calmvisa
Privacy Policy
Last updated: 4 November 2026
EXK Software LLC ("calmvisa", "we") operates calmvisa.com. This policy explains what we collect, where it goes and how long it is kept.
What we collect
- Your answers: what the Thailand Digital Arrival Card asks for: your name, gender, nationality, date of birth, passport number, occupation, country and city of residence, phone number, arrival date and flight or vehicle number, the country you board in, the purpose of your trip, where you will stay, and, only when Thailand asks for it, a short health declaration.
- Your email address: Thailand sends your card to it, and we use it only for questions about your order.
- Photos you choose to scan: if you use the photo shortcut, the photo of your passport, boarding pass or booking.
- Payment: handled by Paddle. We never see your card details. Paddle tells us whether the payment went through.
- Technical data: basic information your browser sends, such as your IP address and the pages requested, which our hosting and network providers process to keep the site working and safe.
Where it goes
- The official Thai TDAC website: our automation types your answers into the Thai Immigration Bureau's arrival card form to submit it for you.
- Paddle: Paddle.com is our Merchant of Record. It processes your payment under its own privacy policy.
- An AI service provider, only if you use the photo shortcut: photos you scan are read by an AI service to fill in the fields. We don't keep them, or what the AI sends back; we only fill in the form with it.
- Cloudflare: our network and security provider, which carries traffic to the site.
We do not sell your information, and we do not share it for advertising.
How long it is kept
We keep your answers encrypted on our server until we submit your card (at the latest until shortly after your arrival date), then delete them. Your card number and PDF stay on your status page for 30 days. If you stop part way, your answers are deleted 24 hours after your last change. Photos are read and discarded during the same request. After that we keep only a record without your personal details (a reference, its status and the payment's reference). Paddle keeps payment records as its rules and the law require.
Cookies
We use one functional cookie, cv_s, which links your application to this browser so you can come back to it and see its status. It is HttpOnly, expires after 7 months and is not used for tracking. We use no analytics or advertising cookies. Your browser also keeps a temporary copy of what you type on the current screen in this tab only, cleared when you pay or close the tab.
Your rights
You can ask what we hold about you, or ask us to delete it, by emailing [email protected]. Because we delete your answers once your card is submitted, and your card number and PDF 30 days later, we usually hold nothing beyond a record of your payment. We reply within 30 days.
Children
A parent or guardian should fill in the form for travellers under 18.
Changes
We may update this policy. The date above shows the latest version.
Contact
EXK Software LLC, 30 N Gould St. Ste R, Sheridan, WY 82801, United States. [email protected]