Connecting Google, Meta/Facebook, TikTok, LINE, or another third-party service authorises HostDrift to operate only within the permissions you grant, and your use also remains subject to the connected platform's own terms and policies.
Platform Data Terms for CRM, CDP, Quotation, POS, Inventory, and future services
HostDrift services may act as a central platform to receive, store, transmit, combine, analyse, display, and manage business data containing personal data. Customers retain rights in Customer Data they lawfully control and grant HostDrift a limited, non-exclusive right to host, store, copy, transmit, index, classify, match identities, transform, display, back up, secure, and otherwise process Customer Data as necessary to provide the service according to customer instructions/configuration.
This processing licence does not transfer ownership of Customer Data to HostDrift and ends when data is deleted/returned under the agreement, except for legally required records, security records, or backup cycles.
Customer duties as Data Controller
For Customer Data where the customer determines purpose and means, the customer represents and agrees that it will:
- Have a lawful basis and authority to collect, use, disclose, connect, combine, profile, segment, enrich, and provide data to HostDrift/sub-processors.
- Provide a privacy notice and consent/withdrawal/opt-out/unsubscribe mechanisms where required.
- Have authority to import data from existing CRM, spreadsheets, web forms, POS, LINE/Facebook, APIs, pixels, or other sources.
- Remain responsible for Data Subject Requests, retention, deletion, accuracy, and internal role/permission controls.
- Maintain ROPA, DPO/DPIA, or other compliance records where applicable to the customer's processing.
HostDrift is a technical tool and does not assume the customer's responsibility for collecting data without a lawful basis or using data beyond purposes disclosed by the customer.
Terms where HostDrift is Data Processor and use of a DPA
Where HostDrift acts as Data Processor and no more specific DPA applies, HostDrift will:
- Process Customer Data on documented instructions such as contract, configuration, API request, workflow, or lawful support instruction unless applicable law requires otherwise.
- Restrict access to personnel/contractors who need it and are subject to confidentiality obligations.
- Apply security measures appropriate to risk and deployment.
- Use sub-processors where necessary with appropriate data/confidentiality obligations.
- Reasonably assist the Controller with Data Subject Requests, incidents/breaches, DPIAs, and compliance information within the service/agreement.
- Delete or return Customer Data according to contract/retention requirements after termination unless law requires retention.
- Maintain processing records required of HostDrift as Processor.
Business customers placing large-scale production data, sensitive data, or high-risk data into HostDrift should complete an appropriate Data Processing Agreement (DPA), Security Schedule, and Sub-processor documentation before production use.
Sensitive data, minors, credentials, and high-risk data
- Do not upload passwords, card PINs, CVVs, online-banking passwords, OTPs, private keys, or secrets not required by a supported feature.
- Section 26 data such as health, biometrics, criminal records, beliefs, or other sensitive data may be used only where the service supports it and the customer has an appropriate lawful condition/safeguard.
- Do not use HostDrift to trade unlawfully obtained personal data, conduct rights-violating scraping, maintain unlawful spam lists, or perform discriminatory/unlawful profiling.
- Children/minor data requires appropriate guardian/consent mechanisms and legal safeguards for the context.
Specific terms for CDP, marketing, CCTV, Quotation/POS, and messaging
CDP / Profiling / Audience
The customer is responsible for ensuring that identity resolution, enrichment, profiling, segmentation, lookalike/audience activation, and automated marketing have an appropriate legal basis and privacy notice. The availability of a segmentation feature does not certify that a segment may lawfully be used for marketing in every case.
Marketing / Messaging
The customer is responsible for recipient lists, consent signals, suppression lists, unsubscribe/opt-out, and messages sent by staff/automation through Email, LINE, Facebook, SMS, or other channels.
CCTV
The party installing/controlling cameras is responsible for camera placement, signage/privacy notice, legal basis, retention, access control, and use of footage. Where HostDrift only relays/hosts footage, roles follow the agreed architecture/contract.
Quotation / POS / Payment
The customer is responsible for pricing, taxes, accounting records, bank/PromptPay details, refunds, and transaction accuracy. HostDrift may generate documents/workflows but is not a bank, deposit-taker, or tax/accounting auditor unless expressly agreed otherwise.
Compliance tools do not guarantee compliance
Consent, logs, permissions, retention, export/delete, audience controls, and security settings are designed to support Data Governance, but customer configuration, processes, and actual use remain critical. The software itself is not legal, tax, accounting, medical, or professional compliance advice and does not by itself certify compliance with PDPA, GDPR, PCI DSS, ISO, or another standard unless a specific written certification/agreement states otherwise.
Claims caused by Customer Data or customer instructions
For customers using the service in a business capacity and to the extent permitted by law, the customer is responsible for and will reasonably cooperate with HostDrift regarding third-party claims arising directly from Customer Data the customer had no right to use, missing privacy notice/consent/legal basis the customer was responsible to provide, unlawful instructions, rights-infringing content, or use in breach of these Terms. This does not apply to the extent a claim is caused by HostDrift's own breach, negligence, or wrongdoing.
Acceptance of these Terms
By accessing or using HostDrift services, you agree to these Terms, our Privacy Policy, and any additional terms presented for a particular feature or project. If you do not agree, do not use the relevant service.
Scope of services
HostDrift provides website and business-system development, web applications, workflows, dashboards, CRM/MarTech, automation, API integrations, content infrastructure, and other digital services, together with technology and selected investment/trading educational content.
Google, Facebook/Meta, TikTok, LINE and other API integrations
Some features allow you to connect external accounts through OAuth, login, APIs, webhooks, or tokens. You choose whether to grant access and should review the permissions displayed by the platform before authorising them.
- We use connected data and permissions only to provide or support the feature you request.
- Features may change or stop if a platform changes its API, rate limits, policies, app-review requirements, or service availability.
- You must have authority to connect the account, page, channel, workspace, or organisational resource you provide to the service.
- An integration does not imply HostDrift is an official agent or partner of Google, Meta, TikTok, or LINE unless expressly stated.
Acceptable use
You must not use the services for unlawful conduct, infringement, unauthorised access, malware, spam, phishing, prohibited scraping, excessive automated requests that violate API terms, attempts to bypass rate limits or security controls, or processing personal data beyond the permissions and lawful purpose available to you.
User data, content, and permissions
You retain ownership of data and content you lawfully control. You grant HostDrift the limited rights necessary to host, process, transmit, transform, or display that data to provide the agreed service. You represent that you have the necessary rights and lawful basis to provide that data to the service.
Privacy and data protection
HostDrift's processing of personal data is further described in our Privacy Policy. Client projects in which HostDrift acts as a processor may require a Data Processing Agreement (DPA) and project-specific security or processing terms.
Custom development projects
Scope, deliverables, timeline, fees, acceptance, support, hosting, maintenance, source code, intellectual property, and data-processing obligations for custom development are governed by the applicable proposal, quotation, statement of work, or project agreement. If a project agreement conflicts with these general Terms, the project agreement controls for that subject matter.
Intellectual property
HostDrift branding, site design, content, software, tools, and service components are owned by HostDrift or the relevant rights holder unless a written project agreement transfers specified rights to a client. Open-source software and third-party components remain subject to their applicable licences.
Third-party services and terms
Google, Meta/Facebook, TikTok, LINE, hosting, payment, analytics, and other integrations are third-party services governed by their own terms and policies. HostDrift cannot guarantee their availability, API stability, app-review approval, policy decisions, or continued operation.
Investment, trading, and EA content
Content concerning Forex, Gold, CFDs, digital assets, brokers, Expert Advisors, or trading strategies is provided for education and general information only. It is not financial or investment advice and is not a solicitation to buy, sell, or enter any transaction. Trading and investing involve risk, including possible loss of capital, and past performance does not guarantee future results.
Availability, changes, and beta features
We may update, suspend, or discontinue features for security, maintenance, provider changes, bug fixes, or legal/platform compliance. Beta or experimental features may contain errors, change, or be withdrawn without prior notice.
Warranties and limitation of liability
General services and information are provided on an “as available” basis. To the maximum extent permitted by law, HostDrift does not warrant uninterrupted or error-free operation and is not responsible for losses caused by third-party platforms, misuse, investment decisions, or events outside reasonable control. Nothing in these Terms excludes liability that cannot lawfully be excluded.
Suspension, termination, and disconnection
You may stop using a service and disconnect integrations where supported. HostDrift may suspend or terminate access for material breach, security risk, non-payment under an applicable agreement, or where required by law or platform policy. Data deletion and retention after termination are governed by the Privacy Policy and any applicable project agreement.
Governing law, changes, and contact
These Terms are governed by the laws of Thailand unless a project-specific agreement provides otherwise. We may update them as services, law, or platform requirements change, and the latest revision date will be shown above. Questions may be submitted through the HostDrift Contact form.