Privacy Policy

Information We Collect

When you use our platform, we gather different types of information to provide you with better expense tracking services. Here's what we collect and why it matters.

Account Information

You provide this directly when signing up. We need your email address, name, and a password you create. If you're using our business plan, we might also collect your company name and tax identification number for invoicing purposes.

Financial Data

This is the core of what we do. Your expense records, receipts, transaction details, and spending categories help us give you accurate tracking and insights. We store this data securely on servers located in Thailand and Singapore.

Usage Information

Like most web services, we automatically collect technical data about how you interact with our platform. This includes your IP address, browser type, device information, and timestamps of your activities. We use this to improve performance and catch potential security issues early.

Communication Records

When you contact our support team at [email protected] or chat with us, we keep those conversations. It helps us solve your problems faster and train our team better.

How We Use Your Data

Your information isn't just sitting in a database somewhere. We actively use it to make your experience better and keep our service running smoothly.

• Process your expense entries and generate spending reports
• Send you notifications about unusual spending patterns or account activity
• Provide customer support when you run into issues
• Improve our algorithms for better expense categorization
• Detect and prevent fraudulent activities or security breaches
• Send occasional updates about new features (you can opt out anytime)
• Comply with Thai tax and financial regulations when required

We don't sell your data to advertisers. That's not our business model, and frankly, we think it's a lousy way to treat customers.

Sharing Your Information

We keep your data pretty close to the chest, but there are specific situations where we share it with others.

Service Providers

We work with trusted third parties who help us run the platform. Our cloud hosting provider, payment processor, and email service all handle pieces of your data. They're contractually bound to protect it and can't use it for their own purposes.

Legal Requirements

If Thai authorities or courts require us to hand over data through proper legal channels, we will. We'll notify you when possible unless we're legally prohibited from doing so.

Business Transfers

Should we merge with another company or sell Reboot Advances (not planning on it), your data would transfer to the new owners. You'd be notified in advance with details about how your privacy rights might change.

We never share your financial data with marketing companies, data brokers, or social media platforms. Your spending habits are your business.

Your Rights Under Thai Law

Thailand's Personal Data Protection Act gives you substantial control over your information. Here's what you can do and how to do it.

We aim to respond to all requests within 30 days. If we need more time due to complexity, we'll let you know and explain why.

Security Measures

Protecting your financial data isn't optional for us. We've implemented multiple layers of security that go beyond basic industry standards.

Encryption

All data transfers use TLS 1.3 encryption. Your stored data is encrypted at rest using AES-256. Even our database administrators can't read your expense details without proper decryption keys, which are stored separately.

Access Controls

Only specific team members can access production databases, and every access is logged. We use multi-factor authentication internally and conduct quarterly security audits.

Regular Testing

We run penetration tests twice a year and maintain an active bug bounty program. If you spot a security issue, report it to [email protected] – we take these seriously and respond fast.

No system is 100% secure. If we experience a data breach affecting your information, you'll hear from us within 72 hours with details about what happened and what we're doing about it.

Data Retention

We don't keep your data forever. Different types of information have different retention periods based on legal requirements and practical necessity.

• Active account data: Retained while your account is open and active
• Closed account data: Deleted 90 days after account closure (unless you request immediate deletion)
• Financial records: Kept for 7 years to comply with Thai Revenue Department requirements
• Support communications: Archived for 3 years for quality assurance
• Usage logs: Retained for 18 months for security analysis
• Marketing preferences: Kept until you withdraw consent

When we delete data, it's really deleted. We use secure deletion methods that make recovery impossible, not just moving files to a different folder.

Children's Privacy

Our service isn't designed for anyone under 18. We don't knowingly collect data from minors. If we discover that we've accidentally collected information from someone under 18, we'll delete it immediately and notify the account holder.

International Users

While we're based in Thailand, users from other countries can access our service. If you're outside Thailand, your data might be transferred to and processed in Thailand or Singapore. By using our service, you acknowledge this transfer. We maintain appropriate safeguards regardless of where you're located.

Changes to This Policy

We update this policy occasionally as our practices evolve or laws change. The "Last Updated" date at the top tells you when we made the most recent changes. For significant changes affecting your rights, we'll email you at least 30 days before they take effect.

Previous versions are archived and available on request if you want to see what changed.

Your Choices

You control several aspects of how we handle your data:

• Turn off marketing emails through the unsubscribe link in any message
• Disable analytics cookies in your account privacy settings
• Request a complete copy of your data anytime
• Close your account and request data deletion
• Opt out of automated spending analysis features
• Choose whether to receive mobile push notifications

Some choices might limit functionality. For example, turning off certain cookies means you'll need to log in more frequently.