PRIVACY POLICY

1. Introduction

VARO COMPANY LIMITED ("Varo," "we," "us," or "our"), a company registered in Thailand (Tax ID: 0505568024826, D-U-N-S: 659689830), is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and share information when you use our websites, mobile applications, IoT devices, cloud services, and other products and services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.

2. Information We Collect

We may collect the following types of information:

2.1 Information You Provide

• Account registration data (name, email address, phone number)
• Billing and payment information
• Communications you send to us (support tickets, emails, feedback)
• Business information when you register as an enterprise client

2.2 Information Collected Automatically

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, browser type, pages visited, access times)
• Usage data (features used, interactions with our Services)
• Location data (with your consent, for location-based services)

2.3 Information from IoT Devices

• Sensor data from VaroSense (temperature, humidity, environmental metrics)
• Proximity and location data from VaroBeacon
• Usage patterns and device status from VaroHome AI
• Video and audio data from Varo Live MiniCam (when enabled by user)

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our Services
• To process transactions and manage your account
• To send you technical notices, updates, and security alerts
• To respond to your comments, questions, and support requests
• To monitor and analyze usage trends and preferences
• To detect, prevent, and address technical issues and security threats
• To personalize and improve your experience with our AI-powered features
• To comply with legal obligations and enforce our terms of service

4. Data Storage and Security

Your data is stored on secure servers managed through our multi-cloud infrastructure, which includes AWS, Google Cloud, Cloudflare, and DigitalOcean. We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Automated failover and backup systems for data redundancy
• Network-level protection through Cloudflare security services

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our Services (cloud hosting, analytics, payment processing)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given explicit consent to share specific data
• Aggregated Data: We may share anonymized, aggregated data that cannot identify you personally

6. Third-Party Services

Our Services may integrate with third-party platforms and services. These third parties have their own privacy policies, and we encourage you to review them. Third-party services we may integrate with include:

• Cloud infrastructure providers (AWS, Google Cloud, DigitalOcean)
• Content delivery and security networks (Cloudflare)
• Analytics services
• Payment processors

7. Your Rights

In accordance with Thailand's Personal Data Protection Act (PDPA) and applicable international privacy laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request transfer of your data in a structured, machine-readable format
• Objection: Object to processing of your data for specific purposes
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@varo.co.th.

8. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete such information promptly. If you believe that a child has provided us with personal data, please contact us at info@varo.co.th.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we will securely delete or anonymize it.

10. International Data Transfers

As we operate a multi-cloud infrastructure across different regions, your data may be transferred to and processed in countries other than Thailand, including Singapore and other jurisdictions where our cloud service providers operate. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

11. Cookies and Tracking Technologies

We may use cookies, web beacons, and similar tracking technologies to collect and store information about how you interact with our Services. You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality of certain features.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: