GDCC e-Office

This Privacy Policy governs your use of the mobile application GDCC e-Office ("Application") created and operated by D-SOLUTION CLOUD CO., LTD. This policy applies to all authorized users of the Application and will be updated periodically as the Application continues to develop.

The Application is designed for use by authorized personnel of our client organizations who are registered users of our web platform. Its primary function is to provide secure identity verification and authentication, enabling users to access the web platform safely.

1. User Provided Information

The Application obtains specific information directly from the user for the sole purpose of secure authentication with the related web platform (XYZ).

The personal information obtained during the registration process is:

• Thai National Identification Number: This identification number is immediately converted into a secure, one-way hash on the user's device and the hash value is transmitted to our servers. We do not store or transmit the original Identification Number.

• Pairing Data: Information necessary to securely link the user's mobile app account with their existing organizational account on the web platform.

This data is used exclusively to facilitate the core function of the Application, which is to enable QR code-based, passwordless login to the web platform and to ensure the user is an authorized member of a client organization.

2. Automatically Collected Information

The Application may collect certain information automatically, including but not limited to, the type of mobile device you use, your mobile device's unique device ID, the IP address of your mobile device, your mobile operating system, and information about the way you use the Application.

This automatically collected data is used for debugging, crash reporting, and general performance analysis to maintain and improve the Application.

3. Third-Party Access and Use

We may use third-party services within the Application to help us analyze and improve the app. These third parties may access your information only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

The third-party services currently in use are:

Google Firebase

Purpose : Push notifications (FCM) for account activity and system alerts.

Data Shared : Device tokens, IP address, and technical details necessary for message delivery.

Sentry (Self-Managed)

Purpose : Debugging, performance analysis, and crash reporting.

Data Shared :Device state, unique app instance identifiers, crash traces, and basic device information.

Internal Data Storage and Hosting

All core Application data, including hashed Identification Numbers and pairing information, is stored and managed on our own infrastructure.

• Infrastructure: Internal databases and S3-compatible object storage

• Purpose: Secure storage and retrieval of authentication and operational data

• Data Location: Stored on INET Cloud infrastructure in Thailand

4. Data Retention Policy

Automatically collected information is retained for a maximum of 90 days, after which it may be stored in an aggregated, anonymous format. User provided data is retained for as long as necessary to provide the Application's core functionality, or until the user requests deletion of their account.

5. Your Consent

By using the Application, you consent to the processing of your information as set forth in this Privacy Policy, as amended from time to time. "Processing" means using or interacting with information in any way, including but not limited to collecting, storing, deleting, using, combining, and disclosing information.

6. Contact Us

If you have any questions regarding privacy while using the Application, or about our data practices, please contact us at: customersupport@d-solution.co.th.