PandaChats ให้บริการโดย Mr. Suksan Pantrakun ซึ่งเป็นบุคคลธรรมดา ที่อยู่ 636 Trok Wat Lat Bua Khao, Bang Kho Laem, Bang Kho Laem, Bangkok 10120, Thailand
This policy explains how PandaChats collects, uses and looks after personal data when a store uses PandaChats to receive and answer customer messages from LINE, Telegram, Facebook Messenger and Instagram.
1. Who operates PandaChats
PandaChats is operated by Mr. Suksan Pantrakun, an individual, at 636 Trok Wat Lat Bua Khao, Bang Kho Laem, Bang Kho Laem, Bangkok 10120, Thailand.
For general support, personal-data questions and deletion requests, contact sixvp69@gmail.com.
2. The role of PandaChats and of each store
PandaChats processes customer data on behalf of each store. Each store is responsible for its relationship with its customers and for using that data lawfully.
Where the operator directly operates a store, the operator may also act as the data controller for that store.
Each store’s data is kept separate and is never shared with another store, except where the affected store lawfully authorises it.
3. What we process
Store users (owners, managers and authorised staff):
e-mail address, display name, and the stores and roles they hold
sign-in information and online/busy/offline status
a record of actions taken in PandaChats, such as assigning or closing a conversation
Customers who message a store connected to PandaChats:
the messages they send and the store’s replies, including images, video and files in the conversation
the identifier the platform assigns them for that store’s account, and the name the platform provides
delivery and read status reported by the platform
if the store enables slip checking: the payment-slip image and the verification result
A customer’s Facebook Messenger name is shown only to the store’s owner, managers and head admins; other staff see a non-identifying label instead.
4. How we use it
Only to provide the service to the store: showing conversations to the store’s users, delivering replies, assigning conversations, checking slips when the store has enabled it, keeping the service secure, and recording changes made in the system.
PandaChats does not sell personal data, does not use customer data for cross-store advertising, and does not operate advertising trackers.
PandaChats uses essential cookies to sign users in and keep their session.
5. Service providers
The following may process data as infrastructure or communication providers:
Supabase: database, file storage and sign-in
Vercel: hosting of the web application
LINE, Telegram and Meta (Facebook Messenger, Instagram): receiving and delivering the store’s messages for the accounts the store connects
SlipOK: slip verification, only for stores that enable it
These providers may process data outside Thailand, and the regions used may change.
6. How long we keep data
Raw data a platform sends us (webhooks) is used only to build the stored message and is deleted once processed. Anything not yet processed is removed by an automated daily clean-up after a 24-hour lifetime.
Messages, media and customer records are kept for as long as required to provide the service, operate the store, maintain security and comply with legal obligations. There is currently no automatic deletion after a fixed period.
Security and audit records may be kept for as long as reasonably necessary for security, fraud prevention, dispute resolution and legal compliance.
Deleted data may remain temporarily in backups until those backups expire in the normal course.
7. Your rights
You may ask to access, correct, object to, restrict or delete your personal data by e-mailing sixvp69@gmail.com.
We acknowledge a valid request within 7 days where reasonably possible and aim to complete it within 30 days, subject to identity verification, technical feasibility and legal exceptions.
How to request deletion is explained on the Data Deletion page. Customers may also contact the store they messaged directly.
8. Children
PandaChats is not directed to children. People authorised to operate PandaChats for a store must be at least 20 years old.
The system cannot always tell whether someone messaging a store is a child. If you believe we process a child’s data, contact sixvp69@gmail.com.
9. Security
Each store’s data is separated and access is checked on every request. Credentials for connected platform accounts are kept in a restricted secret store and are never shown to users. Connections to PandaChats use HTTPS.
10. Applicable law
This policy is governed by Thai law and, where applicable, Thailand’s Personal Data Protection Act B.E. 2562 (2019).
11. Changes to this policy
When our practices change we will update this page and the date above. See also our Terms of Service.