Terms and Conditions

Effective Date: April 7, 2026 Last Updated: April 7, 2026

1. Introduction

Welcome to BrandBox Platform (“Platform”), a marketing analytics dashboard operated by BrandStromX Co., Ltd. (“Company”, “we”, “us”, or “our”), a company registered under the laws of the Kingdom of Thailand.

By accessing or using the Platform at https://brandstromx.co.th/, you (“User”, “you”) agree to be bound by these Terms and Conditions (“Terms”). If you do not agree, please discontinue use of the Platform immediately.

For general information about our company, visit https://brandstromx.co.th/.

2. Definitions

• Platform means the BrandBox Platform web application accessible at https://brandstromx.co.th.
• User means any individual or entity that registers for or accesses the Platform.
• Personal Data has the meaning given under the Thailand Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
• Ad Account Data means advertising performance data retrieved from third-party platforms (Meta, Google Ads) via API integrations.
• Services means all features, tools, dashboards, and reporting capabilities provided through the Platform.

3. Eligibility and Account Registration

3.1 The Platform is intended for use by authorized business users only. You must be at least 20 years of age and have the legal authority to enter into these Terms on behalf of yourself or your organization.

3.2 Account access is granted by BrandStromX Co., Ltd. User self-registration may be available subject to Company approval. You are responsible for maintaining the confidentiality of your login credentials.

3.3 You agree to provide accurate, current, and complete information during registration and to update such information as necessary.

3.4 The Company reserves the right to suspend or terminate any account at its sole discretion, including accounts found to be in breach of these Terms.

4. Permitted Use

4.1 The Platform is licensed to you for internal business use only. You may use the Platform to view, analyze, and report on advertising campaign performance data connected to your authorized ad accounts.

4.2 You agree not to:

• Share account credentials with unauthorized individuals;
• Attempt to reverse engineer, decompile, or extract source code from the Platform;
• Use the Platform for any unlawful purpose or in violation of any applicable law or regulation;
• Introduce viruses, malicious code, or any technology that may harm the Platform;
• Access ad account data belonging to other Users without explicit authorization;
• Scrape, export, or redistribute Platform data for commercial resale without written consent from the Company.

5. Third-Party Integrations

5.1 The Platform integrates with third-party advertising platforms including Meta (Facebook/Instagram) and Google Ads via their respective APIs.

5.2 Your use of those integrations is also subject to the terms and policies of those third-party providers. The Company is not responsible for changes to, disruptions in, or termination of third-party APIs.

5.3 You warrant that you have the necessary rights and permissions to connect your ad accounts to the Platform and that doing so does not violate any third-party terms of service.

6. Data and Privacy (PDPA Compliance)

6.1 Data Controller

BrandStromX Co., Ltd. acts as the Data Controller under the PDPA for Personal Data collected through the Platform. Contact details for the Data Controller are provided in Section 13.

6.2 Personal Data We Collect

We may collect the following categories of Personal Data:

• Account Information: full name, email address, and role/position;
• Usage Data: login timestamps, pages visited, and feature interactions;
• Technical Data: IP address, browser type, device identifiers, and session tokens.

We do not collect sensitive personal data (as defined under Section 26 of the PDPA) through the Platform.

6.3 Purpose and Legal Basis for Processing

We process your Personal Data for the following purposes:

We will not process your Personal Data for purposes incompatible with those listed above without your prior consent.

6.4 Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes described herein, or as required by applicable Thai law. Account data is retained for the duration of your active account and for up to 3 years after account closure, unless a longer retention period is required by law.

6.5 Your Rights Under the PDPA

As a data subject, you have the following rights under the PDPA:

• Right to be informed about the collection and use of your Personal Data;
• Right of access to your Personal Data held by us;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure (“right to be forgotten”) in applicable circumstances;
• Right to restriction of processing in applicable circumstances;
• Right to data portability in a structured, machine-readable format;
• Right to object to processing based on legitimate interests;
• Right to withdraw consent at any time (where processing is based on consent), without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days of receiving your request, in accordance with the PDPA.

6.6 Disclosure of Personal Data

We do not sell your Personal Data. We may share your Personal Data with:

• Service providers acting as data processors on our behalf (e.g., Supabase for authentication and database services), bound by appropriate data processing agreements;
• Third-party API platforms (Meta, Google) to the extent required to operate integrations you have authorized;
• Competent authorities where required by Thai law or court order.

Any international transfer of Personal Data outside Thailand will be conducted in compliance with Section 28 of the PDPA, ensuring adequate protection standards are in place.

6.7 Cookies and Tracking

The Platform may use session cookies and local storage strictly necessary for authentication and user session management. No third-party advertising or tracking cookies are used within the Platform.

7. Ad Account and Campaign Data

7.1 Advertising performance data (spend, impressions, clicks, conversions, etc.) retrieved from your connected ad accounts is used solely to power your dashboard views and reports.

7.2 The Company does not use your campaign data for its own marketing purposes or share it with any third party without your consent, except as required to operate the Platform (e.g., API calls to Meta and Google).

7.3 Markup and billing configuration data entered into the Platform is stored securely and accessible only to authorized users of your account.

8. Intellectual Property

8.1 All content, software, design, trademarks, and materials on the Platform are the exclusive property of BrandStromX Co., Ltd. or its licensors and are protected under applicable Thai and international intellectual property laws.

8.2 These Terms do not grant you any ownership rights in the Platform. You are granted a limited, non-exclusive, non-transferable, revocable licence to use the Platform solely in accordance with these Terms.

9. Confidentiality

9.1 You acknowledge that data visible on the Platform, including campaign performance data, markup configurations, and project details, may be commercially sensitive. You agree to keep such information confidential and not to disclose it to unauthorized third parties.

10. Disclaimers and Limitation of Liability

10.1 The Platform is provided on an “as is” and “as available” basis. The Company makes no warranties, express or implied, regarding the accuracy, completeness, or uninterrupted availability of the Platform.

10.2 Advertising metrics displayed on the Platform are sourced from third-party APIs. The Company does not guarantee the accuracy of data provided by Meta, Google, or any other third-party source.

10.3 To the maximum extent permitted by Thai law, BrandStromX Co., Ltd. shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the Platform, including loss of revenue, loss of data, or business interruption.

10.4 The Company’s total aggregate liability for any claim arising under these Terms shall not exceed the total fees paid by you to the Company in the 3 months preceding the event giving rise to the claim, or THB 10,000, whichever is greater.

11. Indemnification

You agree to indemnify, defend, and hold harmless BrandStromX Co., Ltd. and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses arising from: (a) your breach of these Terms; (b) your violation of any applicable law; or (c) your misuse of the Platform or third-party ad account data.

12. Amendments

The Company reserves the right to amend these Terms at any time. Updated Terms will be posted on the Platform with a revised effective date. Where changes are material, we will notify you via the email address registered to your account. Continued use of the Platform after the effective date of updated Terms constitutes your acceptance of those changes.

13. Governing Law and Dispute Resolution

13.1 These Terms are governed by and construed in accordance with the laws of the Kingdom of Thailand.

13.2 Any dispute arising out of or in connection with these Terms shall first be attempted to be resolved through good-faith negotiation between the parties. If unresolved within 30 days, the dispute shall be submitted to the exclusive jurisdiction of the Thai courts.

14. Contact Information

For questions about these Terms, to exercise your PDPA rights, or to contact our Data Protection Officer (DPO):

BrandStromX Co., Ltd. Website: https://brandstromx.co.th/ 

Please include “PDPA Request” or “Terms Inquiry” in the subject line of your communication.