1. What Svibe is, and who is responsible for your data
Svibe is a workplace system for a company's employees (leave, approvals, timesheet, work items, forms, announcements, payslips), provided by GIPSIC Corporation Limited ("GIPSIC").
- Your employer is the data controller: it creates your account, decides who can see what, and brings in payroll data.
- GIPSIC is the data processor: it runs, stores and backs up the system on your employer's behalf. For GIPSIC's own staff, GIPSIC is both employer and provider.
There is no public sign-up. Every account is created by an employer.
2. Data we process
| Category | Examples | Source |
|---|---|---|
| Account and contact | Name, work email, phone, profile photo, personal email | Employer / you |
| Employment | Department, position, manager, start date, employment type | Employer |
| Personal | National ID, nationality, date of birth, gender, address, emergency contact | Employer / you |
| Pay and tax | Payslips, withholding-tax certificates, base salary, bank account for pay, social security | Employer (from its payroll software) |
| Your activity | Leave requests, approvals, time entries, work items, comments, forms and attachments, announcement acknowledgements | You / colleagues |
| Security | Sign-in history, devices, IP address, audit log, passkeys (public key only) | System |
| Notifications | Device push token | App |
| Usage analytics | Screens opened and buttons tapped (via Amplitude), not the content you enter | App and web |
| Location (GPS) | Your current position, used only in the car parks feature and only if you allow it | Your device |
The app uses the camera or photo library only when you choose to attach a photo or file.
2.1 What location is used for
Location is used by the car parks feature and nowhere else in Svibe. The feature is optional: if you do not grant location access, the rest of the app works exactly as before, and you can withdraw the permission at any time in your device settings.
- While you are using the app, when you tap “I have parked”, the app reads your current position to suggest car parks near you.
- In the background, if you turn on the reminder for a car park you saved, the app watches for your arrival there. That check runs on your device; your position is not sent anywhere for it.
What leaves your device, and what does not
- Leaves: a coarse area code used to ask which car parks are around there, and — only when you add or correct a car park yourself — that car park's coordinates, with its name and parking rules. Car park records are shared data across every company on Svibe, so that the next person does not have to enter them again.
- Does not leave: where you parked, since when, your saved car parks and your reminder settings. These stay on your device; there is no endpoint to send them to, because the car parks a person uses regularly are that person's movements.
- We keep no location history, do not track you continuously, and never use location for advertising or pass it to anyone else.
3. Why we use it
- To provide the service your employer uses Svibe for, and to let you see your own payslips.
- To send notifications, such as a request waiting for your approval or a new announcement.
- To keep the system secure and keep the audit trail your employer's ISO 9001 system needs.
- To improve the product from aggregated usage statistics.
Svibe does not sell data, show ads, or track you across other apps or websites.
4. Who can see your data
- Colleagues in the same company see your name, photo, position, department, work email, phone and the org chart.
- Personal data is visible only to you, HR and payroll staff your employer authorises.
- Pay and tax data is visible only to you and payroll staff; every view of someone else's pay data is logged.
- Managers and approvers see the requests that concern them.
- Each company's data is separated; other companies using Svibe cannot see yours.
- Service providers GIPSIC uses: Amazon Web Services (file storage, Bangkok region), Expo / Apple / Google (push delivery), Resend (sign-in code emails), Amplitude (usage analytics). Each receives only what its task needs.
5. Where it is stored and how it is protected
- The database runs on servers operated by GIPSIC in Thailand. Files (payslips, documents, photos) are stored in Amazon S3, Bangkok region, encrypted at rest.
- All traffic uses HTTPS. Backups are encrypted again before they are stored.
- Files are opened through short-lived links issued after a permission check every time.
6. How long we keep it
- While you are employed, and afterwards as your employer's policy and the law require (for example payroll and tax records).
- After you leave, you can still see your own payslips and tax certificates for 6 months using your personal email.
- Backups are kept for up to 12 months and then deleted automatically.
7. Your rights and deleting your data
Under Thailand's Personal Data Protection Act B.E. 2562 you may ask to access, copy, correct, delete, restrict or port your data, or object to its use.
- To delete your account or data: contact your company's HR, since your employer creates and manages the account, or email [email protected] and GIPSIC will coordinate with your employer.
- Some records may have to be kept where the law or a quality standard requires it (payroll, tax and quality-form records); the rest is deleted or anonymised.
- You can update your phone, address, emergency contact and personal email yourself on your profile.
8. Contact
GIPSIC Corporation Limited
139 The Street Ratchada, 3rd floor, rooms 301-304, Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand
Email [email protected]
9. Changes
If we make a significant change, we will tell you in the app or through your employer before it takes effect, and update the date above.