Privacy: Qube Flow project tracker
Last updated 19 October 2026
1.Who is responsible for your data
ExtraQube Systems, contact [email protected].
2.What we collect
- Data
- Account: name, email, avatar, role, password (hashed), second-factor secret, API keys
- Purpose
- Sign members in, assign work to them and send them notifications
- Legal basis
- Contract (PDPA section 24(3))
- Kept for
- Not yet decided
- Data
- Activity: issues, comments, attachments
- Purpose
- Track the work of the team and its clients
- Legal basis
- Contract (PDPA section 24(3))
- Kept for
- Not yet decided
- Data
- Support requests: service requests, requester email
- Purpose
- Customer requests filed through the Qube-Flow customer portal
- Legal basis
- Contract (PDPA section 24(3))
- Kept for
- Not yet decided
- Data
- Logs: audit log, sign-in sessions
- Purpose
- Audit changes and keep sign-in sessions
- Legal basis
- Legitimate interest (PDPA section 24(5))
- Kept for
- Not yet decided
3.Who receives it
- Cloudflare, Inc. (United States (processing at its global edge)): DNS, TLS termination, DDoS and WAF, tunnel to the cluster: sees every request to a public name, including the visitor IP and the page in transit
- Resend, Inc. (United States): Sends transactional mail: the contact form to our inbox, portal notifications, platform reports. Receives recipient addresses and the message
4.Your rights and how to use them
Under Thailand's Personal Data Protection Act B.E. 2562 (sections 30 to 36) you may ask for access to and a copy of your data, ask us to send it to another organisation, object to its use, ask us to delete or destroy it, ask us to restrict its use, ask us to correct it, and withdraw consent where we rely on consent.
Send a request by email to [email protected]. You may also make a request in person or by post: email us first and we will arrange a time or give you the postal address. We will tell you within 15 days if a request is incomplete, and answer within 30 days of a complete request. Electronic copies are free.
If you believe we process your data unlawfully, you may complain to the Office of the Personal Data Protection Committee (www.pdpc.or.th).