Privacy Policy

CAMP Insights ("we", "our", or "the Platform") is a decision intelligence platform for campaign analytics operated by Infinitas by Krungthai. This Privacy Policy explains how we collect, use, store, and protect your personal data when you access or use our services at campinsights.teamcamp.dev.

We are committed to processing personal data lawfully, fairly, and transparently, in line with applicable data protection laws, including Thailand's Personal Data Protection Act (PDPA). By using CAMP Insights, you acknowledge the practices described in this policy.

We collect only the data necessary to operate a secure, reliable analytics platform. The table below summarizes the categories of data we process, where they come from, and why.

CAMP Insights uses Google OAuth as its sign-in method. When you sign in with Google, we request access only to your basic profile information: your name, email address, and profile picture. We do not request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google service data.

Google user data is used exclusively to:

• Authenticate your identity and create or resume your Platform session.
• Verify that your account is authorized to access the Platform.
• Display your name and profile picture within the Platform interface.

CAMP Insights' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising, or transfer it to third parties except as necessary to provide and secure the Platform, comply with applicable law, or as part of a merger or acquisition with prior notice.

We process the data described above for the following purposes:

• To authenticate users and authorize access to the Platform.
• To process, analyze, and visualize campaign data for actionable insights.
• To monitor usage and improve functionality, performance, and user experience.
• To detect, prevent, and address security incidents, unauthorized access, or misuse.
• To comply with applicable legal obligations and regulatory requirements.

We do not use your personal data for automated decision-making that produces legal effects concerning you, and we do not use it for advertising or marketing to you.

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Service providers. Trusted infrastructure providers (cloud hosting, authentication, database services) that process data on our behalf under strict contractual obligations and only as instructed by us.
• Legal compliance. Where required by law, regulation, legal process, or an enforceable governmental request.
• Business transfers. In connection with a merger, acquisition, or sale of assets, with appropriate notice provided before your data becomes subject to a different privacy policy.

Your data is stored on secure, encrypted cloud infrastructure. We apply industry-standard safeguards, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Role-based access controls and authentication enforcement on every request.
• Row-level security policies on database tables to ensure data isolation.
• Regular security reviews, monitoring, and audit logging.

While we work continuously to protect your data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal data only for as long as necessary to fulfill the purposes described in this policy or as required by applicable law. Uploaded campaign datasets may be retained in historical archives to preserve analytical continuity.

You may request deletion of your personal data — including data obtained through Google sign-in — at any time by contacting your organization's CAMP Insights administrator. Upon a verified request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to, or request restriction of, certain processing activities.
• Withdraw consent where processing is based on consent.
• Revoke CAMP Insights' access to your Google account at any time via your Google Account permissions page.

To exercise any of these rights, contact your organization's CAMP Insights administrator.

CAMP Insights uses essential cookies and browser local storage strictly for authentication session management and user preferences. We do not use third-party advertising cookies, cross-site tracking technologies, or behavioral profiling.

CAMP Insights is a business platform and is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and communicate the changes through the Platform or via email. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

For questions or concerns regarding this Privacy Policy or how your data is handled, please contact your organization's CAMP Insights administrator or reach out to the Infinitas by Krungthai data protection team.