Privacy Policy

1. Introduction

Ride the Wave (ตารางผ่อนรถ), accessible at rate.ride-the-wave.app, is a motorcycle financing calculator and price comparison tool for Honda and Yamaha models in Thailand. This Privacy Policy describes how we collect, use, and protect information when you use our service.

2. Information We Collect

We are committed to minimal data collection. Here is what we collect:

2.1 Information You Provide

• Loan calculation inputs: Price, down payment, and installment period selections. These are processed entirely in your browser and are not sent to our servers.

2.2 Google Account Data (Admin Only)

Our application uses Google OAuth to authorize read-only access to Google Sheets for administrative purposes only (inventory/stock data synchronization). This feature is restricted to site administrators and is not available to general users.

• Scope requested: spreadsheets.readonly — read-only access to Google Sheets.
• We only read spreadsheet data to sync motorcycle stock information. We do not modify, delete, or share your Google Sheets data.
• OAuth access tokens and refresh tokens are stored securely in our database and are used solely for the stock synchronization feature.
• We do not access your email, profile information, contacts, or any other Google account data beyond the authorized spreadsheet.

2.3 Automatically Collected Data

• Local storage: We use IndexedDB (browser-side storage) to cache motorcycle data for offline access and faster loading. This data stays on your device.
• Server logs: Standard web server logs (IP address, browser type, pages visited) may be collected by our hosting provider (Cloudflare) for operational purposes.

3. How We Use Information

• To display motorcycle pricing and financing information
• To calculate loan installments based on your inputs
• To synchronize inventory data from Google Sheets (admin only)
• To cache data locally for offline access
• To maintain and improve the service

4. Data Sharing

We do not sell, trade, or transfer your personal information to third parties. We do not use your data for advertising. Data may be shared only in the following circumstances:

• Hosting provider: Our service is hosted on Cloudflare Workers. Cloudflare may process standard request data as described in their privacy policy.
• Legal requirements: We may disclose information if required by law.

5. Data Retention

• Browser data: Cached motorcycle data in IndexedDB remains on your device until you clear your browser data.
• OAuth tokens: Google OAuth tokens are stored in our database and can be revoked at any time through your Google Account permissions.

6. Data Security

We implement appropriate security measures including HTTPS encryption, secure token storage, and minimal data collection practices. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Clear locally cached data by clearing your browser storage
• Revoke Google OAuth access at any time via your Google Account settings
• Request information about any data we may hold about you
• Request deletion of any stored data

8. Third-Party Services

• Google APIs: Our use of Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Cloudflare: Hosting and CDN services subject to Cloudflare's Privacy Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at locked-me-in@googlegroups.com.