Privacy Policy
Last Updated: March 2026
Introduction
Almostmind ("Almostmind," "we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have regarding your data.
By using the Almostmind ALM-ERP platform, the almostmind.com website, or any related services (collectively, the "Services"), you agree to the collection and use of information as described in this policy.
This Privacy Policy is prepared in compliance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand and applicable international data protection standards.
1. Data Controller
Almostmind
Sukhumvit 24, Bangkok, Thailand
Email: privacy@almostmind.com
DPO Contact: dpo@almostmind.com
2. What Data We Collect
We collect the following categories of personal data:
2.1 Account and Identity Data
- –Name, email address, phone number
- –Company name, business registration number
- –LINE user ID and LINE Official Account details
- –Role and permissions within your organization
2.2 Business Operational Data
- –Sales orders, invoices, financial records entered through or processed by the Services
- –Inventory and product data
- –Customer records and communication history (as entered by your business)
- –Employee records (only as entered by your authorized users)
2.3 Usage and Technical Data
- –IP addresses, device type, browser information
- –Pages visited, features used, session duration
- –API call logs and error reports
- –Timestamps of actions within the platform
2.4 Payment Data
- –Billing name, address, and email
- –Payment method details (processed by our payment partner; Almostmind does not store full card numbers)
2.5 Communications Data
- –Emails, LINE messages, and support chat conversations with our team
- –Survey and feedback responses
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Providing and operating the Services | Performance of contract |
| Processing payments and managing subscriptions | Performance of contract |
| Sending service notifications and alerts | Performance of contract / Legitimate interest |
| Improving and developing our Services | Legitimate interest |
| Complying with legal and regulatory obligations | Legal obligation |
| Sending marketing communications (with your consent) | Consent |
| Fraud prevention and security monitoring | Legitimate interest / Legal obligation |
4. How We Share Your Data
We do not sell your personal data.
4.1 Service Providers
We use trusted third-party providers to operate our Services:
- –Cloud infrastructure (data centers in Thailand)
- –Payment processing
- –Email delivery services
- –Analytics and monitoring tools
All service providers are bound by data processing agreements and may only use your data to provide services to Almostmind.
4.2 LINE Corporation
To enable LINE integration, certain data is exchanged with LINE Corporation under LINE's Privacy Policy and applicable data sharing agreements. We only share the minimum data necessary for the integration to function.
4.3 Legal Requirements
We may disclose data when required by Thai law, court order, or regulatory authority, or to protect the rights and safety of Almostmind, our users, or the public.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, customer data may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our website before any such transfer.
5. Data Storage and Security
Location: Your business data is stored in data centers located in Thailand. Data does not leave Thailand except where explicitly required for a specific integration you have enabled.
Security measures include:
- –AES-256 encryption at rest
- –TLS 1.2+ encryption in transit
- –Role-based access controls
- –Regular security audits and penetration testing
- –Dedicated database isolation per client company (your data is never commingled with another company's data)
Despite our security measures, no system is completely secure. If you suspect unauthorized access to your account, please contact us immediately at security@almostmind.com.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Services. After account closure:
- –Operational business data is retained for 90 days to allow data export, then permanently deleted
- –Financial records may be retained for up to 5 years to comply with Thai accounting and tax regulations
- –Backup copies are fully purged within 30 days of the retention period expiry
You may request deletion of your personal data at any time (subject to legal retention obligations) by contacting privacy@almostmind.com.
7. Your Rights Under the PDPA
As a data subject under Thailand's PDPA, you have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your personal data (subject to legal obligations) |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interest |
| Restriction | Request that we limit how we process your data |
| Withdraw Consent | Withdraw any consent you have given at any time |
To exercise any of these rights, contact us at privacy@almostmind.com. We will respond within 30 days of receiving your request.
8. Cookies and Tracking
Our website (almostmind.com) uses cookies and similar tracking technologies to:
- –Keep you signed in to your account
- –Remember your preferences
- –Analyze website traffic and usage patterns (using anonymized data)
- –Enable LINE Login and social sharing features
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.
9. Children's Privacy
Our Services are not directed to individuals under 20 years of age (the age of majority in Thailand for contractual purposes). We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact privacy@almostmind.com and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- –Posting a prominent notice on almostmind.com
- –Sending an email to the address on your account
- –Sending a notification via LINE
The date of the most recent revision appears at the top of this page. Continued use of the Services after the effective date of any change constitutes acceptance of the updated policy.
11. Contact Our Data Protection Officer
If you are not satisfied with our response, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).