Privacy Policy
This policy explains how PAS Expert Co.,Ltd. ("the company", "we"), the provider of ClickDoo, collects, uses and shares personal data when you use the website clickdoo.app and the app app.clickdoo.app (the "service"), and how you exercise your rights under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). The Thai version of this policy is the original; this English version is a translation.
1. Our role
- Account data of shops and their teams (people who sign up, shop owners and invited team members): the company is the data controller.
- Data of a shop's customers (the chats, contact details and orders of people who message a shop on Facebook or LINE): the shop is the data controller, and the company is a data processor that processes this data on the shop's behalf, only to provide the service. A shop's customers who want to exercise their rights over their data should contact the shop directly; we help shops answer such requests.
2. Data we collect
2.1 User accounts
- Name, email address or phone number (or both), the shop's name and the role in the shop (owner or team member).
- The password, stored only as an Argon2 hash that cannot be turned back into the password.
- Verification codes sent by email or SMS (stored as hashes, and they expire) and when the email address or phone number was verified.
- Team invitations (the invited person's email address).
2.2 Credits and payments
- The package chosen, the amount, the uploaded picture of the bank transfer slip, the bank reference our team records when checking it, and the shop's credit history.
- The shop's own payment accounts (bank or PromptPay) that the shop saves to show its customers.
2.3 Channels a shop connects
- Facebook: the Page's id, name and picture, the Page access token (encrypted before it is stored) and the Facebook user id of the person who connected the Page (an id specific to our app). We never receive Facebook passwords and do not keep the user access token once the Page is connected.
- LINE: the LINE Official Account's name and id and the channel's credentials (the channel secret and access token, encrypted before they are stored).
2.4 Data of a shop's customers (processed on the shop's behalf)
- The text, pictures, videos, audio, files, stickers, locations (LINE), button taps and reactions customers send to the shop, and the shop's replies.
- The customer's display name and profile picture from Facebook or LINE (we store a copy of the picture) and the customer's id on each platform.
- The name, phone number, address, email address and notes the shop or the customer enters (for example through a form in the chat), orders, and the payment slips of orders.
- When a customer comes from a Facebook ad or an m.me link of the Page: the ad's id or the link's ref code, used to choose the shop's automatic answer.
2.5 Technical data
- The app's cookies (section 9).
- IP addresses, used briefly to limit sign-in attempts and other requests, and never written to the database.
- The raw data Facebook and LINE send us (webhooks), used to process messages and investigate problems.
- An audit log of important actions, such as permission changes, slip approvals and an owner's consent to the AI assistant.
We use no third-party tracking or analytics tools, show no advertising and do not sell personal data.
3. How we use data
- To provide the service under our contract: create and manage accounts, receive and send messages through the channels a shop connects, show chats, customers, orders, products and reports, and charge and add credits.
- To verify identities and send notices: verification codes, team invitations, password resets and notices about the shop (for example slip results, low credit, a channel that must be connected again) by email or SMS.
- To check payments: our team checks each slip before adding credits.
- Security and preventing misuse (our legitimate interest): rate limits, the audit log of our administrators and monitoring the system for problems.
- To comply with the law where the law requires it.
4. AI assistant
The AI assistant stays off until a shop's owner turns it on and consents on the shop's behalf (we record when and by whom). Once it is on, each time the AI answers, the last 20 messages of the conversation (the customer's, the team's, the automatic answers' and the AI's own), the customer's name, the shop's information, its frequently asked questions and its products are sent to Anthropic (the provider of the Claude models, in the United States) to write the answer. These messages may contain personal details the customer or the shop wrote in the chat, for example an order summary with the recipient's name, phone number and delivery address, or the answers of a form in the chat. We send no pictures or files (the AI only learns that one was sent), and not the phone number, address or email address saved on the customer's contact (the AI only learns whether the shop has them). The AI can save the name, phone number, address and email address a customer gives to the customer's contact (only details the contact does not have yet) and draft an order for the team to confirm. Our system logs do not keep what is sent or the AI's answers (an answer sent to a customer is in the chat like any other message). The owner can turn the AI assistant off or withdraw consent at any time, and the shop must tell its customers that an AI helps answer them.
5. Who receives data
- Meta (Facebook, Messenger) and LINE: the platforms a shop chooses to connect. The shop's replies and the data needed to deliver them are sent to that platform, which handles data under its own policies.
- DigitalOcean: our provider of servers, the database, file storage and backups, in its data centre in Singapore.
- Google (Google Workspace): sends the service's email, such as verification codes, invitations and notices (emails never contain customers' chat messages).
- ThaiBulkSMS: sends verification codes and short notices by SMS, when we turn SMS on.
- Anthropic: only for shops that turn on the AI assistant (section 4).
- Google Fonts and Iconify: the app app.clickdoo.app loads its fonts from Google Fonts and some of its icons from Iconify's servers (api.iconify.design, or api.simplesvg.com and api.unisvg.com when the first does not answer). Your browser fetches these files itself, so these services receive your IP address and your browser's details (user agent), as with any download; no account or chat data is sent to them.
- ClickDoo staff: administrators with only the permissions their work needs (for example checking slips, helping shops, fixing problems); every change an administrator makes is recorded.
- Public authorities: when the law requires it or under a lawful order.
6. Transfers outside Thailand
The service's data is stored in DigitalOcean's data centre in Singapore, and some of the providers in section 5 process data outside Thailand (for example Anthropic in the United States). We choose providers with personal data protection measures and send only the data needed to provide the service.
7. How long we keep data
- Chat messages and their files: deleted automatically once older than the shop's chat retention: 1 day, 1 week, 1 month, 1 year (the default) or never deleted. ClickDoo's team sets it (a shop can ask to change it), and the shop sees the value in use on its settings page. A shorter retention takes effect 24 hours after it is set.
- Raw data from Facebook and LINE (webhooks): at most 7 days, or less when the shop's chat retention is shorter.
- Chat rooms, customer contacts and their profile pictures, orders, products, stock, credit history, slips and the audit log: kept while the shop uses the service.
- Form answers a customer confirms: kept with the customer's contact, not deleted with the chat history, until the shop deletes the contact; the answers of a form left unfinished are deleted within about 25 hours.
- Records of the notices we send by email or SMS: deleted 90 days after they were created, once sent or failed.
- Records of the AI assistant's answers (token counts and the names of the tools used, never any text): deleted after 90 days.
- The record of a Facebook data deletion request (a one-way hash of the user id and the confirmation code): kept, so that the status link keeps answering.
- User accounts: until the account is deleted or the shop is closed. Team members can delete their own account on the "My account" page (บัญชีของฉัน); shop owners contact us to transfer ownership or close the shop.
- Closed shops: we delete a shop's data within 90 days after it is closed, except data the law requires us to keep.
- Backups: deleted data may remain in the backups of the server and the database until those backups are replaced in their normal cycle.
8. Removing the app and data deletion requests on Facebook
- When you remove ClickDoo from your Facebook account, the Pages you connected that are working in ClickDoo (except those someone else has connected again since) stop working (their status becomes "must reconnect", ต้องเชื่อมใหม่) and the shop's owner is told. Their Page access tokens, which no longer work, stay stored encrypted until the shop disconnects the Page or you send a data deletion request.
- When you send a data deletion request through Facebook, we disconnect the Pages you connected (except those someone else has connected again since), delete their Page access tokens and delete your Facebook user id at once. We keep only a one-way hash of that id with a confirmation code, so you can check the status of the request at the link Facebook shows you.
- Scope: this deletion covers the data we received through Facebook Login (the Pages' tokens and your user id). Chats with the Page's customers are the shop's business records; they remain for the shop's chat retention, or until the shop is closed.
Step-by-step instructions are on the Data Deletion page.
9. Cookies and data on your device
- The website clickdoo.app uses no cookies.
- The app app.clickdoo.app uses the cookies needed to stay signed in (HttpOnly, so scripts on the page cannot read them: an access cookie for 15 minutes and a refresh cookie for 30 days) and one preference cookie, sidebar_state, which remembers for 7 days whether the side menu is open when you open or close it with the keyboard shortcut (it holds no personal data). There are no advertising or analytics cookies.
- When a page of the app opens, your browser fetches fonts from Google Fonts and icons from Iconify, which receive your IP address and your browser's details (section 5).
- The app keeps some data in your own browser (local storage), such as unsent message drafts (removed when you sign out), sound and notification switches and display settings. This data is not sent to us.
10. Security
- Every connection over the internet (your browser, Meta, LINE, Anthropic, our email and SMS providers) uses HTTPS or TLS, and so does the connection to our database.
- Page tokens and channel credentials are encrypted with AES-256-GCM, and passwords are stored as hashes.
- Pictures and files have no guessable links: the app opens them with signed links that expire after 10 minutes, and files a shop sends to customers on LINE use random, unguessable links, because LINE fetches files by link.
- Each shop sees only its own data, administrators have permissions by role, and important actions are recorded.
- System logs never contain customers' chat messages, tokens or passwords.
11. Your rights
Under the PDPA you have the right to access your data and receive a copy, to have it corrected, to have it deleted or anonymised, to restrict its use, to object to processing, to data portability and to withdraw consent, and the right to complain to the Office of the Personal Data Protection Committee (สำนักงานคณะกรรมการคุ้มครองข้อมูลส่วนบุคคล).
- You can change your name and password yourself on the app's "My account" page (บัญชีของฉัน).
- Send other requests to privacy@clickdoo.app with your account's email address or phone number and the shop's name. We may ask for more information to verify your identity, and we answer within 30 days.
- A shop's customers should contact the shop directly (section 1).
12. Changes to this policy
When we change this policy, we publish the new version on this page with its version number and effective date. For important changes we also tell shop owners by email or in the app.
13. Contact us
PAS Expert Co.,Ltd.
1068/202 Liap Khlong Rangsit Road, Prachathipat Subdistrict, Thanyaburi District, Pathum Thani 12130, Thailand
Email privacy@clickdoo.app