Privacy Policy

Splink (“we,” “our,” “us”) respects your privacy. This policy explains what data we collect, why we collect it, and how you can control it.

1. Information We Collect

Category	What	Purpose
Account data	Email address; display name; profile photo (if provided)	Login and account management
Receipt data	Uploaded receipt images or PDFs; extracted fields	Provide the scanning service
Usage data	Device type, IP address, timestamps	Security, analytics, and fraud prevention
Cookies/session	Session tokens	Keep you signed in, remember preferences

2. How We Use Your Data

• Authenticate you and provide requested scans.
• Improve accuracy of our models (aggregated/anonymised data only).
• Send essential service emails (e.g., password reset).
• We do not send marketing without consent.

3. Legal Bases

• Contract – to deliver the Service you request.
• Legitimate interests – protect our platform, measure performance.
• Consent – for optional features like marketing.

We comply with Thailand’s PDPA and, where applicable, the EU GDPR.

4. Sharing & Disclosure

We only share your data with:

• Cloud infrastructure and authentication providers that help operate our Service
• SaaS infrastructure platforms that monitor the operation of our Service
• LINE and Google when you choose them to log in
• Authorities when required by law

We never sell your personal data.

5. International Transfers

Your data may be processed on cloud servers located outside your country. We use safeguards such as encryption and secure data transfer protocols.

6. Data Retention

• Receipt files: kept indefinitely by default or until you delete them
• Account data: kept while your account is active
• Analytics logs: retained up to 12 months

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your data
• Export your data
• Object to or restrict processing

To exercise rights, email privacy@usesplink.com.

8. Security

We use encryption in transit and at rest, secure authentication, and least-privilege access controls.

9. Children

The Service is not intended for children under 13. We do not knowingly collect their data.

10. Changes

We may update this policy. If we make material changes, we will notify you in-app or by email at least 7 days before they take effect.

11. Contact

Email: support@usesplink.com

Company: Greenfield Labs Co., Ltd. (บริษัท กรีนฟิลด์ แล็บส์ จำกัด)

Address: 199/199 Viridian Prompt Village, Moo 6, Bang Rak Phattana Sub-district, Bang Bua Thong District, Nonthaburi Province 11110