Definitions
Key terms used in this policy are defined below to aid understanding of how data is managed and secured.
- Personal data refers to any information that relates to an identified or identifiable individual, such as names, email addresses, IP addresses, or any data that can be linked to a person.
- Processing means any operation or set of operations performed on personal data, whether by automated means or not, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, or deletion.
- User refers to any individual who visits or interacts with zefluxion.club, registers, or utilizes the services provided by Zefluxion AI Integration.
- Service refers to the features, tools, and functionalities provided by Zefluxion through its website and related applications for AI integration and related support.
- Cookies are small text files placed on a user's device by the website to store information about browsing preferences and facilitate certain functionalities.
Data Collection
We collect different types of information from users to provide and improve our services while ensuring security and compliance.
Information You Provide
When registering or contacting us, you may choose to share certain details that help us manage your account and respond to inquiries.
- Full name and contact information including email address.
- Organization details and business identification number when applicable.
- User credentials such as username and password for account access.
- Transaction details and billing information for purchases or subscriptions.
- Support requests, feedback, and any messages sent through our contact forms.
- Preferences and consent choices regarding communications and marketing materials.
Automatically Collected Information
We gather certain data automatically through your interaction with the site and services to maintain performance and security.
- IP address, device type, browser version, and operating system.
- Usage data such as pages visited, features accessed, and time spent.
- Log data including timestamps and error reports.
- Cookies identifiers and similar tracking technologies.
- Geolocation data inferred from IP address.
- Referral and advertising data on how you arrived at our site.
Information from Third Parties
We may receive information about you from external sources to enhance our service delivery and security measures.
- Analytics data from providers like Google Analytics.
- Payment and fraud prevention data from payment processors.
- Verification and compliance data from identity verification services.
Use of Information
Collected data is used only for legitimate purposes as described below.
- To provide, maintain, and improve our AI integration services.
- To manage user accounts and deliver customer support.
- To process transactions and send related confirmations or invoices.
- To send periodic updates, technical notices, and security alerts.
- To personalize user experience based on preferences and usage patterns.
- To detect, prevent, and respond to security incidents or fraud.
- To analyze website traffic and usage trends for service optimization.
- To ensure compliance with legal obligations and internal policies.
Legal Bases for Processing
We rely on the following lawful bases when processing personal data under applicable data protection regulations.
- Contractual necessity to fulfill user agreements and provide requested services.
- Consent where users have given clear permission for specific processing activities.
- Legitimate interests to improve services, secure systems, and prevent fraud, provided those interests do not override user rights.
- Compliance with legal obligations to meet reporting and regulatory requirements.
GDPR Compliance
For users in the European Economic Area, the following rights under the GDPR may apply.
- Right to access: obtain confirmation of data processing and copies of personal data.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of personal data under certain conditions.
- Right to restriction of processing: limit how your data is used in specific scenarios.
- Right to data portability: receive personal data in a structured, commonly used format.
- Right to object: oppose processing based on legitimate interests or direct marketing.
Cookies and Tracking
Cookies and similar technologies are used to enhance site functionality and collect usage data.
We employ session cookies, persistent cookies, and third-party cookies for analytics and advertising.
Cookies are categorized as essential, performance, functionality, and targeting cookies.
You can manage or disable cookies through your browser settings or by using our cookie preference tool.
Read our full Cookie Policy for more details.
Data Sharing
We do not sell personal data. Sharing occurs only with trusted partners as outlined below.
- Service providers who support platform operations and maintenance.
- Affiliated companies involved in service delivery and support.
- Legal authorities when required by law or to protect rights and safety.
- Third-party analytics and marketing platforms under appropriate agreements.
- Payment processors to handle billing and transaction services.
- Professional advisors and auditors for compliance and governance.
International Data Transfers
Personal data may be transferred to and processed in countries outside your location, such as our servers or service provider locations.
We implement standard contractual clauses and other legal mechanisms to ensure adequate protection across borders.
Data Retention
We retain personal data only as long as necessary for the purposes described and in compliance with law.
Account information is kept until inactive for a period of 36 months following account closure.
Communication records are retained for up to 24 months for support and audit purposes.
System logs and technical records are stored for up to 12 months to support security and troubleshooting.
Once retention periods expire, data is securely deleted or anonymized.
Security Measures
We employ administrative, technical, and physical safeguards to protect personal data against unauthorized access, alteration, or destruction.
- Encryption of data in transit and at rest using industry-standard protocols.
- Access control mechanisms including user authentication and role-based permissions.
- Regular security assessments, vulnerability scanning, and incident response planning.
User Rights
Users have the right to exercise control over their personal data as provided by applicable law.
- Access personal data and request copies.
- Correct or update inaccurate or incomplete information.
- Request deletion of personal data under certain conditions.
- Withdraw consent or object to processing based on legitimate interests.
- Obtain personal data in a portable format or request transfer to another service.
- Right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to request the transfer of your personal data in a structured, commonly used, and machine-readable format to another controller.
- Right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
How to Exercise Your Rights
To exercise any of your data protection rights, please submit a request by email to [email protected] or by mail to Amphoe Ban Rai District, Uthai Thani Province 61140, Thailand. Include your name, contact details, and a description of the request.
We aim to respond to all valid requests within 30 days of receipt. If additional time is required, we will inform you in writing.
Marketing Communications
With your consent, we may send you newsletters, product updates, and promotional materials. You may receive these by email or other electronic means.
You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at [email protected].
Children’s Privacy
Our services are not directed to individuals under 13 years of age. We do not knowingly collect personal data from children without parental consent. If you believe we have collected data from a child, please contact us to request deletion.
Third-Party Links
Our site may include links to third-party websites or services that are not controlled by us. We are not responsible for the privacy practices or content of those third parties.
Policy Updates
We may update this Privacy Policy periodically. The “Last Updated” date at the top indicates when changes were made. Continued use of our services after updates signifies acceptance of the revised policy.