or feedback from users. When we make significant changes, we'll notify you via email and display a notice in the platform for 30 days.

The "Last Updated" date at the top shows when the current version took effect. You can always find the latest version at advantaflow.com/privacy-policy.

Continued use of the platform after changes become effective means you accept the updated policy. If you don't agree with changes, you can close your account before they take effect.

Disputes and Complaints

If you're not satisfied with how we handle your personal data, you have options:

  1. Contact us directly at contact@advantaflow.com – we'll work to resolve your concerns
  2. If we can't resolve the issue, you can file a complaint with Thailand's Personal Data Protection Committee
  3. You may also have the right to file a complaint with data protection authorities in your country

We prefer to address concerns directly, so please reach out before escalating to regulatory authorities. Most issues can be resolved through straightforward conversation.

Questions or Concerns?

This policy covers a lot of ground, and you might have questions about specific situations. That's normal. Reach out and we'll give you straight answers.

Email: contact@advantaflow.com

Phone: +66 32 305 122 (Monday-Friday, 9:00-17:00 ICT)

Mail: 439/9 หมู่ 2 ตำบล พะวง ถนน สงขลา-เกาะยอ เมือง Songkhla 90100, Thailand

We typically respond to privacy inquiries within 2 business days. For urgent security concerns, call us directly.