Chaktomuk Terms & Privacy Policy

1.1 Purpose of CTM

CTM is a government application that supports administrative work and digital services, including:

• Messaging and communication
• Uploading and sharing media and documents
• Notifications and service updates
• Workflow/document coordination (where enabled)

1.2 Who may use CTM

CTM is for users authorized by MPTC and/or participating institutions (government staff, authorized users, and approved contractors). You must use CTM only for permitted purposes and within your assigned access rights.

1.3 Accounts and user responsibilities

You agree to:

• Provide accurate account information (email, user identifier, phone number when required)
• Keep your credentials secure and not share your account
• Immediately report suspected unauthorized access or security incidents
• Follow institutional rules and official instructions when using CTM

You are responsible for all actions taken through your account.

1.4 Service availability and changes

CTM may be updated, modified, suspended, or temporarily unavailable due to maintenance, security, or operational reasons. We may update this document when needed. Continued use of CTM after changes means you accept the updated version.

1.5 Suspension or termination

We may suspend or terminate access if:

• You violate this document or related policies
• Misuse or security risk is suspected
• Your authorization ends or your role is removed

2.1 Acceptable use rules

You must not:

• Access data you are not authorized to view
• Attempt to bypass security controls or monitoring
• Upload malware or harmful content
• Use CTM for personal, commercial, or non-official purposes
• Harass, threaten, impersonate, or misuse chat features
• Export or share CTM data outside authorized channels

2.2 Confidentiality and information handling

CTM may contain official and sensitive information. You must:

• Keep CTM information confidential and share only with authorized users
• Not share screenshots/documents/messages outside CTM without approval
• Follow your institution's document handling, classification, and retention rules

2.3 File and content rules

You are responsible for the content you upload or share. You must:

• Upload only content needed for official work
• Ensure you have permission to upload/share the content
• Avoid uploading sensitive content unless required and permitted

2.4 Logging, monitoring, and audit

CTM may keep logs of key actions (such as login events, message delivery status, file uploads, and administrative actions) for:

• Security and incident response
• Troubleshooting and service improvement
• Compliance and accountability

Access to logs is restricted to authorized personnel.

2.5 Incident reporting

Report immediately if you suspect:

• Unauthorized account access
• Phishing, malware, or unusual activity
• Lost or compromised devices used for CTM
• Data leakage or accidental sharing

3.1 Information we collect

CTM collects data to operate and improve services:

1. Personal information: Email address, user identifier (user ID), and phone number (when required by account creation or specific features).
2. Messages and communications: In-app chat messages are processed through NetEase IM to enable real-time communication.
3. Media and files: Photos, videos, audio recordings, and documents you choose to capture, upload, or share within CTM.
4. Device and usage information: Device identifiers (such as Android ID and device ID), app version, and technical information used to support messaging, notifications, security, and app functionality.
5. App performance data: Crash logs and diagnostic information to monitor performance, troubleshoot issues, and improve stability.

3.2 How we use your information

We use collected data to:

• Provide and operate CTM features (messaging, file/media sharing, notifications)
• Maintain, improve, secure, and troubleshoot CTM
• Improve app stability and performance
• Communicate with users about accounts, updates, and important service information

3.3 Data sharing and third-party services

We share limited data with trusted service providers only to support CTM functionality:

• NetEase IM – instant messaging services
• UniPush – push notification delivery

These providers process data on our behalf and must protect user data in line with applicable data protection standards. We do not sell personal data to third parties.

3.4 Prominent disclosure and consent (push notifications)

CTM uses push notification services (including UniPush) to deliver notifications and ensure reliability. In some cases, the push service/SDK may process device information and may also process Installed Applications information (list of installed apps) depending on SDK behavior and configuration.

To meet platform policy requirements:

• CTM will show an in-app prominent disclosure explaining what data is collected, why it is needed, and who receives it.
• CTM will request your affirmative consent (for example, tap "Agree") before any such collection/transmission begins.
• If you do not consent, push notifications may be unavailable.

3.5 Data security

We implement appropriate technical and organizational measures, including encryption, to protect user data during transmission and storage. Access is restricted to authorized personnel and approved service providers only.

3.6 Data retention

We retain user data only as long as needed to provide CTM services and support and to meet operational, audit, and compliance needs. Retention may vary by data type and institutional requirements.

3.7 User rights and choices

Users may:

• Access, update, or delete personal information (where CTM supports it)
• Manage permissions through device settings (for example, notification permissions)
• Request assistance regarding data protection matters