Privacy Policy

Information We Collect

When you use our bug tracking platform, we collect several types of information to provide and improve our services. Here's what we gather and why:

Account Information

• Your name and email address when you create an account
• Company information if you're setting up a business account
• Profile details you choose to add
• Payment information processed through secure third-party providers

Usage Data

We automatically collect information about how you interact with our platform. This includes pages visited, features used, time spent in different sections, and technical details like your browser type and operating system. This data helps us understand what works well and what needs improvement.

Bug Reports and Project Data

The content you upload - bug reports, screenshots, code snippets, comments, and project files - is stored securely on our servers. This is the core of our service, and we treat this information with special care since it often contains sensitive development details.

How We Use Your Information

We use your information for specific, legitimate business purposes. We don't sell your data or use it for advertising. Here's exactly what we do:

Data Protection and Security

Security isn't just a feature for us - it's fundamental to everything we do. Development teams trust us with sensitive information about their projects, and we take that responsibility seriously.

Technical Safeguards

• All data transmission uses TLS encryption with modern cipher suites
• Database encryption at rest using AES-256 standards
• Regular security audits by independent third parties
• Multi-factor authentication available for all accounts
• Access controls that limit employee access to your data

Operational Security

Our staff undergo security training and sign confidentiality agreements. We maintain detailed access logs, use secure development practices, and have incident response procedures ready if anything goes wrong. Our servers are hosted in certified data centers with physical security measures.

If we ever experience a security incident that affects your data, we'll notify you within 72 hours and provide clear information about what happened and what we're doing about it.

Your Rights and Choices

Under Thailand's Personal Data Protection Act and international privacy standards, you have several rights regarding your personal information. We've made these rights easy to exercise:

Most of these actions can be performed directly through your account dashboard. For complex requests or if you need assistance, our support team responds to privacy inquiries within 48 hours during business days.

Data Sharing and Third Parties

We share your information in limited circumstances, always with appropriate safeguards in place. Here's when and why sharing occurs:

Service Providers

We work with carefully selected companies that help us operate our platform - cloud hosting, payment processing, email delivery, and customer support tools. These providers access only the minimum data necessary and are contractually required to protect your information.

Team Collaboration

When you add team members to projects, they can see bug reports and project information you've shared within those specific projects. You control who has access to what through our permission settings.

Legal Requirements

We may disclose information if required by Thai law, court orders, or to protect our rights and the safety of our users. We'll notify you about such requests unless legally prohibited from doing so.

Data Retention and Deletion

We keep your information only as long as needed to provide our services and meet legal obligations. Here's our retention approach:

• Active account data is retained while you use our service
• After account deletion, most data is removed within 30 days
• Some information may be kept longer for legal compliance (typically 3-7 years)
• Anonymized analytics data may be retained indefinitely for service improvement
• Backup systems purge deleted data within 90 days

When you delete projects or bug reports, they're immediately removed from active systems and marked for permanent deletion during our next cleanup cycle, usually within 7 days.

International Data Transfers

Our primary servers are located in Thailand, but we use some international services for backup and content delivery. When your data crosses borders, we ensure it receives equivalent protection through:

• Contractual agreements requiring the same privacy standards
• Encryption during transmission and storage
• Regular audits of international service providers
• Compliance with applicable cross-border data transfer regulations

If you prefer your data to remain within Thailand, contact us about our domestic-only hosting option available for enterprise customers.

Cookies and Tracking

We use cookies to make our platform work properly and to understand how people use it. Here's what we track and why:

Essential Cookies

These keep you logged in, remember your preferences, and enable core platform features. You can't opt out of these and still use our service effectively.

Analytics Cookies

We use privacy-focused analytics to understand which features are popular and where people encounter problems. This data is anonymized and helps us improve the platform for everyone.

You can control most cookies through your browser settings. We don't use advertising cookies or share tracking data with marketing companies.

Changes to This Policy

Privacy practices evolve, and sometimes we need to update this policy. When we make changes:

• We'll email active users about significant changes at least 30 days in advance
• Minor clarifications will be posted here with an updated date
• We'll maintain an archive of previous versions for reference
• You can always opt out by deleting your account if you disagree with changes

We believe privacy policies should be living documents that reflect actual practices, not legal boilerplate that nobody reads or understands.