This page says how we protect the data described in the Privacy Policy.
1. Our rules
- We collect only what the service needs, and use it only for the purposes the Privacy Policy names.
- We never sell data.
- A business sees only its own data. Another business never sees your photos, your people or your posts.
- We follow Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).
2. Payment data
- Card payments are processed by Opn Payments, a payment provider certified to the card industry’s
security standard (PCI DSS). - Your card number and security code go from your browser directly to Opn Payments. They never reach our servers, and we never store them. We keep only what a receipt shows: the card’s brand, last four digits and expiry month.
- A member of our team never types a customer’s card. Only the account’s owner can pay by card.
- Before we mark a bill as paid, our server checks the payment with Opn Payments itself.
3. How we protect your data
- In transit: every connection uses HTTPS.
- Access grants: the permission you give us for your Facebook Page or Instagram is encrypted (AES-256-GCM) before
it is stored, is never displayed, and never appears in logs. We never see your Facebook password. - Separation: every request is tied to one business on the server; one business’s data is never served to another.
- Media: your photos and videos are private. They are shown through links that expire after a short time.
- Our team: only team members who need access have it. When a team member works in your account, their own name is
shown and recorded with each action. - Records: sign-ins and actions are logged so they can be checked later.
- Backups: data is backed up regularly, and a restore is tested before a change to the database.
- Secrets: keys and passwords for our providers are kept on the server only, never in messages or in code.
4. People’s faces and voices
A photo or voice of a real person is used only with that person’s recorded agreement, only for the business they belong
to, and never to identify anyone. The agreement can be withdrawn at any time; new use stops from then.
5. Our providers
The providers listed in the Privacy Policy handle data only to do their one job for us, under contracts that require
them to protect it. Some are outside Thailand; see “Cross-border transfer” in the Privacy Policy.
6. If something goes wrong
If personal data is breached, we will tell the Personal Data Protection Committee within 72 hours of learning of it
where the law requires, and tell the people affected without delay when the risk to them is high, with what happened
and what to do.
7. Your rights, and how to reach us
Your rights are in section 7 of the Privacy Policy. To delete your data, see
Data Deletion.
ADKEEL — operated by Kamol Thammasorn Co., Ltd. (บริษัท กมลธรรมสรณ์ จำกัด)
Head office: 965/19 Soi Itsaraphap 15, Itsaraphap Road, Hiran Ruchi, Thon Buri, Bangkok 10600, Thailand
965/19 ซอยอิสรภาพ 15 ถนนอิสรภาพ แขวงหิรัญรูจี เขตธนบุรี กรุงเทพมหานคร 10600 · Tax ID 0415557000816
Data protection contact: support@adkeel.com · LINE: @333fvejf · Phone: 096-298-7891