Privacy Policy

This policy applies to SimWealth services, products, and channels, as well as services operated by persons or businesses under common affiliation that state they use this policy, whether available now or developed in the future.

This scope includes, without limitation:

• SimWealth websites, web applications, and mobile applications;
• creating, signing in to, and managing user accounts;
• contact forms, interest lists, surveys, and support requests;
• usage analysis, service improvement, and system security; and
• communications with SimWealth by email, LINE, or other channels we identify.

For this policy, Methasit Kongmon is the data controller and decides the purposes and means of processing personal data for SimWealth.

The data we may collect depends on how you use the services and may include the following categories:

2.1 Account and contact data

Such as your name, email address, sign-in information, account settings, membership status, and information you submit through forms or communications with us.

2.2 Data used with financial tools

Data you choose to enter, save, or import to use service features, such as financial information, plans, goals, entries, or assumptions used for calculations and analysis. SimWealth collects only the data needed for the features you choose to use.

2.3 Usage and technical data

Such as IP address, device type, operating system, browser, language setting, session identifiers, pages and features used, activity time, referral source, error logs, and security logs.

2.4 Communications and support data

Content you send us, attachments, feedback, questions, contact history, and information needed to respond to or resolve an issue.

2.5 Data from third-party sign-in

If you choose to sign in through a third-party provider, we may receive data that the provider is allowed to share with us, such as your name, email address, and account identifier, subject to your settings and that provider's policy.

2.6 Sensitive personal data

We generally do not intend to collect sensitive personal data. Please avoid sending it unless it is necessary for a clearly identified service. If processing is necessary, we will use an appropriate legal basis and obtain explicit consent where required by law.

Data identified as required for account creation, identity verification, or a requested feature must be provided. Without it, we may be unable to create your account, sign you in, or provide that feature. Data not identified as required is provided voluntarily.

We may receive personal data from:

• you directly when you create an account, enter information, use the services, or contact us;
• your device, browser, and our systems automatically when you use the services;
• sign-in providers, technical service providers, or external services you choose to connect; and
• other lawful sources, with notice where required by law.

We process data to create and maintain accounts; provide requested services and features; calculate or display results based on data you enter; respond to questions and provide support; analyze and improve user experience; maintain security and prevent fraud; comply with law; and exercise or protect our rights.

We rely on the legal basis appropriate to each activity, such as necessity to enter into or perform a contract, compliance with a legal obligation, legitimate interests that do not unreasonably override your rights, or consent where required. You may withdraw consent without affecting processing completed before withdrawal.

We may use cookies, browser storage, session identifiers, and similar technologies to operate the services, maintain security, remember settings, measure performance, and understand usage.

You may control certain cookies through browser settings or tools we may provide, but disabling necessary technologies may prevent some features from working correctly. Where consent is legally required, we will request it before using the relevant technology.

We may disclose data as necessary to service providers, partners, or processors that help us operate the services, such as providers of hosting, infrastructure, authentication, analytics, communications, support, and security. We require recipients to use the data for relevant purposes and protect it appropriately.

We may disclose data to comply with law, government orders, or legal process; prevent harm, fraud, or security threats; or in connection with a restructuring, transfer of business, or transaction involving the services. We will follow applicable law and provide notice where required.

We do not sell your personal data for monetary compensation.

Providers or systems we use may process or store data outside Thailand. When data is transferred, we use measures required or recognized by law to provide appropriate protection, such as data protection terms, security safeguards, and lawful transfer mechanisms.

We retain data only as long as necessary for the purposes described in this policy, considering how long you have an account or use the services; the nature and sensitivity of the data; security needs; dispute resolution; the exercise of our rights; and legally required periods. When data is no longer needed, we will delete, destroy, or appropriately de-identify it unless the law permits or requires continued retention.

We use technical and organizational measures appropriate to the nature of the data and the level of risk, such as access controls, authentication, encryption in transit, event logging and monitoring, backups, and security reviews.

No system can guarantee absolute security. If a personal data breach occurs, we will assess it and notify the relevant authority or affected individuals where required by law.

Subject to applicable legal conditions, you may have the right to:

• access and obtain a copy of your personal data;
• correct data so it is accurate, current, and complete;
• receive or transfer data in a form provided by law;
• object to, restrict, or request deletion or destruction of data;
• withdraw consent you previously provided; and
• lodge a complaint with Thailand's Personal Data Protection Committee.

Certain rights may be limited by law, and we may decline a request where legally permitted. We will provide an appropriate explanation where required.

To exercise a right, send your request and enough information to verify your identity to simwealth.tech@gmail.com. We will respond within the period required by law and may ask for additional information to prevent unauthorized disclosure or alteration of data.

When account services become available, signed-in users can start an account deletion request from Profile settings. You must confirm the request using the steps displayed in the service. If you cannot access your account, contact us by email.

Once a request is processed, we will end access to the account, revoke sessions, and delete or appropriately de-identify data linked to you. We may retain certain data as necessary to comply with law, maintain security, prevent fraud, resolve disputes, or exercise and protect rights, and will limit its processing to those purposes.

SimWealth services are not intended for children under 13 years old, and we do not knowingly seek to collect their data. If we learn that we received such data without an appropriate legal basis, we will delete or otherwise address it.

Users aged 13 or older who remain minors must obtain consent or permission from a person with parental authority where they cannot lawfully act alone. If you are a parent or guardian with concerns, please contact us.

Please provide accurate data and update it when it changes. If you provide another person's data, you must have an appropriate right or legal basis and provide this policy to that person where necessary. Results from SimWealth tools depend on user-provided data and assumptions and are not personalized investment, legal, tax, or financial advice.

The services may link or connect to third-party websites, applications, or services. Those parties process data under their own policies. We recommend reading the relevant external policy before providing data or connecting an account.

We may update this policy to reflect changes in our services, technology, law, or operating practices. We will display the latest version and effective date on this page. For material changes, we will provide advance notice through the services or another appropriate channel where required by law.

This English version is a translation provided for convenience. The Thai version is the controlling and legally effective version. If the versions differ, the Thai text prevails unless applicable law requires otherwise.