Information We Collect

Data You Provide Directly

When you create an account or use our services, we collect information you give us:

• Name, email address, and phone number when you register
• Payment details when you subscribe to our services
• Financial data you input for scenario modeling and forecasting
• Communication records when you contact our support team
• Feedback and survey responses you choose to share

Data We Collect Automatically

Some data is collected automatically as you use our platform:

• Device information including IP address, browser type, and operating system
• Usage data such as pages visited, features used, and time spent on platform
• Log files that record system activity and error reports
• Cookies and similar tracking technologies to enhance your experience

Data from Third Parties

In some cases, we receive data from external sources:

• Payment processors that handle your subscription transactions
• Analytics providers that help us understand platform usage
• Social media platforms if you choose to connect your accounts

How We Use Your Information

We use collected data for specific purposes that directly benefit your experience:

Service Delivery

• Providing access to our scenario modeling tools and features
• Processing your financial calculations and generating forecasts
• Saving your work and maintaining your project history
• Sending important notifications about your account or platform updates

Platform Improvement

• Analyzing usage patterns to identify which features are most valuable
• Testing new functionality and improvements before wider release
• Troubleshooting technical issues and optimizing performance
• Understanding how users navigate the platform to enhance usability

Communication

• Responding to your questions and support requests
• Sharing educational content about financial modeling (with your consent)
• Notifying you about changes to our services or terms
• Sending occasional updates about new features you might find useful

You can opt out of marketing communications anytime. Service-related messages are necessary for platform operation and cannot be disabled.

Data Retention and Storage

We store your data as long as your account remains active. Once you close your account, we follow these retention practices:

Your data is stored on secure servers located in Thailand and Singapore. We use encryption both in transit and at rest. Regular backups ensure your work isn't lost due to technical failures.

Your Rights Under Thai Law

The PDPA grants you specific rights regarding your personal data. Here's what you can do and how to exercise these rights:

Access and Portability

You can request a copy of all personal data we hold about you. We'll provide this in a common electronic format within 30 days. This includes your account details, usage history, and any financial models you've created.

Correction and Updates

Found outdated or incorrect information? You can update most details directly through your account settings. For changes requiring verification, contact our support team.

Deletion Rights

You can request deletion of your personal data. We'll comply unless we're required to retain certain information for legal purposes. Payment records, for example, must be kept for tax compliance.

Restriction and Objection

You can ask us to limit how we process your data or object to certain uses. This might affect platform functionality, but we'll work with you to find acceptable solutions.

Withdraw Consent

Where we process data based on your consent, you can withdraw that consent anytime. This won't affect processing that occurred before withdrawal.

To exercise any of these rights, email us at contact@glowlybridgeon.com with your request. We'll respond within 30 days and verify your identity before making changes.

Data Security Measures

We've put multiple security layers in place to protect your information:

Technical Safeguards

• 256-bit SSL encryption for all data transmission
• AES-256 encryption for stored data
• Regular security audits and penetration testing
• Automated threat detection and monitoring systems
• Secure backup systems with encrypted storage

Access Controls

• Multi-factor authentication required for staff access
• Role-based permissions limiting data access to necessary personnel
• Comprehensive access logs and audit trails
• Regular review of access privileges

Organizational Measures

• Mandatory security training for all employees
• Confidentiality agreements with staff and contractors
• Incident response procedures for potential breaches
• Regular updates to security protocols based on emerging threats

Despite our efforts, no system is completely secure. If we detect a breach affecting your data, we'll notify you within 72 hours and explain what happened, what data was affected, and steps we're taking to address it.

Sharing and Third-Party Access

We share your data only in specific circumstances:

Service Providers

We work with trusted partners who help operate our platform. These include payment processors, cloud hosting providers, and analytics services. All third parties sign data processing agreements and must handle your information according to our standards.

Legal Requirements

We may disclose data when required by Thai law or valid legal processes. This includes responding to court orders, government requests, or regulatory investigations. We'll notify you unless legally prohibited from doing so.

Business Transfers

If glowlybridgeon is acquired or merges with another company, your data may transfer to the new entity. You'll be notified of any such change and given options regarding your continued use of the service.

Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to function properly and improve your experience:

Essential Cookies

These are necessary for the platform to work. They handle authentication, security, and basic functionality. You cannot disable these through our settings, though your browser may offer blocking options.

Functional Cookies

These remember your preferences and settings. They save your language choice, dashboard layout, and other customization options.

Analytics Cookies

We use these to understand how people use the platform. They track which features are popular, where users encounter difficulties, and how we can improve the experience. All analytics data is aggregated and anonymized.

You can control cookie preferences through your account settings. Disabling certain cookies may affect platform functionality. Most browsers also offer cookie management tools.

International Data Transfers

While our primary servers are in Thailand and Singapore, some service providers operate from other countries. When data transfers internationally, we ensure adequate protection through:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements that meet Thai PDPA requirements
• Verification that recipient countries provide adequate data protection
• Additional security measures for sensitive financial information

You can request details about where your data is stored and processed by contacting our privacy team.

Children's Privacy

Our services are designed for adults and businesses. We don't knowingly collect information from anyone under 18 years old. If you're a parent or guardian who believes your child has provided us with personal data, contact us immediately and we'll delete that information.

Changes to This Policy

We review and update this privacy policy periodically. When changes occur, we'll post the revised version on our website and update the date at the top of this page.

Significant changes will be communicated through email or prominent notice on the platform. Your continued use after changes take effect constitutes acceptance of the updated policy.

Previous versions of this policy are available upon request if you want to review what changed over time.