Privacy policy

Who we are

Baan Atlas is an online marketplace where owners, agents and agencies advertise property for sale and rent in Thailand. We are the data controller for the personal data described here under the Personal Data Protection Act B.E. 2562 (PDPA).

What we collect

Account data: your name, email address, password (stored only as a one-way hash), account type and preferred language.

Signing in with LINE: if you choose “Continue with LINE”, LINE shares your display name, profile picture and LINE user ID with us, and your email address if you allow it on LINE’s consent screen. We use them only to create your account and sign you in. Your email address is used for account messages and replies to your inquiries and is never shown to other users. You can revoke access at any time in LINE’s settings or by deleting your account.

Signing in with Google: if you choose “Continue with Google”, Google shares your name, email address and profile picture with us. We use them only to create your account and sign you in; your email address is used for account messages and replies to your inquiries and is never shown to other users. You can revoke access at any time in your Google Account settings or by deleting your account.

Profile and listing data you choose to publish: contact details such as phone, LINE, WhatsApp, WeChat or Telegram, photos, and property information.

Inquiries: when you contact a seller we store your name, the contact details you provide, your message and the listing it concerns.

Technical data: IP address (stored as a salted hash for rate limiting and abuse prevention), browser type and pages viewed.

Visitor statistics for sellers: when you view a listing, agency or agent page, reveal a phone number, open a chat link or start the contact form, we record that action with the country and city your IP address points to, the kind of device, the site language and how you arrived (for example a search engine or a campaign link). Your IP address itself is not stored, and the visitor identifier is a hash that changes every day. If you start the contact form but do not send it, we note only which fields had been filled in, never what you typed. These records contain no name or contact details and are deleted after 13 months.

Why we use it

To run your account and show your listings (performance of a contract).

To pass your inquiry to the owner or agent you contacted, with your consent given on the inquiry form.

To keep the platform safe: preventing spam, fraud and duplicate or misleading listings (legitimate interest).

To send service emails such as address confirmation, password resets and inquiry notifications. We do not send marketing email without your consent.

Who receives it

The owner, agent or agency behind a listing receives the inquiries addressed to them. Agency owners and administrators can see inquiries for their agency’s listings.

Service providers that host our servers, store images and deliver email process data on our behalf under contract. Optional AI features send listing text, never your contact details, to a language-model provider to translate or summarise it.

To find the country and city of an IP address we send the address, without anything else, to an IP-location service (by default country.is). The answer is cached for a week under a hashed key.

We do not sell personal data.

How long we keep it

Account data is kept while your account is active. Inquiries are kept for 24 months so sellers can follow up, then deleted or anonymised. Security logs are kept for 12 months.

Your rights

Under the PDPA you may request access to, correction, deletion or portability of your data, object to or restrict processing, and withdraw consent at any time. Contact us using the details below; we answer within 30 days. You may also complain to the Personal Data Protection Committee.

Cookies

We use a session cookie to keep you signed in and small preference cookies for your language and display currency. We do not use advertising cookies.

Contact

Questions about this policy or your data: privacy@baanatlas.example.