1. Information We Collect / ข้อมูลที่เราเก็บ
- Account data: name, email, avatar, Google profile (if you sign in with Google)
- Payment data: processed by Stripe. We store only subscription status and last-4 of card (not full card number)
- Content: posts, comments, courses, and files you upload
- Usage data: pages visited, features used, device/browser (for analytics and security)
- Cookies: essential (session, auth) and analytics cookies
2. How We Use Your Data / วัตถุประสงค์
- Provide and improve the Service
- Process payments and prevent fraud
- Send transactional emails (receipts, notifications, security alerts)
- Comply with legal obligations (tax, accounting, law enforcement requests)
3. Data Sharing / การเปิดเผยข้อมูล
We share data only with:
- Stripe — payment processing (privacy policy)
- Supabase / Cloudflare — hosting infrastructure
- Google — authentication (if you sign in with Google)
- Legal authorities when required by law
We never sell your personal data.
4. Data Retention / ระยะเวลาเก็บ
We keep your account data as long as your account is active. After deletion, we retain minimum records required by Thai accounting law (5 years for financial transactions).
5. Your Rights (PDPA / GDPR)
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion of your account and personal data
- Export your data (data portability)
- Withdraw consent for marketing communications
Contact team@standemy.com to exercise these rights.
6. Security / ความปลอดภัย
We use HTTPS/TLS encryption, industry-standard authentication (OAuth 2.0), row-level security on our database, and regular security audits. Payment data is handled exclusively by Stripe (PCI-DSS Level 1 certified).
7. Children's Privacy
Standemy is not intended for users under 13. We do not knowingly collect data from children.
8. International Transfers
Data may be processed in servers outside Thailand (Cloudflare, Stripe, Supabase). We ensure equivalent protection through Standard Contractual Clauses.
9. Changes / การเปลี่ยนแปลง
We will notify users by email of material changes at least 30 days before they take effect.