1 Introduction and Overview

At MaxonTurbo, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our budget control platform and educational services. We operate under Thailand's Personal Data Protection Act (PDPA) and maintain international privacy standards.

Our commitment goes beyond legal compliance. We believe financial data deserves the highest level of protection, and we've built our systems with privacy by design principles. This means we collect only what we need, use it for stated purposes, and give you control over your information.

Important: By using MaxonTurbo services, you agree to this privacy policy. If you disagree with any part, please don't use our services.

2 Information We Collect

We collect different types of information to provide and improve our budget control services. Here's what we gather and why:

3 How We Use Your Information

Your information serves specific purposes related to budget control and our educational services. We don't sell your data or use it for unrelated marketing.

• Service Provision: Process your financial data to generate budget reports, spending insights, and recommendations
• Account Management: Maintain your account, process payments, and provide customer support
• Communication: Send service updates, educational content, and respond to your inquiries
• Platform Improvement: Analyze usage patterns to enhance features and user experience
• Security: Detect fraud, prevent unauthorized access, and maintain system security
• Legal Compliance: Meet regulatory requirements and respond to legal requests when required

4 Information Sharing and Disclosure

We limit information sharing to essential business purposes and never sell your personal data. Here's when we might share information:

Service Providers: We work with trusted companies that help us operate our platform - cloud hosting, payment processing, and customer support tools. These partners can only use your data for specified services and must maintain strict confidentiality.

Legal Requirements: We may disclose information when required by Thai law, court orders, or to protect our rights and user safety. We'll notify you unless legally prohibited.

Business Transfers: If MaxonTurbo is acquired or merged, your information may transfer to the new entity. You'll be notified of any such changes.

5 Your Privacy Rights

Under Thailand's PDPA and our privacy commitment, you have significant control over your personal information:

• Access: Request copies of all personal data we hold about you
• Correction: Update incorrect or outdated information in your account
• Deletion: Request removal of your personal data (with some legal exceptions)
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your information in certain circumstances
• Objection: Opt out of certain data processing activities

To exercise these rights, contact our privacy team using the information below. We'll respond within 30 days and verify your identity before processing requests.

6 Data Security and Protection

We implement comprehensive security measures to protect your financial information from unauthorized access, alteration, or disclosure.

Technical Safeguards: All data is encrypted in transit and at rest using industry-standard AES-256 encryption. Our servers are hosted in secure facilities with 24/7 monitoring and access controls.

Access Controls: Only authorized personnel can access your data, and they receive regular security training. We use multi-factor authentication and role-based access to limit data exposure.

Regular Audits: We conduct quarterly security assessments and work with independent security firms to identify vulnerabilities. Our systems undergo annual penetration testing.

While we maintain strong security practices, no system is 100% secure. We'll notify you promptly of any security incidents affecting your data and provide guidance on protective steps.

7 Data Retention and Deletion

We keep your information only as long as necessary for service provision and legal requirements:

Active Accounts: Your budget data and account information remain accessible while your account is active and for 12 months after your last login.

Closed Accounts: When you close your account, we delete most personal data within 90 days. Some information may be retained for up to 7 years for legal compliance (tax records, payment history).

Automated Deletion: Our systems automatically delete inactive accounts after 18 months of non-use, following a 60-day notice period.

You can request immediate deletion of your account and data at any time. We'll process deletion requests within 30 days, though some information may be retained as legally required.

8 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze platform usage:

Essential Cookies: Required for basic functionality like maintaining your login session and security features. These cannot be disabled without affecting service operation.

Analytics Cookies: Help us understand how users interact with our platform to improve features and performance. You can opt out of these in your account settings.

Preference Cookies: Remember your settings and preferences for a personalized experience. These enhance usability but aren't required for core functionality.

You can manage cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality. We don't use tracking pixels or third-party advertising cookies.

9 International Data Transfers

While MaxonTurbo operates primarily in Thailand, some of our service providers may process data internationally. We ensure appropriate protections for any cross-border data transfers.

Safeguards: International transfers only occur with adequate legal protections in place, including contractual clauses that require privacy standards equivalent to Thailand's PDPA.

Primary Storage: Your financial data is primarily stored on servers located within Thailand or other jurisdictions with adequate data protection laws.

We maintain an updated list of countries where your data may be processed and can provide this information upon request.

10 Changes to This Policy

We may update this privacy policy to reflect changes in our practices, legal requirements, or service features. Here's how we handle policy updates:

Notice Period: We'll provide at least 30 days advance notice of significant changes by email and through platform notifications.

Continued Use: Your continued use of MaxonTurbo after the effective date constitutes acceptance of the updated policy.

Version History: We maintain a record of policy changes and previous versions available in your account settings.

If you disagree with policy changes, you may close your account before the effective date. We'll process your data according to the previous policy version during the closure process.