Privacy Policy
Your personal information matters to us
1 Introduction
At Lumix Stream, we understand that managing your cash flow and budgeting requires trust. When you share your financial information with us, you're placing confidence in our ability to protect your privacy. This policy explains exactly how we collect, use, and safeguard your personal data when you use our cash flow budgeting platform.
We operate from our Bangkok office and serve clients throughout Thailand while adhering to both local data protection requirements and international privacy standards. Our commitment goes beyond legal compliance – we believe transparency about data practices builds stronger relationships with our users.
2 Information We Collect
Our cash flow budgeting service requires certain information to function effectively. We collect different types of data depending on how you interact with our platform:
| Data Category | Examples | Purpose |
|---|---|---|
| Account Information | Name, email address, phone number | Account creation and communication |
| Financial Data | Income sources, expense categories, budget goals | Cash flow analysis and budgeting tools |
| Usage Information | Feature usage, session duration, preferences | Platform improvement and personalization |
| Technical Data | IP address, browser type, device information | Security and technical support |
Important Note About Financial Data
We never store your actual bank account passwords or login credentials. Our platform works with encrypted, read-only access tokens that allow us to categorize transactions without compromising your banking security.
3 How We Use Your Information
Your data serves specific purposes within our budgeting platform. We don't use your information for unrelated marketing or sell it to third parties. Here's exactly what we do:
- Generate personalized cash flow reports and spending insights based on your transaction patterns
- Send relevant budget alerts and recommendations tailored to your financial goals
- Provide technical support when you encounter issues with the platform
- Improve our budgeting algorithms by analyzing anonymized usage patterns
- Ensure platform security by monitoring for unusual account activity
- Comply with Thai financial regulations and tax reporting requirements when applicable
We process your data based on legitimate business interests, your consent, and legal obligations. You can withdraw consent for optional features at any time through your account settings.
4 Data Sharing and Third Parties
We work with carefully selected service providers to deliver our budgeting platform, but we maintain strict controls over how your data is shared. Our approach prioritizes your privacy while enabling the functionality you expect.
- Cloud hosting providers in Thailand and Singapore for secure data storage and backup
- Payment processors for subscription billing (they never see your budgeting data)
- Email service providers for account notifications and support communications
- Analytics services that receive only anonymized usage statistics
- Legal authorities when required by Thai law or valid court orders
5 Your Privacy Rights
Under Thai data protection laws and our own privacy principles, you have several important rights regarding your personal information. We've made these rights easy to exercise:
Access Your Data
Request a complete copy of all personal information we hold about you, including financial data summaries and account activity logs.
Correct Information
Update incorrect personal details or financial information directly in your account or contact our support team for assistance.
Delete Your Account
Permanently delete your account and all associated data within 30 days, except information required for legal compliance.
Portable Data
Export your budgeting data in standard formats like CSV or JSON for use with other financial planning tools.
To exercise these rights, send a request to help@lumix-stream.com with your account email address. We typically respond within 72 hours and complete most requests within 14 business days.
6 Data Security Measures
Protecting your financial information requires multiple layers of security. Our approach combines industry-standard encryption with additional safeguards specifically designed for sensitive financial data:
- AES-256 encryption for all data at rest and TLS 1.3 for data transmission
- Multi-factor authentication required for account access and sensitive operations
- Regular security audits by independent cybersecurity firms
- Automated monitoring systems that detect unusual access patterns
- Staff background checks and mandatory privacy training for all employees
- Geographic restrictions preventing data access from high-risk locations
- Secure data centers in Thailand with 24/7 physical security monitoring
While we implement robust security measures, we also encourage users to practice good security hygiene by using strong passwords, enabling two-factor authentication, and promptly reporting any suspicious account activity.
7 Data Retention and Deletion
We retain your personal information only as long as necessary to provide our budgeting services and comply with legal requirements. Our retention approach balances your privacy with practical business needs:
Retention Periods
- Active account data: Retained while your account remains active
- Financial transaction data: 7 years (Thai tax law requirement)
- Support communications: 3 years for service improvement
- Technical logs: 90 days for security and troubleshooting
- Marketing preferences: Until withdrawn or account deletion
When you delete your account, we begin immediate removal of personal identifiers while preserving anonymized financial patterns for regulatory compliance. Complete data deletion typically occurs within 30 days, though some backup systems may retain anonymized data for up to 90 days.
8 International Data Transfers
While Lumix Stream operates primarily within Thailand, some of our service providers maintain servers in Singapore and other ASEAN countries. We ensure appropriate safeguards protect your data during any international transfers:
- Data processing agreements with all international service providers
- Encryption requirements for data crossing national boundaries
- Regular audits of international partners' security practices
- Primary data storage remains within Thailand's borders
9 Policy Updates and Changes
We may update this privacy policy to reflect changes in our practices, legal requirements, or platform features. Significant changes receive special attention to ensure you stay informed:
- Major policy changes: 30-day advance notice via email
- Minor updates: Posted immediately with change log
- Annual policy reviews: Comprehensive evaluation each January
- User feedback incorporation: Regular review of privacy concerns
Continued use of our platform after policy updates indicates acceptance of the changes. However, we'll always respect the privacy preferences you established under previous policy versions.
Questions About Your Privacy?
Our privacy team is here to help with any questions or concerns about how we handle your personal information.
We typically respond to privacy inquiries within 2-3 business days and aim to resolve most concerns within one week.