Privacy Policy

1. Who We Are

Thong Thai Space provides project management, collaboration, client portal, and AI-assisted productivity tools for businesses and teams.

2. Information We Collect

We may collect:

• Account data: name, email address, encrypted password, role, locale.
• Profile data: avatar, phone number, preferences.
• Usage data: login timestamps, feature usage logs, audit entries, device/browser metadata.
• Content data: projects, tasks, invoices, files, messages, AI prompts and outputs.
• Technical data: IP address, cookies, authentication tokens, error logs.

3. How We Use Information

• To provide and secure access to our platform.
• To operate core features including collaboration, messaging, invoicing, and AI assistance.
• To improve performance, reliability, and user experience.
• To communicate important service and security updates.
• To meet legal, compliance, and fraud-prevention obligations.

4. Legal Basis

We process personal data on the basis of contractual necessity, legitimate interests, legal obligations, and your consent where required.

5. Google Login and OAuth Data

If you choose Google Sign-In, we receive basic profile data from Google such as your email, display name, profile photo, and Google account identifier. We use this only to authenticate your account and secure access to our services.

We do not post to your Google account and we do not request sensitive Google scopes for core authentication.

6. Cookies and Similar Technologies

We use essential cookies and secure session tokens to keep you signed in, protect your account, and maintain platform functionality. Disabling essential cookies may prevent login.

7. Data Sharing

We do not sell personal information. We may share data with trusted service providers that help us operate infrastructure (hosting, database, analytics, email delivery) under contractual confidentiality and security requirements.

8. Data Retention

We retain data for as long as needed to provide services, fulfill contractual obligations, resolve disputes, and comply with legal requirements.

9. Security

We apply technical and organizational safeguards including encryption in transit, access control, and monitoring. No method of transmission or storage is completely secure.

10. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export your personal data, and to object to certain processing.

11. International Transfers

Your data may be processed in countries other than your own. We implement reasonable safeguards for cross-border transfers where required.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the platform or by other appropriate means.

13. Contact

For privacy requests, contact us at [email protected].