Privacy policy
Last updated: May 23, 2026
SalePage takes your privacy seriously and complies with Thailand's Personal Data Protection Act (PDPA).
1. Data we collect
Email and name (from Google OAuth or magic-link), shop data (name, PromptPay, address), orders, payment slips (image + parsed fields from SlipOK), and session tokens.
2. Purpose
To operate the platform, verify slips, send order email notifications, improve the service, and comply with the law.
3. Data processors
We use the following providers to process data: Vercel (hosting/CDN), Neon (database, Singapore region), Stripe (subscription billing — shop-owner data only), SlipOK (slip verification — slip image + meta), Resend (email delivery), Google (OAuth sign-in), Cloudflare (DNS).
4. Retention
Order data is retained 5 years per Thai tax law. Account data is retained for the account lifetime — deleted on request.
5. Your rights
You may access, correct, delete, restrict processing of, or export your data. Email hello@salepage.in.th — we respond within 30 days.
6. Cookies
We use cookies for session persistence and language preference. No tracking/advertising cookies.
7. Security
All traffic over TLS 1.3, no password storage (we use magic-link and Google OAuth), API keys stored in encrypted Vercel env vars.
8. Contact
Data Protection Officer: hello@salepage.in.th — BANPUEN 911.