🛡️ Regulatory Compliance•Thailand PDPA B.E. 2562 (2019)

Personal Data Protection & Consent Policy

Effective Date: 12 October 2026 • Version 2.4 (Bank-Grade Security Standard)

🔒

Strictly Read-Only

Zero transfer authority. We can never withdraw, transfer funds, or alter your bank credentials.

⚡

1-Tap Revocation

Revoke any bank, channel, or lender connection anytime directly through the Trust Agent.

🚫

Never Sold or Monitized

Your financial records belong to you. We never sell data to advertisers or unauthorized lenders.

1.Data Controller Information

This policy governs the processing of personal and business financial data by BizMate Financial Technologies (Thailand) Co., Ltd. ("BizMate", "we", "us", or "our"), acting as the Data Controller in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA).

For inquiries or to exercise your statutory rights, contact our Data Protection Officer (DPO) at dpo@bizmate.co.

2.Data We Collect & Integration Scopes

To provide the 13-week Cash Radar, Financial Health Score, and automated Accounts Receivable follow-up, BizMate requests the following strictly defined data scopes:

Data Category	Specific Elements	Purpose & Agent
Commercial Identity	Company name, Tax ID, authorized representative, work email.	Account authentication & KYC profile.
Bank Feeds (Read-Only)	Account balances, statement lines, 12-month transaction histories.	Cash Radar forecasting & safety buffer tracking (Cash Agent).
Omnichannel Sales	Shopee, Lazada, TikTok Shop payout settlements, PromptPay receipts.	Inflow projections & credit readiness rating (Health Agent).
Invoices & AR	Outstanding buyer invoices, due dates, customer payment timelines.	Owner-approved reminder drafting (Collections Agent).

3.Zero-Surprise Policy & Negative Scopes

Mandatory Technical Safeguard: BizMate operates under deterministic server-side guardrails enforced by the Trust Agent.

No Unilateral Transfers: The system has zero technical capability to initiate, transfer, or debit funds without your live physical bank step-up authorization (e.g. Bank App Biometric Face ID).
Approval-First Reminders: No customer collection messages (LINE OA / Email) are sent without owner confirmation in the Central Inbox.
No Undisclosed Credit Applications: Your Financial Passport is never forwarded to external lenders until you explicitly review and approve the specific funding term.

4.Data Storage, Encryption & Security

All personal and commercial transaction data is encrypted in transit using TLS 1.3 and at rest using AES-256. Encryption keys are managed through hardware security modules (HSM).

Audit records are immutably logged into the Trust Agent ledger, recording exact timestamps of data ingestion, agent deliberations, and user approvals.

5.Your Statutory Rights under Thailand PDPA

Under Sections 30 through 36 of the PDPA, you retain the right to:

Right to Withdraw Consent: Revoke any linked bank or sales channel at any moment with 1 tap.

Right of Access & Portability: Request full export of your financial records in machine-readable JSON/CSV.

Right to Erasure: Request permanent deletion of all stored transaction logs upon account termination.

Right to Object: Restrict automated processing or profiling for credit score simulations.

6.Consent Duration & Revocation Mechanism

Your initial consent is valid for a period of 12 months from the date of agreement. You may inspect active authorizations and terminate access at any time via:

BizMate Dashboard → Trust Agent Security Controls → Tab 2: Sharing & Consents → Tap [Revoke Access]

By registering for BizMate, you consent to data processing under these terms.

I Understand & Return to Register →