Privacy Policy

1. Data we collect

• Account data: email, password hash, registration date, and an internal identifier. We do not store the plain-text password.
• Google sign-in data: verified email and a technical Google account identifier. ThaiDwell requests only openid, email, and profile scopes and never receives your Google password.
• Owner listing data: name, contacts, property details, price, terms, links, and other fields submitted by the user.
• Public-source data: post text, author name or identifier, published contacts, source link, date, and property details.
• Technical data: IP address and request logs, browser and device details, interface language, session identifiers, listing views, and diagnostic events.
• Analytics: Google Analytics may collect session statistics, approximate location, browser and device information, visited pages, and an identifier in the _ga cookie.

2. How we use data

• Register and secure accounts and provide sign-in and account features.
• Publish listings and provide search, filters, deduplication, and contact options.
• Structure public offers, including through automated models, and review output quality.
• Count views, understand service use, fix errors, and prevent abuse.
• Respond to requests, review complaints, meet legal duties, and protect users and the service.

3. Legal bases

Depending on the context, we process data to perform our agreement with you, with consent, to meet legal obligations, and for legitimate interests in operating and protecting the service. Where applicable law requires consent for analytics cookies, consent must be obtained before they are used.

4. Public listings

Published listings, names, and selected contact details are available without sign-in. Do not submit information you do not want made public.

Draft and unpublished listings are not shown on public profiles. Internal owner statistics, including views and contact reveals, are not displayed publicly.

5. Cookies and similar technology

• thaidwell_token is an essential protected cookie used for authentication for the duration of a session.
• thaidwell_lang remembers the selected interface language.
• thaidwell_view_session prevents repeated views from the same browser being counted more than once.
• thaidwell_cookie_consent stores your analytics-cookie choice for one year.
• Temporary Google OAuth cookies secure sign-in and are removed after completion or expire after about ten minutes.
• Google Analytics uses analytics cookies, including _ga, only after you consent. You can change your choice using the “Cookie settings” button on any page.

6. Recipients

We do not sell personal data. Only providers needed to operate the service receive data within their role:

• hosting, database, infrastructure, and technical-support providers;
• Google, for Google sign-in and web analytics;
• OpenAI, to extract structured information from listings collected from public sources; account data and passwords are not sent for this purpose;
• public authorities or other parties when required by law, security, or the protection of rights.

7. External links and international transfers

The site links to Telegram, Facebook, Google Maps, WhatsApp, LINE, and other services. Their own privacy terms govern their processing.

Some providers may process data outside the user’s country. We use available contractual and technical safeguards where required by applicable law.

8. Retention

Account data is kept while the account is used and afterwards as needed for disputes, security, and legal compliance. Listings remain until removed or unpublished, while backups may remain for a limited period.

Technical logs, statistics, and public-source information are retained only as long as reasonably needed for these purposes. Provider retention periods, including Google Analytics, depend on the relevant service settings.

9. Security

We use access controls, password hashing, protected cookies, HTTPS, and other reasonable organisational and technical measures. No storage or transmission method can guarantee absolute security.

10. Your rights

Depending on applicable law, including Thailand’s Personal Data Protection Act (PDPA), you may request access, correction, deletion, restriction, portability, withdrawal of consent, or object to processing. You may also complain to the competent supervisory authority.

• Send requests to privacy@thaidwell.com from the account email or include enough information to identify the relevant listing.
• We may verify your identity and may decline part of a request where processing or retention is legally required or necessary to protect another person’s rights.

11. Children

The service is not intended for anyone under 18. If you believe a child has provided data, contact us so it can be reviewed and removed.

12. Updates and contact

We may update this Policy and will publish the revision date on this page. For privacy and deletion requests, email privacy@thaidwell.com.