Privacy Policy

1. Data we collect

We only collect the data needed to prepare, submit and deliver your Thailand Digital Arrival Card (TDAC):

• Identity and passport details — full name, date of birth, nationality, gender, passport number, issuing country and expiry date. If you use the passport scan feature, the image of the passport page is processed to extract these fields and is then deleted.
• Travel details — arrival date, flight or vessel, purpose of visit, country of departure, accommodation type and address in Thailand, and any health or travel-history questions the arrival card requires.
• Contact details — the email address you give us to receive your QR code, and any message you send to support.
• Payment data — handled by our payment processors (Stripe, or Apple when you pay through the App Store). We never see or store your full card number; we keep the transaction reference, the amount and, for card payments, the card brand and last four digits.
• Technical data — an anonymous install identifier, app version, device type, IP address, language, and in-app usage events (for example, which step of the form was reached). If you installed the App after tapping an advertisement, Apple’s attribution token tells us which campaign it was; it contains no personal data.

2. Why we use it

• To complete and submit your arrival card and deliver your QR code (performance of the contract).
• To review your application for errors and answer your support requests.
• To process payments, prevent fraud and defend payment disputes (legitimate interest and legal obligation).
• To keep the App working, fix bugs and measure how our advertising performs (legitimate interest).
• To meet accounting and tax obligations (legal obligation).

We do not sell personal data and we do not use it for third-party advertising.

3. Who receives it

Your arrival-card details are transmitted to the Thai authorities’ arrival card system in order to obtain your QR code — that is the purpose of the Service. Apart from that, data is shared only with processors working under our instructions:

• Stripe — card payments (PCI-DSS certified).
• Apple — App Store purchases and app distribution.
• Resend — delivery of transactional emails (your QR code, support replies).
• Vercel — hosting of our servers and database.
• Mindee — passport image recognition when you use the scan feature (images are deleted after extraction).

These providers may store data in Singapore, the European Union, Japan or the United States under contractual safeguards (including standard contractual clauses where required).

4. Retention

• Application data, submission evidence and delivery logs: 18 months after delivery, so that we can help with corrections, prove delivery and respond to payment disputes.
• Passport images used for scanning: deleted immediately after extraction.
• Accounting records (invoice, amount, transaction reference): 7 years, as required by tax law.
• Support correspondence: 18 months after the last exchange.

5. Your rights

Depending on where you live (including under Singapore’s PDPA, the GDPR and the CCPA), you can ask us to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. Write to support@arrivalcards.app from the email address used for your order; we answer within 30 days. Deletion requests are honoured except for the records we must keep for legal or dispute-defence reasons. You may also lodge a complaint with your local data protection authority.

6. Security

Data is encrypted in transit (TLS) and at rest, access is restricted to the people who process orders, and payment data never touches our servers. No system is perfectly secure; if a breach affecting your data occurred we would notify you and the competent authority as the law requires.

7. Children

The App is intended for adults. A parent or guardian may enter a child’s details when completing arrival cards for a family; we process those details only for that purpose.

8. Changes and contact

We may update this policy; the date at the top shows the latest version. Questions: support@arrivalcards.app — AETHER INNOVATIONS PTE. LTD., 2 Venture Drive, #19-21, Vision Exchange, Singapore 608526.