Boom LeverageTerminal

Privacy

Privacy Policy

Last updated: 10 October 2026

This English translation is provided for convenience. In the event of any conflict, the Thai version shall prevail and be legally binding. Read the binding Thai version

This policy explains how I collect, use and protect your personal data when you use boomleverage.com, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

1. Data controller

This website (boomleverage.com) is operated by me, Varanchai Yingkhamnueng (วรัญชัย ยิ่งคำนึง). For any question about personal data, contact contact@boomleverage.com.

2. Data I collect

Data you give me directly

  • Email address — when you join a waitlist, or register and sign in to an account.
  • Proof of payment — for example a PromptPay transfer slip. For card payments, processing is handled directly by Stripe and I do not store your card number.

Data collected automatically

  • Usage and device data — pages visited, time spent, browser type and referral source — through analytics tooling.

3. Purposes and lawful bases

  • Providing the tools and your account — performance of a contract.
  • Sending product news and updates (waitlist) — consent, which you may withdraw at any time.
  • Processing payments and confirming entitlements — performance of a contract.
  • Improving the site and its content — legitimate interest.
  • Meeting legal obligations — for example retaining accounting and tax records.

4. Disclosure and third-party processors

I do not sell your personal data. I use third-party providers only as far as necessary to run the website and the service; they act as data processors on my instructions:

  • Supabase — database, accounts and authentication
  • Vercel — website hosting and traffic statistics
  • Resend — transactional email, such as sign-in links
  • PostHog — website usage analytics
  • Stripe — card payment processing (I do not store your card number)
  • AI model provider— when you use the “Boom Leverage AI” summary or chat in the Terminal, the question you type and the filing passages it is answered from are sent to an external large-language-model provider to generate the answer. The provider receives the text of the request only — not your name, email or account identifiers — and is contractually restricted from using it to train models. The feature requires sign-in and can be switched off per account.

Some providers operate servers outside Thailand, so storing data may involve a transfer abroad. I select providers that maintain appropriate data-protection safeguards.

5. Cookies and analytics

I use two categories of cookie:

  • Strictly necessary cookies — needed for sign-in and security to function (for example your session). These are essential to using the site and therefore run without consent.
  • Analytics cookies — I use PostHog to understand traffic in aggregate and improve the content. These run only if you press “Accept” in the cookie banner. If you decline, no analytics tooling is loaded and no such cookie is set.

Basic traffic statistics from Vercel are cookieless. You can change or withdraw consent at any time through the “Cookie settings” link in the footer of every page, or by clearing cookies in your browser settings.

6. Retention

I keep data only as long as needed for the purposes above. Waitlist data, for example, is held until you withdraw consent or ask for deletion, while order records are kept for the period required by accounting and tax law.

AI chat history is kept for 90 days from your last message in a conversation and is then deleted automatically. You can delete a conversation yourself at any time from the Terminal. Only a monthly count of the tokens the feature used on your account is kept beyond that, for quota and billing purposes.

7. Your rights as a data subject

Under the PDPA you have the right to access and obtain a copy of your data, to have it corrected, to have it erased or destroyed, to restrict its use, to object to processing, to data portability, and to withdraw consent at any time.

To exercise any of these rights, contact contact@boomleverage.com. If you believe I have processed your data unlawfully, you have the right to complain to the Personal Data Protection Committee (PDPC).

8. Data security

I apply reasonable technical and organisational measures to protect your data. No system is perfectly secure, however, so I cannot guarantee security absolutely.

9. Changes to this policy

I may update this policy from time to time, revising the date shown at the top of the page. Continued use of the website means you acknowledge the current version.

10. Contact

Questions about this Privacy Policy, or to exercise your rights, contact contact@boomleverage.com.