Information We Collect

When you use EvolveXon's budget monitoring platform, we collect different types of information to provide you with personalized financial insights and secure service delivery.

Account Information

We collect basic details when you create an account: your name, email address, phone number, and password. This information helps us identify you and communicate about your account status, security updates, and service improvements.

Financial Data

To provide budget monitoring services, we collect transaction data, account balances, spending categories, and financial goals you set within our platform. This data is collected directly from your input or through secure connections with your financial institutions when you authorize such connections.

Technical Information

• Device information including IP address, browser type, and operating system
• Usage patterns such as features accessed, time spent on different sections
• Log files containing timestamps, error reports, and system performance data
• Cookies and similar tracking technologies for session management and preferences

How We Use Your Information

Your data serves specific purposes that directly benefit your experience with our budget monitoring platform. We don't use your information for unrelated activities or sell it to third parties.

Service Delivery

We use your financial data to generate personalized budget insights, spending alerts, and financial recommendations. Your account information helps us maintain your profile and provide customer support when needed.

Platform Improvement

Technical data helps us understand how users interact with our platform, identify areas for improvement, and develop new features that better serve your financial management needs.

Communication

We use your contact information to send important account notifications, security alerts, and occasional updates about new features that might interest you. You can control communication preferences in your account settings.

Legal Compliance

Sometimes we process data to meet legal requirements in Thailand, such as financial reporting obligations or responding to lawful requests from authorities.

Data Sharing and Third Parties

We're selective about when and how we share your information. Your financial privacy is crucial, so we only share data when it directly benefits your service experience or when legally required.

Financial Institution Connections

When you connect bank accounts or credit cards to our platform, we work with secure financial data aggregators. These partners access your account information only with your explicit authorization and are bound by strict confidentiality agreements.

Service Providers

We work with trusted technology partners for specific functions like cloud hosting, email delivery, and analytics. These providers access only the minimum data necessary for their specific service and are contractually obligated to protect your information.

Legal Requirements

We may disclose information when required by Thai law, court orders, or regulatory requests. In such cases, we'll notify you unless legally prohibited from doing so.

Your Privacy Rights

Under Thailand's PDPA, you have specific rights regarding your personal data. We've made it easy to exercise these rights through your account dashboard or by contacting our privacy team.

How to Exercise Your Rights

Most privacy controls are available directly in your account settings. For more complex requests or questions about your rights, email our privacy team at privacy@evolvexon.com. We'll respond to your request within 30 days as required by Thai law.

Security Measures

Protecting your financial data is our top priority. We employ multiple layers of security to safeguard your information from unauthorized access, disclosure, or misuse.

Technical Security

All data transmission uses SSL encryption, and sensitive information is encrypted at rest using industry-standard protocols. Our servers are hosted in secure facilities with 24/7 monitoring and regular security audits.

Access Controls

Employee access to your data is strictly limited based on job requirements. All access is logged and regularly reviewed. We use multi-factor authentication and regular security training for our team.

Financial Industry Standards

We follow banking-level security practices, including regular penetration testing, vulnerability assessments, and compliance with international security frameworks.

Account Security

You can enhance your account security by enabling two-factor authentication, using strong passwords, and regularly reviewing account activity in your dashboard.

Data Retention and Deletion

We keep your information only as long as necessary to provide our services or meet legal requirements. Different types of data have different retention periods based on their purpose and legal obligations.

Account Data

Your profile information and preferences are maintained while your account is active. After account deletion, we remove personal identifiers within 30 days, though some anonymized data may be retained for analytics.

Financial Records

Transaction data and financial insights are typically retained for 7 years to comply with Thai financial record-keeping requirements. You can delete specific transactions or categories through your account settings.

Communication Records

Customer service interactions and email communications are kept for 3 years to help resolve any future issues or disputes.

Technical Logs

System logs and error reports are automatically deleted after 90 days unless they're needed for ongoing security investigations.

International Data Transfers

While our primary operations are based in Thailand, some of our technology partners operate internationally. We ensure your data receives equivalent protection regardless of where it's processed.

Transfer Safeguards

When data leaves Thailand, we use approved transfer mechanisms such as standard contractual clauses that require international partners to maintain the same privacy protections required under Thai law.

Partner Selection

We carefully evaluate international service providers for their privacy practices and only work with companies that demonstrate strong data protection standards.

Data Localization

Where possible, we prioritize keeping your data within Thailand or other countries with strong privacy laws. Critical financial data is primarily stored within the region.