Your data, protected.

This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the Thailand Personal Data Protection Act (PDPA) and applicable international law.

Draft: DRAFT: not legally reviewed. This outline will be replaced with a legally-reviewed privacy policy before platform launch. Phase 11 deliverable.

1. Data we collect

2. How we use your data

3. Data sharing

4. Data retention

5. Your rights under PDPA

To exercise any right, email legal@iamrevr.com with the subject line PDPA Request.

6. Cookies

We use strictly necessary cookies to operate the platform, and optional analytics cookies. See our cookie policy for the full breakdown.

7. Changes to this policy

We will notify registered users by email at least 14 days before material changes take effect.

8. Contact

Data controller: REVR. Contact: legal@iamrevr.com. TODO: add registered entity name and address before launch.

Your rights under PDPA

Right of access: you can download a copy of your data at any time from your account privacy page. Export your data
Right to erasure: you can request deletion of your account. Your personal details will be removed from our systems. Delete your account
Export: immediate download.
Deletion: processed within 24 hours.
Financial records (offers, deposits, invoices) and system audit logs are retained for 5 years as required by the Thai Anti-Money Laundering Act and Revenue Code. Your personal details (name, email, phone) are redacted from these records.

6. Cookies