Draft · awaiting legal review
Privacy policy
Drafted 5 Oct 2026 · the Thai version is the governing text; this English version is a translation
This policy explains how Frame & Flow (frameandflow.site) collects, uses and shares your personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).
1. Data controller
The seller named in the terms [to confirm]. Contact us about personal data at hello@frameandflow.site.
2. What we collect
- Your email, and your name and profile picture if you log in with Google
- Purchase history, access rights and receipts (we never see or store card numbers)
- Download logs and a hashed IP, to prevent abuse
- Your marketing consent and when you gave it
- Anonymous usage statistics, with no email, name or IP
3. Purposes and legal bases
- Performing the sales contract: login, access, receipts, file delivery and support
- Legitimate interest: preventing fraud and unauthorised sharing, and keeping the system secure
- Consent: news emails about new prompts or lessons (never pre-ticked, withdraw any time)
- Legal obligation: accounting and tax records
4. Processors we share data with
- Cloudflare: website hosting, database and files
- Stripe: payments
- Resend: email delivery
- Google: Google sign-in (if you choose it)
5. Watermark in the kit file
The kit file you download carries your email and order number in three places, to trace the licence.
6. How long we keep data
Account and access data are kept for the life of the service, because access is lifetime. Accounting records are kept as the law requires. Technical logs are kept no longer than [to confirm].
7. Your rights
You may ask to access, copy, correct, delete or port your data, object, restrict its use and withdraw consent, by emailing us, and you may complain to the Personal Data Protection Committee (PDPC).
8. Cookies
Only the cookies needed for login. Usage statistics are cookieless and there are no ad pixels. If that ever changes, we will ask first, with “decline” as prominent as “accept”.