Introduction

Sala Daeng Company Limited ("we") develops and operates BACKOFFICE IQ by PowerAI (the "Platform"), an AI-powered back-office accounting platform for accounting firms and businesses. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Platform. Please read this Privacy Policy carefully. By using the Platform, you agree to the collection and use of information in accordance with this policy.

Our Role in Processing Data

Our Platform is a multi-tenant system used by accounting firms and businesses to manage documents of their clients or their own companies. Accordingly, our role falls into two categories:

• Data Controller: for your user account data (such as name, email, and usage data), we determine the purposes and means of processing.
• Data Processor: for documents and data that you or your organization upload to a workspace (such as accounting documents of an accounting firm's clients), your organization is the data controller and we process such data solely based on instructions given through your use of the Platform.

Information We Collect

Personal Information

When you register an account or use our Platform, we may collect the following personal information:

• Name and display name
• Email address
• Profile picture (if you choose to upload one)
• Account credentials (encrypted)
• Payment information (processed securely through third-party payment providers)

User Content and Documents

We collect content you create, upload, or connect through the Platform, including:

• Accounting and tax documents you upload, such as tax invoices, receipts, payment slips, bank statements, tax filings (PND 1/3/53, PP 30), and social security documents (SSO 1-10)
• Workspace, company, member, and configuration data you create
• Data extracted from documents by AI, such as document numbers, dates, amounts, taxes, and counterparties
• Credentials you configure for connecting external systems, such as the Revenue Department, the Social Security Office, destination accounting systems, or POS systems (stored encrypted)

Automatically Collected Information

When you use the Platform, we automatically collect certain information, including:

• Device information (device type, operating system, unique device identifiers)
• Usage data (features used, actions taken, time spent)
• Crash reports and performance data
• IP address and general location (country/region level only)

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Create and manage your account and workspaces
• Classify documents and extract data from them using OCR and AI technology
• Match documents against customer/vendor master data in your workspace
• Push data into destination accounting systems as instructed by you (such as Express or ERP)
• Automatically file and name documents in the document management system (EDMS)
• Retrieve documents from government agencies as you configure and schedule
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience

Third-Party Services

We use the following third-party services, which may collect or process information about you:

Data Sharing and Disclosure

We may share your information in the following circumstances:

• With workspace members: documents and data in a workspace are visible to other members granted access to that workspace
• With service providers: third-party vendors who assist us in operating the Platform
• For legal reasons: if required by law, or to protect our rights and safety
• Business transfers: in connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, role-based access controls, and data isolation between workspaces. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. Accounting and tax documents may also need to be retained for periods required by applicable law. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time.

Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable laws, you may have the following rights regarding your personal information:

• Access: request access to your personal information
• Correction: request correction of inaccurate information
• Deletion: request deletion of your personal information
• Data portability: request a copy of your data in a portable format
• Withdraw consent: withdraw consent to data processing where applicable

To exercise these rights, please contact us at the email address listed below.

Children's Privacy

The Platform is intended for business use by users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Platform, you consent to the transfer of your information to countries outside your country of residence.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: