PRIVACY POLICY

1. General

These provisions govern the collection, use, and disclosure of personal data by Angpao System Co., Ltd. ("Seller Pao", "the Company", "we", "us") across three surfaces: the public website sellerpao.com, the Seller Pao software-service platform (the "Service"), and the Seller Pao browser extension published on the Chrome Web Store (the "Extension"). This policy is issued in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA").

By using the Service, the website, or the Extension, the user acknowledges this Privacy Policy.

2. Definitions

"Personal Data" means any information relating to a natural person which identifies such person, directly or indirectly, as defined by the PDPA.

"User" means any visitor of the website, registered account holder of the Service, or user of the Extension.

3. Data we collect: Website and Service

Account and registration data: name, email address, telephone number, and credentials required to operate a Seller Pao account.

Business data the user enters or connects to the Service for order, inventory, or sales management purposes, which the user remains the owner of and controls. This includes store details such as the store name, address, and business registration number where applicable, and usage records such as orders, inventory movements, shipping records, and chat history handled through the Service.

Technical data: server logs, IP address, device and browser type, cookies and similar identifiers, and access timestamps, retained for the security and availability of the Service and for the login session and basic analytics described in section 9.

Payment data is processed by Stripe and Flash Pay; the Company does not store full payment card details on its systems.

4. Meta Platform Data

When a merchant connects a Facebook Page or Instagram professional account, Seller Pao receives only the information the merchant authorizes through Meta's official APIs. Depending on the features used, this may include Page or account identifiers and profile details, Messenger or Instagram conversations, customer and Page comments, post and live-video metadata, webhook events, and access tokens needed to maintain the connection. Seller Pao does not receive or store the user's Facebook password.

Seller Pao uses this information to connect the selected account, provide a unified inbox, let authorized staff reply to customers and comments, monitor selected posts or live sessions, and support order workflows requested by the merchant.

Meta access tokens are used only for the authorized connection and are not disclosed to other merchants. A merchant can disconnect the channel in Seller Pao or remove Seller Pao from Facebook Apps and websites to stop future access.

Requests to delete Seller Pao account data or connected Meta data can be made using the instructions at https://sellerpao.com/data-deletion.

5. Data we collect: Browser Extension

The Extension processes media-related information strictly on the user's own device and only for the single purpose of downloading a media file the user has chosen: the address of the media file, its type and size, and download progress.

The Extension does not transmit the user's browsing history, page content, credentials, cookies, or tokens to the Company or to any server. Candidate and progress records are kept in the browser's session-scoped storage and are deleted automatically when the browser session ends.

Downloaded files are saved by the user's own browser into the user's Downloads folder. The Company has no access to them.

The Extension offers an optional local helper program. If and only if the user installs it, the Extension may send that local helper one media address the user chose to download. The helper runs only on the user's computer. The Extension functions fully without it.

The Extension refuses YouTube hosts outright, does not circumvent technical protection measures (DRM), does not bypass access controls or logins, and does not collect analytics or telemetry of any kind.

6. Storage location and retention

Service data is stored with DigitalOcean cloud infrastructure.

The public website uses Cloudflare for public website delivery and network protection.

Account and connected-channel data is retained for as long as it is needed to provide the active service and for the period required by applicable law thereafter. Extension-related data is not retained beyond the browser session, as described in section 5.

7. Use of data

The Company uses personal data solely to operate and support the Service and website: account administration, provision of features, customer support, service announcements, security, improving the Service through aggregated usage analysis, preventing and detecting fraud or misuse, and legal compliance. Personal data is not sold, not rented, and not used for any unrelated purpose.

8. Disclosure to third parties

The Company discloses personal data only to: (a) shipping carriers such as Flash Express, Kerry, and J&T, limited to the recipient name, address, and telephone number needed to deliver a parcel; (b) payment providers and cloud infrastructure providers strictly necessary to operate the Service; (c) authorities where compelled by court order or applicable law. The Extension shares no data with third parties.

9. Cookies

The website and Service use cookies to remember your settings, keep login sessions working, and measure basic analytics. You can disable cookies in your browser settings, although some features may then work incompletely. The Extension does not use cookies.

10. The user's rights under the PDPA

The user may request: access to their personal data; correction of inaccurate data; deletion (subject to the conditions the law sets); objection to processing; temporary suspension of use; portability of their data in a machine-readable format; and withdrawal of consent, by writing to contact@sellerpao.com. Data-deletion requests for Service accounts are confirmed and completed within the period prescribed by the PDPA. Extension data requires no deletion request: removing the Extension from the browser removes all of its data.

11. Security

The Company applies technical and organizational measures appropriate to the nature of the data: encrypted transport (HTTPS/TLS), access controls, regular backups, and continuous system monitoring. To be direct about it, no system is secure 100 percent of the time, but the Company maintains these controls and reviews them.

12. Changes to this policy

The Company may amend this policy to reflect changes in law or services. The effective date above will be updated, and material changes will be emailed to account holders or announced on the website before taking effect. Continuing to use the Service after a change takes effect means the user accepts the updated policy.

13. Contact

Angpao System Co., Ltd., 98/43 Ratchaphruek 9 Bang Chueak Nang, Taling Chan Bangkok 10170

Support: contact@sellerpao.com

Personal data matters: contact@sellerpao.com