Privacy Policy

What we collect

We keep what the service actually needs, in three groups.

· Account details — your display name, email, and an encrypted password, plus a phone number and other contact handles if you enter them.

· What you create — listings, photos, prices, locations, messages you exchange with other users, saved listings, and searches you set alerts on.

· Usage — which listings were viewed, contacted, or saved. This is what lets a seller see the performance of their own listing, and lets us see what is broken.

Three kinds of sensitive data exist, and only if you send them yourself: an ID card copy and a photo of you holding it, for identity verification, and a payment slip, to confirm a transfer. All of it sits in private storage that no public page can reach, and every staff approval or rejection is recorded against the person who made it.

What other people can see

A listing you publish is public — everyone on the internet and every search engine can see it, including your display name and whichever contact channels you chose to put on that listing.

The email and phone number on your profile are not shown to other users unless you put them on a listing yourself.

If you delete a listing, a copy a search engine already stored may linger for a while. That part is outside our control.

What we use it for

To run the service — showing listings, sending confirmation and notification emails, matching listings to requirements you saved, and counting credits.

To keep everyone safe — reviewing reported listings, suspending accounts that break the rules, and blocking abnormal sign-ups and sign-ins.

We do not sell your personal data, and we do not hand it to advertisers.

The providers we rely on

The service runs on a small set of external providers: Supabase (database and files, Singapore), Vercel (the website, Singapore), and Resend (outgoing email, Tokyo). Your data is therefore stored and processed outside Thailand.

There is no third-party tracking on this site at all — no Google Analytics, no Facebook Pixel, and no advertising that follows you to other sites.

Cookies

We use only the cookies the site needs to work: a session cookie so you stay signed in, and the preferences you pick, such as language.

There are no advertising or cross-site tracking cookies. You can block cookies in your browser, but then you cannot sign in.

How long we keep it

Account details and listings are kept while the account is in use.

A listing you delete or that expires is hidden immediately and permanently removed 30 days later — that window exists so it can be restored, and in case of a dispute.

Verification documents and payment evidence are kept as long as verification and later review require. You can ask us to delete them sooner when nothing is outstanding.

Your rights

Under Thailand's Personal Data Protection Act (PDPA) you may ask to see your data, correct it, delete it, stop us using it, and withdraw consent you gave earlier.

Most of it you can change yourself on your profile, and you can delete a listing at any time. For anything you cannot do yourself, contact us using the details at the bottom of this page and we will act promptly.

Deleting your account removes your personal data, except what the law requires us to keep, such as payment records.

Security

Passwords are hashed one way — nobody on the team can read yours — and every connection is encrypted with HTTPS.

The database enforces row-level access, which means a request that is not yours cannot read your data even when it goes straight to the database.

No system is perfectly secure. If you find a vulnerability, contact us using the details at the bottom of this page — we want to hear about it, and we will not pursue anyone who reports one in good faith.

Changes and contact

If we make a material change we will update this page along with the date above.

For questions, or to exercise any of your rights, reach us through the Contact page.