Privacy Policy
1. Information We Collect
When you use our services, we may collect the following types of information:
- Account Information: When registering a merchant account, we collect your name, restaurant name, phone number, email address, LINE ID, and password (encrypted).
- Business Information: Menu data (dish names, prices, categories, images), business hours, restaurant address, table configurations, and other data needed to provide the ordering system service.
- Transaction Data: Order information processed through the system, including order amounts, payment methods, order times, and menu preferences, used for business reporting and service optimization.
- Technical Information: When you visit our website, we automatically collect IP address, browser type, operating system, access times, and page browsing behavior.
- Customer Data: Order information provided by your customers when they scan QR codes to order. We act as a data processor on your behalf for this data.
2. How We Use Your Information
We use the collected information for the following purposes:
- Operating and maintaining your QR code ordering system, admin dashboard, payment integrations, and other core features.
- Analyzing usage data to optimize system performance, improve user interface, and develop new features.
- Responding to your inquiries, resolving technical issues, and providing usage guidance.
- Complying with Thailand's Personal Data Protection Act (PDPA) and other applicable laws and regulations.
- Sending service-related communications, including system updates, maintenance notices, and billing reminders.
3. Data Storage and Security
- Storage Location: Your data is stored on secure servers in Thailand, ensuring data localization compliance with Thai law.
- Encryption: All data transmission uses TLS 1.3 encryption. Sensitive information (such as passwords) is hashed using the bcrypt algorithm.
- Access Control: Strictly limit employee access to user data. Only authorized personnel may access data based on work requirements, and all access is logged.
- Data Retention: We retain your data while your account is active. After account closure, we delete all related data within 90 days.
4. Your Rights
Under Thailand's Personal Data Protection Act (PDPA), you have the right to access, rectify, or delete your personal data. You may also withdraw consent at any time.
5. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via website announcement or email.
6. Contact Us
For questions about this Privacy Policy, please contact us at privacy@chinagogo.app.
