Privacy Policy

Introduction and Scope

At GGodex, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered digital asset navigator platform and related services ("Services"). This policy applies to all users of our platform, including entrepreneurs, individual users, and any other parties who interact with our services.

By using our Services, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy. This policy should be read in conjunction with our Terms of Service and Cookie Policy to understand the complete framework governing your use of our platform.

We recognize that privacy is fundamental to trust, and trust is essential for the effective use of financial technology platforms. Therefore, we have designed our privacy practices to be transparent, user-controlled, and aligned with the highest industry standards for data protection and security.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

Create an account or register for our services
Contact us through our support channels or inquiry forms
Participate in educational programs or risk assessments
Subscribe to our newsletters or educational content
Provide feedback or participate in surveys
Engage with our AI-powered guidance system
Configure your dashboard and preferences
Request customer support or technical assistance

This personal information may include:

Contact information (name, email address, phone number, mailing address)
Account credentials and authentication information
Professional information (business name, role, industry)
Digital asset portfolio information (when voluntarily provided)
Communication preferences and history
Educational progress and assessment results
Risk tolerance and investment experience information
Financial goals and objectives (when shared for educational purposes)

Technical and Usage Information

We automatically collect certain technical information when you use our Services:

Device information (IP address, browser type, operating system, device identifiers)
Usage data (pages visited, time spent, features used, click patterns)
Log files and analytics data
Cookies and similar tracking technologies
Performance metrics and error reports
Geographic location data (general location based on IP address)
Referral sources and marketing attribution data
Session information and user journey data

AI Interaction Data

To improve our AI services and provide personalized guidance, we may collect:

Conversation logs and queries submitted to our AI system
User feedback and ratings on AI responses
Learning preferences and educational pathway choices
Risk assessment responses and results
Feature usage patterns and preferences
Educational content engagement metrics
Workflow automation preferences and configurations

Third-Party Information

We may receive information about you from third-party sources, including:

Public databases and information sources
Marketing partners and referral sources
Social media platforms (if you choose to connect them)
Identity verification services
Analytics and data enhancement services

How We Use Your Information

We use the collected information for legitimate business purposes, including:

Service Provision and Platform Operations

Provide and maintain our AI-powered guidance platform
Process your account registration and manage your user profile
Personalize your educational experience and dashboard
Facilitate secure transfer orchestration and workflow automation
Provide customer support and respond to your inquiries
Process transactions and manage billing (where applicable)
Maintain platform security and prevent fraud
Ensure compliance with legal and regulatory requirements

AI Enhancement and Personalization

Train and improve our AI algorithms and recommendation systems
Provide personalized risk assessments and educational content
Develop new AI-powered features and capabilities
Analyze usage patterns to enhance user experience
Create personalized learning pathways and educational recommendations
Optimize platform performance and functionality

Communication and Engagement

Send important service updates, security alerts, and notifications
Provide educational content and risk management insights
Respond to your questions, requests, and feedback
Send newsletters and educational materials (with your consent)
Conduct user surveys and gather feedback for improvement
Communicate about new features, updates, and platform enhancements

Analytics and Business Intelligence

Analyze platform usage and user behavior patterns
Conduct research and development for new features
Generate insights for business planning and strategy
Monitor platform performance and identify areas for improvement
Create aggregated and anonymized reports and statistics

Legal and Compliance

Comply with legal obligations and regulatory requirements
Protect against fraud, security threats, and illegal activities
Enforce our terms of service and platform policies
Maintain audit trails for compliance and regulatory purposes
Respond to legal requests and court orders
Protect our rights, property, and the safety of our users

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following specific circumstances:

Service Providers and Business Partners

We may share information with trusted third-party service providers who assist us in operating our platform, conducting business, or serving users. These providers are contractually obligated to:

Keep your information confidential and secure
Use your information only for the specific services they provide to us
Implement appropriate security measures to protect your data
Delete or return your information when their services are no longer needed
Comply with applicable data protection laws and regulations

Legal Requirements and Law Enforcement

We may disclose your information if required to do so by law or in response to:

Valid legal processes, such as court orders or subpoenas
Requests from government agencies or regulatory authorities
Law enforcement investigations
National security requirements
Other legal obligations that require disclosure

Business Transfers and Corporate Transactions

In the event of a merger, acquisition, sale of assets, or other corporate transaction, your information may be transferred as part of that transaction, subject to:

The same privacy protections outlined in this policy
Notification to users about the transfer
Opportunity for users to opt out or delete their accounts
Compliance with applicable data protection laws

Protection of Rights and Safety

We may disclose information to protect:

Our rights, property, or safety
The rights, property, or safety of our users
The rights, property, or safety of the general public
Against fraud, security threats, or illegal activities
The integrity and security of our platform

Aggregated and Anonymized Information

We may share aggregated, anonymized, or de-identified information that cannot be used to identify you personally for:

Industry research and analysis
Market trend reporting
Academic research and studies
Business intelligence and benchmarking

Data Security and Protection

We implement comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework is designed to meet or exceed industry standards and regulatory requirements.

Technical Security Measures

End-to-end encryption of data in transit and at rest
Multi-factor authentication systems for user accounts
Advanced firewall and intrusion detection systems
Regular security vulnerability assessments and penetration testing
Secure coding practices and regular code reviews
Automated security monitoring and threat detection
Secure data backup and disaster recovery procedures
Regular security updates and patch management

Administrative Security Measures

Comprehensive employee security training and awareness programs
Strict access controls and principle of least privilege
Background checks for employees with access to sensitive data
Regular security audits and compliance assessments
Incident response procedures and breach notification protocols
Data retention and disposal policies
Vendor security assessments and contractual requirements

Physical Security Measures

Secure data centers with restricted access controls
Environmental controls and monitoring systems
Redundant power and network infrastructure
Physical security monitoring and surveillance
Secure disposal of physical media and equipment

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information and employ industry-leading security practices, we cannot guarantee absolute security. We encourage users to take appropriate precautions to protect their own accounts and information.

Your Privacy Rights and Choices

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

Access and Information Rights

Right to Access: Request access to your personal information and details about how we process it
Right to Information: Receive information about our data processing activities and purposes
Right to Data Portability: Request transfer of your information to another service provider in a structured format

Correction and Update Rights

Right to Correction: Request correction of inaccurate or incomplete information
Right to Update: Update your account information and preferences at any time
Right to Rectification: Have inaccurate personal data corrected or completed

Deletion and Restriction Rights

Right to Deletion: Request deletion of your personal information (subject to legal requirements)
Right to Restriction: Request restriction of processing your information under certain circumstances
Right to Erasure: Request removal of your personal data when it's no longer necessary

Consent and Objection Rights

Right to Withdraw Consent: Withdraw your consent for data processing where consent is the legal basis
Right to Object: Object to processing of your information for certain purposes
Right to Opt-Out: Opt out of marketing communications and non-essential data processing

Exercising Your Rights

To exercise these rights, please contact us at:

Email: privacy@ggodex.com
Phone: +66 82 374 9156
Through your account settings and privacy controls

We will respond to your requests within the timeframes required by applicable law, typically within 30 days. We may need to verify your identity before processing certain requests to protect your privacy and security.

Data Retention and Storage

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods

Account Information: Retained while your account is active and for a reasonable period after account closure
Transaction Records: Retained for 7 years or as required by applicable financial regulations
Communication Records: Retained for 3 years for customer service and legal purposes
Usage and Analytics Data: Retained for 2 years for platform improvement and analytics
Security Logs: Retained for 1 year for security monitoring and incident response
Marketing Data: Retained until you opt out or for 2 years of inactivity

Data Disposal

When personal information is no longer needed, we securely delete or anonymize it using industry-standard methods:

Secure deletion of electronic data using certified data destruction methods
Physical destruction of hardware containing personal information
Anonymization of data that may be retained for statistical purposes
Verification of complete data removal from all systems and backups

International Data Transfers

As a global platform, we may transfer your personal information to countries other than your country of residence. These transfers are necessary to provide our services and are conducted with appropriate safeguards to protect your privacy.

Transfer Safeguards

Adequacy decisions by relevant data protection authorities
Standard contractual clauses approved by data protection authorities
Binding corporate rules for intra-group transfers
Certification schemes and codes of conduct
Specific derogations for particular situations

Data Processing Locations

Your personal information may be processed in:

Thailand (our primary operations center)
European Union (for EU users, subject to GDPR protections)
United States (for certain technical services, with appropriate safeguards)
Other countries where our service providers operate (with contractual protections)

Contact Information and Updates

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us:

Email

privacy@ggodex.com

Phone

+66 82 374 9156

Address

89 Sukhumvit Soi 31
Khlong Toei Nuea, Watthana
Bangkok 10110, Thailand

Policy Updates and Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on our website with a new "Last updated" date
Sending email notifications to registered users for significant changes
Providing in-app notifications about policy updates
Posting notices on our platform about important privacy changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes indicates your acceptance of the updated policy.