Data We Collect

We collect data necessary to deliver our services safely and effectively. Collection is limited to what supports onboarding, program delivery, basic support, compliance and research to improve the platform.

Data You Provide

When you register and use WiseAppFlow, you may provide the following categories of personal data as needed to access features and receive services.

• Contact information: name, email address, phone number (+66915664120) and mailing address when required for registration or billing.
• Profile and professional details: role, company affiliation, leadership experience, and preferences relevant to program personalization.
• Onboarding responses and self-assessment forms used to tailor recommendations and coaching plans.
• Session notes and journal entries that you choose to record within the platform or share with coaches.
• Payment and billing information collected via our payment processors when you purchase premium plans.
• Communications you choose to send to us, including support requests and feedback.

Automatically Collected Data

Some information is collected automatically to ensure secure, reliable operation and to improve the user experience. This data is limited in scope and handled according to security best practices.

• Device and browser information: device type, operating system, browser version and general device identifiers.
• Usage data: features used, timestamps, session duration and aggregated engagement metrics.
• IP address and approximate location for security, fraud prevention, and regional compliance.
• Performance and error logs to diagnose issues and maintain service stability.
• Cookies and similar tracking technologies used for functionality and analytics.
• Anonymous or pseudonymized analytics data derived from usage and interaction patterns.

Third-Party Data

We may receive information about you from third parties when necessary to provide services or to validate information, subject to applicable law and third-party privacy terms.

• Identity or verification data from identity verification providers when required for compliance or security.
• Payment confirmation and billing details from payment processors.
• Aggregated analytics or benchmarking data from trusted analytics providers to inform product improvement.

Legal Basis for Processing

Where relevant, we rely on lawful grounds for processing your personal data, including contractual necessity, consent, legitimate interests, and compliance with legal obligations.

• Contractual necessity: processing required to perform and manage your subscription or provide requested services.
• Consent: where we request explicit consent for optional processing such as marketing communication or certain analytics.
• Legitimate interests: processing necessary for platform security, product improvement, and fraud prevention, balanced against your privacy rights.
• Legal obligation: processing to comply with applicable laws and regulatory requirements.

Cookies and Tracking

Cookies help provide functionality and gather performance data. You can control cookie settings through your browser, and we provide options to manage tracking preferences where feasible.

We use essential cookies for core functionality, performance cookies to understand usage, and optional cookies for personalization and third-party integrations.

Categories include strict necessary, performance/analytics, preference, and marketing. Marketing cookies are used only with explicit consent.

You can block or delete cookies through your browser settings. Some features may not function properly if essential cookies are disabled.

Full cookie details

Data Sharing and Disclosure

We limit sharing of personal data to trusted parties who perform services on our behalf or when required by law. Agreements and technical safeguards are used to protect shared data.

• Service providers: hosting, analytics, payment processors and communication vendors who act on our instructions.
• Professional advisors: legal, audit and consultancy firms engaged to support business operations.
• Event and retreat partners when you register for in-person programs and explicitly opt into sharing required details.
• Affiliated service providers for program delivery subject to confidentiality agreements.
• Regulatory or legal authorities when disclosure is necessary to meet a legal obligation or protect rights and safety.
• Aggregated or anonymized information that does not identify individuals for research and reporting.

International Data Transfers

WiseAppFlow operates from Thailand but may transfer data to service providers in other jurisdictions. Transfers are undertaken with appropriate safeguards to maintain a comparable level of protection.

We use contractual protections, security measures, and data minimization techniques when transferring data across borders. Requests about transfer safeguards can be directed to our privacy contact.

Data Retention

We retain personal data only as long as necessary to deliver services, meet legal obligations, or reasonably resolve disputes. Retention periods vary by data type and purpose.

Account-related data is retained for the duration of your subscription and a limited period afterward to facilitate reactivation, legal compliance, and dispute resolution.

Communications and support tickets are retained to maintain service quality and resolve any ongoing issues, typically for a defined period aligned with operational needs.

System logs and diagnostic information are retained for security monitoring and performance analysis for a limited, regularly reviewed timeframe.

When data is no longer required, we purge or anonymize it in accordance with internal policies and applicable law. You may request deletion subject to legal limitations and operational constraints.

Security Measures

We maintain organizational and technical measures to protect personal data from unauthorized access, disclosure, alteration or destruction. Measures are periodically reviewed and updated in line with industry practices.

• Data encryption in transit and at rest for sensitive information.
• Access controls and role-based permissions for internal systems.
• Regular vulnerability assessments, secure development practices and incident response procedures.

Your Rights

Subject to applicable law, users have rights regarding their personal data, including access, correction, deletion and objection to certain processing activities. Requests are handled in a timely and documented manner.

• Right to access the personal data we hold about you and receive a copy.
• Right to request correction of inaccurate or incomplete personal data.
• Right to request deletion of personal data where processing is no longer necessary or lawful.
• Right to object to or restrict certain types of processing, including profiling or direct marketing.
• Right to data portability where technically feasible and applicable.
• Right to withdraw consent for processing that relies on consent, without affecting processing prior to withdrawal.
• Right to lodge a complaint with a supervisory authority if you believe your rights have been violated.
• Right to receive information about automated decision-making and meaningful information about the logic involved where applicable.

Making Rights Requests

If you wish to exercise your data subject rights (access, rectification, restriction, objection, portability, or erasure), submit a request via the contact details below. Include a clear description of the information you seek, a valid form of identification, and any relevant account identifiers to help us locate the data promptly.

[email protected]

We aim to acknowledge receipt of rights requests within five business days and to provide a substantive response within 30 calendar days. In complex cases where additional time is necessary, you will be informed of an extended response timeframe and the reasons for the delay.

Marketing Communications

We may use your contact details to send updates about WiseAppFlow services, events, and content relevant to spiritual growth for founders. Communications will be relevant, purposeful, and limited to categories for which you provided consent or where we have a legitimate interest.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us at the address below. Opting out will not affect service-related messages necessary to manage your account or purchases.

Children and Minors

WiseAppFlow services are intended for adults and professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data of a minor has been collected without appropriate consent, we will take steps to delete the information.

Third-Party Links

Our platform may reference or link to third-party resources for tools, readings, or integrations. These links are provided for convenience; we do not control external sites and are not responsible for their privacy practices. We recommend reviewing the privacy policies of any third-party services you engage with.