Privacy Policy

What we collect

We keep what the service actually needs, in three groups.

· Account details — your display name, email, and an encrypted password, plus a phone number and other contact handles if you enter them. If you sign in with LINE, LINE gives us your name, profile picture, email and LINE user ID — never your friends list or your LINE chats. If you sign in with Google, Google gives us only your name, profile picture and email.

· What you create and tell us — listings, photos, prices, locations, messages with other users, items you save, searches you set alerts for, and the interests you answer when you start (renting, buying, selling or letting · property types · budget · areas) It also includes AI apps you allow to connect to your account and what those apps do on your behalf.

· Usage — what you search for (area, type, price range and other filters) and which listings you open, contact or save, both signed in and signed out. When signed out, this is tied to a random ID for your browser, not your name or email

Three kinds of sensitive data exist, and only if you send them yourself: an ID card copy and a photo of you holding it, for identity verification, and a payment slip, to confirm a transfer. All of it sits in private storage that no public page can reach, and every staff approval or rejection is recorded against the person who made it.

What other people can see

A listing you publish is public — everyone on the internet and every search engine can see it, including your display name and whichever contact channels you chose to put on that listing.

The email and phone number on your profile are not shown to other users unless you put them on a listing yourself.

If you delete a listing, a copy a search engine already stored may linger for a while. That part is outside our control.

What we use it for

To run the service — showing listings, sending confirmation and alert emails, matching listings to requirements you saved, tracking credits, and showing listing owners their view statistics (contractual necessity)

To recommend what fits you — we summarise your interests (area, property type, budget, rent or buy) from your answers, searches, views and saved items, and use them to recommend or order listings, projects and content on the site (legitimate interest, Section 24(5) of Thailand's PDPA). You can object to this use at any time

For marketing analysis and improving the service — looking at the overall picture, such as which areas are searched most and which price ranges are in demand, to improve the service and produce market-trend reports. Anything we publish or share is aggregated and cannot identify you

We will only send you marketing offers or promotions by email or message if you have given consent first, and you can withdraw it at any time. Alerts you set up yourself, such as saved searches, are not marketing

To keep everyone safe — reviewing reported listings, suspending accounts that break the rules, and blocking abnormal sign-ups or sign-ins

We do not sell your personal data, and we do not share individual-level data with advertisers

The providers we rely on

The service runs on a small set of external providers: Supabase (database and files, Singapore), Vercel (the website, Singapore), and Resend (outgoing email, Tokyo), and Cloudflare Turnstile (checks that a real person is signing in, signing up or resetting a password — not used for tracking or ads). Your data is therefore stored and processed outside Thailand.

If you accept analytics cookies, we use Google Analytics (Google) and Microsoft Clarity (Microsoft) to see how pages and buttons are used, so we can improve the site. Clarity records scrolling and clicks on some pages, but never on chat, account, identity verification or payment pages. When you are signed in, we link this usage to your account ID (a random code, not your name, email or phone number) and account type, to understand how different groups use the site and to help when you report a problem. We do not send your name, email or phone number to these services. There is no Facebook Pixel and no advertising that follows you to other sites.

If you connect an AI app (such as Claude or ChatGPT) to Propmart, the data that app requests through the connection — search results, listing details, your own listings and the outcome of tasks you ask for — is sent to that app's provider, which handles it under its own policy. We do not send listers' phone numbers, LINE IDs or emails through this connection. When someone searches through the connection without signing in, we do not record who searched — only a short-lived, anonymised counter to prevent abuse.

Cookies

We only use our own cookies: a session cookie to remember that you are signed in, preferences such as language, and a random browser ID (kept for 1 year) used to count listing views and remember what you search for while signed out (only if you accept analytics cookies). This ID is not your name or email

There are no advertising or cross-site tracking cookies. You can block cookies in your browser, but then you cannot sign in.

How long we keep it

Account details and listings are kept while the account is in use.

A listing you delete or that expires is hidden immediately and permanently removed 30 days later — that window exists so it can be restored, and in case of a dispute.

Verification documents and payment evidence are kept for as long as your account exists. When you delete your account they are all removed with it. You can ask us to delete them sooner when nothing is outstanding.

Search and viewing history is kept for 90 days and then deleted automatically. The interests you answered are kept until you edit or delete them, or delete your account

Your rights

Under Thailand's Personal Data Protection Act (PDPA) you may ask to see your data, correct it, delete it, stop us using it, and withdraw consent you gave earlier.

Most of it you can change yourself on your profile, and you can delete a listing at any time. Under Account › Privacy you can agree or not to each use, delete your search and viewing history, and download a copy of your data. For anything you cannot do yourself, contact us using the details at the bottom of this page — we reply within 30 days.

Deleting your account removes your personal data, except what the law requires us to keep, such as payment records.

You can edit or delete your interests yourself on your account page (My interests), and stop us using your data for recommendations under Account › Privacy › Recommendations based on your interests.

You can disconnect an AI app at any time in Seller Centre › AI connections — it stops acting on your behalf immediately.

Security

Passwords are hashed one way — nobody on the team can read yours — and every connection is encrypted with HTTPS.

The database enforces row-level access, which means a request that is not yours cannot read your data even when it goes straight to the database.

No system is perfectly secure. If you find a vulnerability, contact us using the details at the bottom of this page — we want to hear about it, and we will not pursue anyone who reports one in good faith.

Changes and contact

If we make a material change we will update this page along with the date above.

The data controller for this site is Codable, the operator of Propmart.

To exercise any of your rights over your personal data, email legal@propmart.in.th. For other questions, email support@propmart.in.th — we will respond promptly.