1. Information we collect
We may collect personal data and usage-related data in connection with your use of Aslan Terminal, including but not limited to account information such as your email, display name, and authentication provider, and usage information such as pages visited, features used, device data, session data, and other related technical information. If you join the affiliate program, we may collect data related to your referral activity, affiliate-link tracking, commission records, and identity-verification documents or additional information needed for verification and payout. We do not collect passwords, login credentials, or your external broker trading-account credentials.
2. How we use your data
We use your personal data to provide the service, administer user accounts, secure our systems, verify identity, process payments, carry out affiliate payouts, detect account sharing, fraud, or abusive behavior, and to measure, analyze, and improve the quality of Aslan Terminal. We may use your data to communicate about service updates, changes to our terms, security notices, customer support, and other information related to your use of the service. Processing of your personal data may rely on applicable legal bases such as performance of a contract, legitimate interests, your consent, and compliance with legal obligations.
3. Cookies and local storage
We use essential cookies, in-browser storage such as Local Storage, and similar technologies so the system can maintain your login state, remember your settings such as language, theme, or other preferences, and help the service function correctly. We may use usage-analytics tools and Analytics Storage to understand usage patterns, measure service performance, and improve the user experience. You can find more details about our use of cookies, related technologies, and your consent-management options in our Cookie Policy.
4. Data sharing and processors
We may share your personal data with external service providers who process data on our behalf so that Aslan Terminal can be delivered efficiently and securely. Such providers may include authentication and database providers such as Firebase, payment-processing or subscription providers such as Stripe or RevenueCat, market-data providers, cloud infrastructure providers, usage-analytics tools, and other providers involved in our operations. These providers are permitted to process personal data only as necessary, must act on our instructions, and must maintain appropriate data-protection measures. We do not sell your personal data to third parties.
5. International data transfers
Some of our providers or data processors may store or process personal data in countries other than Thailand. When personal data is transferred abroad, we apply appropriate safeguards in accordance with applicable data protection laws, including the PDPA, to help ensure that your personal data remains adequately protected.
6. Data retention
We retain your personal data for as long as your account remains active, or as long as necessary to provide Aslan Terminal. After an account is closed or the data is no longer needed, we may still retain certain data for as long as necessary to comply with legal, tax, audit, fraud-prevention, terms-enforcement, or dispute-resolution obligations. Once the required period has passed, we will delete, destroy, or anonymize the data as appropriate.
7. Your rights
Under applicable data protection laws, including the PDPA, you may have the right to access your personal data, obtain a copy of it, request correction, request deletion or destruction, request restriction of use, request data portability, object to certain processing, or withdraw consent you previously gave. If you wish to exercise your data-subject rights, you can contact us through the channel specified in this policy. We may need to verify your identity before acting on your request in order to protect the security of personal data. You also have the right to lodge a complaint with the Personal Data Protection Committee or other relevant regulator if you believe our processing of your personal data does not comply with applicable law.
8. Data security
We use appropriate technical and organizational security measures to help protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures may include encryption of data in transit, access controls, session monitoring, need-to-know access limitations, and ongoing security monitoring of our systems. However, no system can guarantee complete security. We will make reasonable efforts to protect your personal data and will notify you of any personal-data breach as required by law where notification is necessary.
9. Children and minors
Aslan Terminal is not intended for individuals under 18 years of age, and we do not knowingly collect personal data from children or minors. If we become aware that personal data has been collected from someone under 18 without appropriate authorization, we will delete or otherwise handle that data as appropriate and as required by law.
10. Changes to this policy
We may update, amend, or change this Privacy Policy from time to time to reflect changes in our service, operations, technology, or applicable law. Where there are material changes, we will notify you through appropriate channels such as in-service notices, our website, or the email address you provided to us. Your continued use of Aslan Terminal after the updated policy takes effect constitutes your acknowledgment of the updated Privacy Policy.