Privacy Policy
Last updated: March 11, 2026
1. Introduction
Thai Nexus Point Co., Ltd. (operating as Kargo, Tax ID: 0775567004498, located in Hua Hin, Thailand) is committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, and protect your information in compliance with Thailand's Personal Data Protection Act (B.E. 2562).
2. Legal Basis for Data Processing
Under our Agency Appointment Agreement structure, Kargo acts as an Agent (Thai Nexus Point) for Principals (truckers/shippers). We process your data under the following legal bases:
- Contract Performance: Processing data to fulfill shipment and payment services
- Legal Obligation: Compliance with Thai tax law, Revenue Code, and Revenue Department requirements
- Legitimate Interest: Platform operations, fraud prevention, and service improvement
- Consent: Marketing communications and optional data sharing beyond service requirements
3. What Data We Collect
3.1 Account Information
- Full name and contact details
- 13-digit Thai Tax ID (Trucker/Shipper registration)
- Business entity type (Individual P.N.D. 3 or Company P.N.D. 53)
- VAT registration status and number
- Bank account details for payouts
- Email and phone number
3.2 Transaction Data
- Shipment details (origin, destination, weight, contents)
- Pricing and payment information
- Shipping costs (pass-through)
- VAT and withholding tax calculations
- Bank transfer references
3.3 Location Data
- GPS coordinates for shipment tracking (optional)
- Pickup and delivery addresses
3.4 Usage Data
- Login times and access logs
- Features used and interactions
- Device type and browser information
4. How We Use Your Data
- Service Delivery: Processing shipments, payments, and generating tax documents
- Tax Compliance: Calculating VAT, withholding taxes, and generating invoices and WHT certificates (50 Bis)
- Agency Authority: Storing your digital Agency Appointment Agreement and audit trail
- Financial Operations: Managing escrow, payouts, and reconciliation
- Fraud Prevention: Detecting and preventing fraudulent transactions
- Legal Compliance: Responding to Revenue Department audits and regulatory requests
- Communication: Service updates, payment notifications, and regulatory notices
5. Data Sharing with Third Parties
Critical for Agency Structure:
As your Agent, Kargo shares your data with other Principals (shippers) and Agents (truckers) to facilitate shipment matching and payment processing. This data sharing is necessary for the core service and explicitly authorized under your Agency Appointment Agreement.
We may share data with:
- Stripe: Payment processor (6% fee) - processes payments and issues invoices
- Other Truckers/Shippers: For shipment matching and coordination (only necessary details)
- Thai Revenue Department: Tax compliance, audit responses, VAT returns (PP.30), WHT records
- Your Accountant: Upon your authorization - to access tax reports and audit files
- Banks: For payment processing and escrow management
- Legal Advisors: Only if required by Thai law or court order
6. Data Retention
- Active Account: Data retained while account is active
- Tax Records: Minimum 5 years (Thai tax law requirement) after last transaction
- Agency Agreements: Permanent record with signature hash for audit trail
- Withholding Tax Certificates: 5 years minimum for Revenue Department compliance
- Account Deletion: Non-critical data deleted upon request (tax data retained per law)
7. Your PDPA Rights
Under Thailand's Personal Data Protection Act, you have the right to:
- Access: Request a copy of your personal data
- Correction: Correct inaccurate or incomplete data
- Deletion: Request deletion of data (except legally required records)
- Objection: Opt-out of marketing communications
- Restrict Processing: Limit how we use your data
- Data Portability: Receive your data in a portable format
To exercise these rights, email hello@mykargo.app with your request and we will respond within 30 days.
8. Security Measures
- Encrypted data transmission (SSL/TLS) for all connections
- Encrypted storage for sensitive data (bank accounts, tax IDs)
- Digital signatures and hash verification for agency agreements
- Access controls and role-based permissions
- Regular security audits and penetration testing
- Incident response procedures compliant with PDPA
9. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use tracking cookies without your explicit consent. You can disable cookies in your browser settings, but this may affect platform functionality.
10. Data Breach Notification
In the event of a data breach involving personal data, we will notify affected users and the Personal Data Protection Committee within 72 hours, as required by Thai law. We maintain cyber insurance to cover potential breach costs.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of material changes via email or prominent notice on our platform. Your continued use of Kargo after such changes constitutes acceptance.
12. Contact Us
Thai Nexus Point Co., Ltd. (Kargo)
Hua Hin, Thailand
Tax ID: 0775567004498
Email: hello@mykargo.app
Response time: Within 30 days of inquiry
13. Thai Law Compliance
This Privacy Policy is governed by Thai law, specifically the Personal Data Protection Act (B.E. 2562) and the Revenue Code. Any disputes arising from this policy shall be resolved in Thai courts under Thai jurisdiction.
By using Kargo, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree, please discontinue use of the platform.