Privacy notice
Draft under Thailand's Personal Data Protection Act (PDPA), to be reviewed before launch. Last updated 24 October 2026.
[COMPANY NAME] ("we") is the data controller for Flat Maker.
What we collect and why
- Email address (and name and picture if you sign in with Google): to give you an account. Basis: contract.
- Payment records from Stripe (amount, date, plan, Stripe customer number; never your full card number): to run your plan and for tax records. Basis: contract and legal duty.
- Download log: the shape and dimensions of each DXF you download and when, to apply plan limits and to help if a pattern is questioned. Basis: contract and legitimate interest.
- Your form inputs are also saved in your own browser so they are there next time; they are not sent to us until you download a DXF.
Who processes it
Supabase (accounts and database), Cloudflare (hosting) and Stripe (payments). Their servers may be outside Thailand; they work under their own data protection terms.
How long we keep it
Account data and the download log while your account is open and 12 months after. Payment records for as long as Thai tax law requires.
Your rights
You can ask to see, correct, export or delete your data, or object to its use, by writing to [EMAIL]. You can also complain to the Office of the Personal Data Protection Committee.