Privacy policy

1. Who processes the data

The data is processed by the Thai Board team ("we", the "Controller"). The team works in Thailand. For any question about your data, contact us at [email protected].

The service database and uploaded files are stored on a server in Germany (European Union).

2. What data we process and why

We collect only what the service needs to work. Below, by purpose.

• Sign-in and account. When you open the app, Telegram gives us your Telegram ID, name, username, avatar and interface language. There are no passwords: Telegram confirms the sign-in. Basis: performance of our agreement with you (GDPR Art. 6(1)(b)).
• Profile. Phone, email, city and description — only if you enter them. Your phone and username are hidden from other users by default and are shown only if you turn that on. Basis: performance of the agreement.
• Businesses and listings. Name, description, categories, city, business phone, photos, prices, address and map point if you provide them, and the members of a business with their rights. This is published in the catalogue after moderation. Basis: performance of the agreement.
• Requests, chats, deals and reviews. Request text, city and budget; messages and photos in chats; deal terms and statuses; reviews and ratings. Basis: performance of the agreement.
• Promotion payments. Amount, status and payment ID: for Telegram Stars, inside Telegram; in the browser version of the mini app, in roubles through the Platega payment service (SBP, bank card or cryptocurrency). We never receive card or wallet details — Telegram or Platega processes the payment. Basis: performance of the agreement and payment records.
• Security and moderation. IP address and technical request data, reports, moderator decisions, action logs. Needed to protect the service from abuse and to handle disputes and reports. Basis: legitimate interest (GDPR Art. 6(1)(f)) in the safety of users and the service.
• Referral source. The tag of the link that brought you to the bot (for example, this website or a campaign). Needed to understand which channels work. Basis: legitimate interest.

3. What we do not do

• We neither store nor receive your location: if you allow geolocation, the app picks the nearest city for search on your own device — the coordinates are not sent to us and not saved.
• We do not disclose your contacts to other users unless you decide to.
• We do not sell data or share it with advertising networks.
• We do not use analytics or advertising cookies and trackers.

4. Who receives the data

• Other users — what you publish: the business card, listings, reviews; the participants of your conversation — your messages.
• Moderators and administrators of the service — as far as needed for moderation, disputes and reports.
• Telegram — the platform the bot, the mini app and Stars payments run on. Telegram processes data as an independent controller under its own privacy policy.
• Platega — the payment service, if you pay for promotion in roubles in the browser version. We send it the amount and what the payment is for; you enter your payment details on its page, and it processes them under its own rules as an independent controller.
• The hosting provider in Germany — stores the data on our behalf and does not use it for its own purposes.
• Public authorities — only where applicable law requires it.

5. International transfers

The data is stored in the European Union. The service is used by people in Thailand, and it is inseparable from Telegram, whose infrastructure is located in several countries. By using the service you understand that data moves between Thailand, the EU and Telegram's infrastructure as far as the service needs.

6. How long we keep data

• For as long as your account exists.
• When you delete your account, data that identifies you is cleared: name, username, avatar, contacts, notifications. Records of deals, reviews and conversations stay, anonymised — they belong to the other side too.
• Database backups are kept for 14 days and then deleted.
• Technical logs are kept as long as needed for security and incident review.

7. Your rights

You can: get a copy of your data; correct it; delete your account; restrict or object to processing; receive your data in a machine-readable form; complain to a data protection authority (in the EU, in your country of residence; in Thailand, the Personal Data Protection Committee, PDPC).

Data export and account deletion are in the mini app, in your profile. For anything else write to [email protected] — we answer within 30 days.

An account cannot be deleted while it has an unfinished deal: finish or cancel it first.

8. Automated decisions

The order of listings in the catalogue and which businesses receive a request are decided automatically: by category, city, promotion and a random order. These decisions have no legal effect on you. Listings, businesses and reviews are checked by human moderators before publication.

9. Cookies and browser storage

The thaiboard.online website sets no cookies and uses no analytics. The mini app stores a session identifier (a cookie and browser local storage) so you do not have to sign in again; it does not work without it. Local storage also keeps the city you search in — the number of a city, not your coordinates. There are no other cookies.

10. Age

The service is intended for users over 18. If you learn that a child is using it, please write to us.

11. Changes

If this policy changes, the new version appears on this page with a new date. We announce significant changes in the bot.