EN
Log inGet started for free

Privacy Policy

Privacy Policy

We always pay attention to global privacy protection trends and ensure full compliance with various privacy regulations. At Thordata, your personal data will be processed fairly and lawfully. This Privacy Policy details the purpose and specific terms of our processing of your personal data, aiming to provide you with transparent and clear information.

By using this website thordata.com (the "System"), you agree to the Privacy Policy, which may be updated without prior notice, and your continued use of the Services after any such changes will be deemed to be your agreement to the revised Privacy Policy. If you have any questions about this policy, or you have any requests regarding the processing of your personal data, you can contact us at privacy@thordata.com.

Data collection and processing

When you register and use self-service features, we collect the following types of data from you ("User Data"):

1.1 Personal information. When you use our self-service features, we may collect and process the following personal information: name, email address, contact information such as your Phone number, device information, address, company name, industry, credit card information (credit card number last four digits), your account credentials (username, encrypted password), usage data (e.g. access logs, activity history, preferences).
In the case of self-service functions, the processing of personal data is necessary for the provision of the requested service and the performance of the contractual obligations between you and Thordata, on your behalf with our payment service provider in connection with a specific transaction (for example, subscription payment or Unscheduled top-up) initiates a payment or series of payments.

1.2 Social media information. Based on our legitimate interests in market visibility, we may use social media features to make it easier for you to share information. Please note that these social media widgets may collect some information, such as IP address, even if you are not a member of that specific social media platform. In addition, when you register or log in to the service through your social network account (such as Facebook, Google), we will have access to the basic information of your social network account, such as your account name, home address, email address, date of birth, Avatar, friend list, personal description, and any other information you publicly provide on the account or agree to share with us.

1.3 Children's Information. We do not knowingly collect personal information from children under the age of 13, or any other age that requires the consent or authorization of the holder of parental responsibility for data processing. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we discover that we have collected a child's personal data without the necessary parental consent, we will take steps to delete that information from our servers.

1.4 We may also collect publicly available personal data from a variety of online sources. In most cases, this information will include basic contact information such as name, email, and title ("Public Data")

Data processing when you contact us

You can contact us by sending an email to our professional email, sending us a request via live chat platform or social media.

Your data will be processed based on the legal basis of your consent, which consent is given to us by proactive motion (contacting us is considered an affirmative act of explicit consent to the processing of your personal data).

We may also process personal data for the performance of contracts and based on our legitimate interests to ensure that our customers are creditworthy and solvent.

Data processing when we contact you

Thordata may use your personal data to inform you about our services. Thordata may use the email address you voluntarily provide when filling out the waitlist form to notify you of Thordata's latest events and new products. We use your consent as the legal basis for providing you with information about newly developed and exclusive products.

If applicable law permits us to contact you without separate consent, we will contact you based on the legal basis of our legitimate interests to provide you with our services.

Please make sure you can unsubscribe at any time by clicking the unsubscribe button in our emails or by contacting privacy@thordata.com. Contact us to opt-out of any marketing-related communications we send you.

Legal basis for processing

Our legal basis for processing personal data is the performance of a contract (Art. 6 (1) (b) GDPR). We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. If you would like to delete or modify your personal information, you may contact us directly.

We may save your payment method data so that it can be displayed to you during the checkout process for your future use. In this regard, we rely on your consent as the legal basis for the processing of these personal data (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before the withdrawal.

Your data will only be used for the purposes stated above and will not be shared with third parties outside our organization unless required by law. We may engage third-party service providers (such as Google's Google Meet tool) to assist with interviews. When sharing data with third-party service providers, we ensure compliance with data protection requirements, including compliance with EU-approved data transfer mechanisms such as standard contractual clauses.

Internet cookies

Thordata may use a feature of your Internet browser called a "cookie" to assign a unique identifier to your computer to maintain session state. These short-term cookies are not written to your hard drive and are deleted when you close your browser. This means that not only does your web activity remain private, but your hard drive doesn't run out of memory. Our customizable user preferences feature uses a single cookie, which is stored on your local hard drive. This cookie is used for user-customizable privacy options. Thordata does not and will not use cookies to retrieve personal information about you.

Data disclosure

We may share your data with the following third parties: CRM software providers, business development service providers, email and email tracking service providers, online live chat service providers, customer support service providers, web hosting companies, Data analysis service providers, payment service companies and other service providers. In all cases, your data will only be disclosed to the extent necessary to provide the service. If you interact directly with one of our service providers, please refer to the respective provider's terms and privacy policy to learn what personal information it collects and stores.

We may disclose personal data to state, government, law enforcement agencies, courts and regulators where required to do so by law, such as to support an investigation or to respond to official requests, including subpoenas. Such disclosure may be necessary to comply with legal obligations and lawful law enforcement requests, or to protect our rights and interests and the safety of our company, employees, customers or the public.

Your personal information may be transferred to and maintained on computers located outside of your state, country or other governmental jurisdiction where the data protection laws may differ than the data protection laws in your jurisdiction. Please be assured that we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Appendix: List of Third-Party Service Providers

To ensure the proper functioning of our product, maintain the security and stability of our services, and process your payment transactions, we have integrated the following third-party service providers. These providers fall into two categories: cloud and security infrastructure providers, and payment service providers. We provide personal information to them only to the extent necessary to deliver the relevant functions. The provision of personal information to certain providers may involve the cross-border transfer of personal information. Where such provision legally constitutes the provision of personal information to another personal information processor or the provision of personal information overseas, we will, in accordance with the requirements of the General Data Protection Regulation (GDPR) and applicable laws and regulations, inform you of the recipient's name, contact information, processing purpose, processing method, categories of personal information, and the means by which you may exercise your personal information rights. We will also require the recipient, through contractual arrangements and other means, to adopt necessary security measures and to process your personal information to a standard no lower than that set out in this policy, and we will obtain your separate consent where required by law.

The third-party service providers listed above may change due to adjustments in service vendors, system version updates, or changes in compliance requirements. We will update or notify you promptly through this policy, this list of third-party service providers, in-product notices, or other prominent means. Through the contact information set out in this policy, you may inquire with us about each provider's official website, privacy policy, contact information, and personal information processing rules, and exercise your personal information rights, including the rights to access, copy, correct, and delete.

This list was last updated in June 2026 and may be updated as services change. Through the contact information set out in this policy, you may inquire with us about the latest version and the most current privacy policies of each third-party service provider.

Cloud and Security Infrastructure Providers

Service NameProviderCategories of Personal Information CollectedPurpose of ProcessingMethod of ProcessingRetention PeriodPrivacy Policy Link
CloudflareCloudflare, Inc. (United States)Device information (IP address, browser type, operating system), access request logs (access time, URL, request headers), and network traffic characteristicsContent delivery acceleration (CDN), DDoS protection, Web Application Firewall (WAF), and other network security protection and traffic optimizationProcessed and transmitted through global edge nodes, with Cloudflare acting as an entrusted processor; involves cross-border data transferSecurity and access logs are retained for the period specified in Cloudflare's privacy policyhttps://www.cloudflare.com/privacypolicy/
Google reCAPTCHAGoogle LLC (United States)Device information (IP address, browser and operating system information), mouse and keyboard interaction behavior, cookies, and information about the pages visitedHuman verification and prevention of bot abuse, safeguarding the security of registration, login, form submission, and similar processesTransmitted via JS/SDK calls, with Google acting as an entrusted processor; involves cross-border data transferRetained for the period specified in Google's privacy policyhttps://policies.google.com/privacy
SumsubSum and Substance Ltd. (United Kingdom)Identity document information (document photo, document number, name, date of birth, nationality), facial biometric information, selfie photos, and device and IP informationIdentity verification (KYC), liveness detection, and anti-fraud and anti-money-laundering (AML) complianceTransmitted via API/SDK calls, with Sumsub acting as an entrusted processor; involves cross-border data transferRetained for the compliance period specified by applicable law and Sumsub's privacy policyhttps://sumsub.com/privacy-notice-service/
CookiebotUsercentrics A/S (Denmark)Device information (IP address, typically anonymized), cookie identifiers, cookie consent preference records, and information about the pages visitedCookie consent management, lawfully recording and managing your cookie authorization preferencesTransmitted via JS/SDK calls, with Usercentrics acting as an entrusted processor; involves cross-border data transferCookie consent records are retained for the period specified in Cookiebot's privacy policyhttps://www.cookiebot.com/en/privacy-policy/
Tencent CloudTencent Cloud Computing (Beijing) Co., Ltd.Account information, uploaded files/images, service operation logs, and device information (IP address, operating system, browser type)Cloud storage, cloud computing, content hosting, and logging and operationsEncrypted storage and transmission, with Tencent Cloud acting as an entrusted processorRetained for the duration of the account; after account deregistration, deleted or anonymized within the period required by laws and regulationshttps://privacy.qq.com/
Volcengine (Volcano Cloud)Beijing Volcano Engine Technology Co., Ltd.Account information, uploaded files/images, service operation logs, and device information (IP address, operating system, browser type)Cloud storage, cloud computing, content delivery, and logging and operationsEncrypted storage and transmission, with Volcengine acting as an entrusted processorRetained for the duration of the account; after account deregistration, deleted or anonymized within the period required by laws and regulationshttps://www.volcengine.com/product/trust

Payment Service Providers

Service NameProviderCategories of Personal Information CollectedPurpose of ProcessingMethod of ProcessingRetention PeriodPrivacy Policy Link
AlipayAlipay (China) Network Technology Co., Ltd.Payment order information, transaction amount, transaction time, payment status, and necessary account identification informationProcessing payments, refunds, and transaction reconciliationTransmitted via API calls; Alipay acts as an independent personal information processor, lawfully processing payment information and fulfilling regulatory obligations such as anti-money-launderingTransaction records are retained for the statutory period required by financial regulationshttps://render.alipay.com/p/c/k2cx0tg8
WeChat PayTenpay Payment Technology Co., Ltd.Payment order information, transaction amount, transaction time, payment status, and necessary account identification informationProcessing payments, refunds, and transaction reconciliationTransmitted via API calls; Tenpay acts as an independent personal information processor, lawfully processing payment information and fulfilling regulatory obligations such as anti-money-launderingTransaction records are retained for the statutory period required by financial regulationshttps://www.tenpay.com/v3/helpcenter/low/privacy.shtml
OnlyPayONLYPAY (HONG KONG) LIMITEDPayment order information, transaction amount, transaction time, payment status, and necessary account/card identification informationProcessing cross-border/online payments, refunds, and transaction reconciliationTransmitted via API calls; OnlyPay, as the payment service provider, lawfully processes payment information and fulfills compliance obligations; may involve cross-border data transferTransaction records are retained for the statutory period required by applicable financial regulationshttps://www.onlypayhk.com/Termsofuse/
PayPalPayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) / PayPal, Inc. (United States)Payment order information, transaction amount, transaction time, payment status, and necessary identification information such as the payer's account/emailProcessing cross-border/online payments, refunds, and transaction reconciliationTransmitted via API calls; PayPal acts as an independent data controller, lawfully processing payment information; involves cross-border data transferTransaction records are retained for the statutory period required by applicable financial regulationshttps://www.paypal.com/myaccount/privacy/privacyhub
PayerMaxPayerMax (operating entity as specified in the service agreement; Singapore)Payment order information, transaction amount, transaction time, payment status, and necessary account/card identification informationProcessing cross-border/online payments, refunds, and transaction reconciliationTransmitted via API calls; PayerMax, as the payment service provider, lawfully processes payment information and fulfills compliance obligations; involves cross-border data transferTransaction records are retained for the statutory period required by applicable financial regulationshttps://www.payermax.com/about/terms/PrivacyPolicy
Antom (Ant International payments)Ant International and its related licensed operating entities (Singapore, etc.)Payment order information, transaction amount, transaction time, payment status, and necessary account/card identification informationProcessing cross-border/online payments, acquiring, refunds, and transaction reconciliationTransmitted via API calls; Antom, as the payment service provider, lawfully processes payment information and fulfills compliance obligations; involves cross-border data transferTransaction records are retained for the statutory period required by applicable financial regulationshttps://docs.antom.com/ac/Platform/vjv-xgpv

Contact us

If you feel that your privacy has not been handled in accordance with our Privacy Policy, or if you believe that your privacy has been disclosed by anyone while using the Services, please contact Thordata at: privacy@thordata.com. Our Privacy Officer should immediately respond Conduct an investigation.