Privacy Policy

1. Data we collect

From the people who use the Easyrobin app (business owners and their team):

• Account data: name, email address, password (stored hashed), profile picture, phone number if given.
• Business data: business name and settings, team members, roles, tags, notes and cases the team creates.
• Usage and technical data: sign-in sessions, device and browser type, IP address, error logs.
• Security and audit data: for every action in the app we record who did what to which record (the value before and after), with the IP address and proxy route, internet provider, approximate country / province / city, whether a VPN or proxy is used, browser, operating system, device type and model, language, time zone, a device id (our own cookie, kept 1 year) and the session id (stored hashed).
• Browser fingerprint: when you sign in, use two-step verification or a passkey, change or reset a password, confirm your account after a security alert, sign out other devices, pay or refund, export data, delete an account, change or deactivate a member, or turn on or use support access, we also keep a summary of your device and browser (screen, time zone, languages, graphics, fonts — no personal content), made unreadable (hashed) on our servers.
• Passkeys: we keep only the result that you confirmed with your fingerprint, face or PIN on your own device. We never receive an image or data of your fingerprint or face.

2. Data from connected channels (Facebook, Instagram, LINE, TikTok)

Only when a business connects a channel, and only for the pages and accounts it chooses, Easyrobin receives through the platform's official API:

• Page / account identity: the Facebook Page or Instagram / LINE / TikTok account name, profile picture and id.
• The access token the platform issues for that page or account (stored encrypted, used only to receive and send messages for the business).
• Messages and attachments (pictures, video, files, stickers) that customers send to the page or account, and the replies the business sends.
• The customer's public profile given with the chat: display name, profile picture and the platform's user id for that page.
• Comments on the page's posts, when the business turns on comment replies.

3. How we use the data

Easyrobin does not sell personal data, does not use chat data for advertising, and does not share it with other businesses. Data from one business is never shown to another.

• To show the chats in the business's inbox and send the business's replies back to the customer on the same channel.
• To run features the business turns on: auto-replies, chatbot, broadcasts to its own followers, customer records, reports.
• To keep the service secure, fix problems and bill the business for its plan.
• Security and fraud prevention: to detect a sign-in or payment that is not the account owner's, to prevent fraud, and to keep evidence for auditors and for establishing, exercising or defending legal claims. Legal basis: legitimate interest under Thailand's Personal Data Protection Act B.E. 2562, section 24(5).

4. Who we share data with

• The platform the chat belongs to (Meta, LINE, TikTok) — only to deliver the business's replies.
• Service providers that host and run Easyrobin (cloud servers, file storage, email delivery, payment processing), bound to keep the data confidential.
• Authorities, when the law requires it.
• Audit records: a business owner sees the records of their own business (IP and device details only for the owner); our staff see them as their role allows, and every time our staff look is recorded too.

5. How long we keep data

• Channel data (page token, chats, attachments, comments) is kept while the channel is connected to the business.
• When the business removes a channel in Settings › Channels, its token is deleted at once and the channel's data is removed.
• When a business is deleted, all its data (chats, customers, files, settings) is deleted within 30 days.
• Account data is deleted when the account is closed, except what the law requires us to keep (for example tax invoices).
• Security and audit records: 13 months in the live system, then archived unchangeable for up to 7 years, then deleted. When an account is closed or deletion is requested, the names and email addresses in these records are made unreadable; the actions and their times stay, as evidence.

6. Your rights

You may ask to see, correct, export or delete your personal data, or object to its use, under Thailand's Personal Data Protection Act (PDPA) and other laws that apply to you. If you chatted with a business that uses Easyrobin, that business controls the chat data; you can ask it directly or ask us and we will pass the request on. See the Data Deletion page for how to have data removed.

7. Security

Data is sent over encrypted connections (HTTPS), access tokens and passwords are stored encrypted or hashed, and only the business's own team members, with the permissions the business gives them, can see its chats.

8. Cookies and analytics on our website

The Easyrobin website uses the cookies it needs to work, and the analytics tools below on every visit. They set their own cookies; the cookie notice on the website is there to let you know.

• Google Analytics 4 (Google): runs on every visit and sets Google cookies to count page views and key button presses, such as start free, choose a plan, open chat and log in, with the device type, browser and approximate country or city. Advertising use of the data and Google signals are turned off.
• Microsoft Clarity (Microsoft): runs on every visit and sets Microsoft cookies to record scrolling, clicks and mouse movement, to see which parts of a page are hard to use. What you type into form fields is masked and never sent.
• Cloudflare Web Analytics (Cloudflare): counts page views without cookies.
• We do not use this data for advertising and we do not sell it to anyone.

To stop this: block or delete this website's cookies in your browser settings, install the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout⁠ (opens in a new tab)), and for Microsoft Clarity see Microsoft's privacy page (privacy.microsoft.com⁠ (opens in a new tab)).

9. Changes to this policy

We will post any change on this page with a new “Last updated” date.

10. Contact us

• Thunder Solution Co., Ltd.
• 629 Moo 6, Ban Ped, Mueang Khon Kaen, Khon Kaen 40000, Thailand
• Email: [email protected]