Privacy Policy
Last Updated: March 15, 2025
At CommFlowOrg, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our mobile app testing and debugging services. We've written this in plain language because we believe you deserve to understand exactly what happens with your data.
Information We Collect
We gather different types of information depending on how you work with us. Some you provide directly, and some we collect automatically when you use our services.
Information You Give Us Directly
When you reach out or sign up for our services, you might share:
- Contact details like your name, email address, and phone number
- Company information including business name and address
- Project specifications and technical requirements
- Payment and billing information for service transactions
- Communications you send us through email or contact forms
Information We Collect Automatically
Our website collects technical information to improve your experience:
- Device type, browser version, and operating system
- IP address and general location data (city and country level)
- Pages you visit and how long you spend on them
- Links you click and actions you take on our site
Testing and Debugging Data
During our service delivery, we may access:
- App performance logs and crash reports
- Device specifications and configuration data
- Test results and debugging session recordings
- Code snippets relevant to identified issues
How We Use Your Information
We use the data we collect for specific purposes. Here's what that looks like in practice.
Service Delivery: We use your contact and project information to deliver testing and debugging services, communicate about project progress, and provide technical support when you need it.
Beyond that, we use information to:
- Process payments and maintain billing records
- Send project updates, reports, and technical documentation
- Improve our testing methodologies based on anonymized data patterns
- Respond to your questions and support requests
- Comply with legal obligations under Thailand's Personal Data Protection Act
- Detect and prevent security issues or fraudulent activity
We don't use your data for marketing purposes without your explicit consent. And we never sell your information to third parties.
Data Storage and Security
We store your information on secure servers located in Thailand and use industry-standard security measures to protect it.
Security Measures We've Put in Place
- Encrypted data transmission using SSL/TLS protocols
- Regular security audits and vulnerability assessments
- Access controls that limit who can view your information
- Secure backup systems with encryption at rest
- Employee training on data protection best practices
Important Note: While we take every reasonable precaution, no online system is completely secure. We encourage you to use strong passwords and contact us immediately if you suspect unauthorized access to your account.
Sharing Your Information
We keep your data private, but there are limited situations where we might share it.
When We Share Data
| Who We Share With | What We Share | Why We Share It |
|---|---|---|
| Payment Processors | Billing information and transaction details | To process payments securely |
| Cloud Service Providers | Project data and technical information | To host and deliver our services |
| Legal Authorities | Information required by law | To comply with legal obligations |
| Professional Advisors | Anonymized business data | For legal and financial consulting |
We require all third parties to respect your data's security and handle it according to applicable laws. They can only use your information for the specific purposes we've outlined.
Your Rights Under Thailand Law
Thailand's Personal Data Protection Act gives you specific rights regarding your personal information. Here's what you can do and how to do it.
Access Your Data
You can request a copy of the personal information we hold about you. We'll provide it in a commonly used format within 30 days.
Correct Inaccuracies
If information we have is wrong or outdated, you can ask us to update it. We'll make corrections promptly once verified.
Delete Your Data
You can request deletion of your personal information, subject to legal retention requirements for financial and contractual records.
Restrict Processing
You can ask us to limit how we use your data in certain circumstances, like during a dispute about accuracy.
Data Portability
You can request your data in a structured, machine-readable format to transfer to another service provider.
Object to Processing
You can object to certain types of data processing, particularly for marketing purposes.
How to Exercise Your Rights
To make any of these requests, email us at info@commfloworg.com with "Privacy Request" in the subject line. Include your name, contact details, and a clear description of what you're requesting. We'll verify your identity before processing any request to protect your security.
Most requests are free, but we might charge a reasonable fee for repetitive or excessive requests. We'll let you know if that applies before proceeding.
Data Retention
We don't keep your information longer than necessary. Here's our approach to retention periods.
How Long We Keep Different Types of Data
- Project Data: Retained for the project duration plus 2 years for support and warranty purposes
- Financial Records: Kept for 7 years as required by Thailand tax law
- Communication Records: Maintained for 3 years to resolve potential disputes
- Website Analytics: Aggregated data kept indefinitely, but personal identifiers removed after 14 months
- Marketing Consent: Stored until you withdraw consent or we determine it's no longer valid
When retention periods expire, we securely delete or anonymize the data so it can't be traced back to you.
International Data Transfers
We primarily store data in Thailand, but some of our service providers operate internationally.
When we transfer your data outside Thailand, we ensure adequate protection through:
- Standard contractual clauses approved by data protection authorities
- Verification that recipient countries have adequate data protection laws
- Additional security measures for sensitive information
- Regular compliance reviews of international partners
We'll notify you if a significant international transfer affects your data, particularly if it involves countries with different privacy standards.
Cookies and Tracking
Our website uses cookies to function properly and improve your experience. You have control over these.
Types of Cookies We Use
- Essential Cookies: Required for basic site functionality like security and accessibility
- Performance Cookies: Help us understand how visitors use our site through anonymous analytics
- Functional Cookies: Remember your preferences like language settings
We don't use advertising or tracking cookies that follow you across the internet. You can control cookie settings through your browser, but disabling essential cookies might affect site functionality.
Children's Privacy
Our services are designed for businesses, not children. We don't knowingly collect information from anyone under 18 years old. If you're a parent and believe your child has provided us with personal information, please contact us immediately so we can delete it.
Changes to This Policy
We review and update this privacy policy regularly to reflect changes in our practices or legal requirements.
When we make significant changes, we'll notify you by:
- Updating the "Last Updated" date at the top of this page
- Sending an email to your registered address for material changes
- Displaying a prominent notice on our website
We encourage you to review this policy periodically. Continued use of our services after changes take effect means you accept the updated policy.
Complaints and Concerns
If you're unhappy with how we've handled your personal information, we want to know about it.
Start by contacting us directly at info@commfloworg.com. We'll investigate and respond within 30 days. If you're not satisfied with our response, you have the right to file a complaint with Thailand's Personal Data Protection Committee.
You can also contact the Office of the Personal Data Protection Committee at:
- Website: www.pdpc.or.th
- Email: pdpc@mdes.go.th
- Phone: +66 2 142 1033
Questions About This Policy?
If anything here is unclear or you have specific questions about how we handle your data, we're happy to explain further.