Privacy Notice
Last updated: —
Overview
[DRAFT — counsel to confirm] PeopleVoice operates under Thailand's Personal Data Protection Act (PDPA, B.E. 2562). This notice explains what personal data we collect, why, how long we keep it, and your rights.
What data we collect
[DRAFT — counsel to confirm] We collect the minimum needed to keep the public record authentic.
| Data | Classification | How it is stored |
|---|---|---|
| Username | Personal data (if linkable) | Stored as entered; users are advised not to use real names. |
| Phone number | Directly identifiable | Hashed (one-way) after OTP verification; plaintext is never stored. |
| IP address | Personal data under PDPA | Logged for trust signals; purged after 90 days. |
| Account–message link | Internal association | Kept internally for abuse/legal; never public unless detached. |
| Message content | Public record | Stored permanently; shown anonymously if ownership is detached or the account is banned. |
Why we process your data
[DRAFT — counsel to confirm] We rely on legitimate interest to retain the internal account–message association and IP logs: abuse prevention and trust scoring, legal compliance, and platform integrity. A Data Protection Impact Assessment is completed before launch.
[PLACEHOLDER — pending legal counsel]
How we handle your phone number
[DRAFT — counsel to confirm] Your phone number is used only for one-time-password verification and ban enforcement. After verification it is stored as a one-way hash (SHA-256 with salt); plaintext is never written to our database. Hashes of banned accounts are kept up to one year, then purged.
IP address and logs
[DRAFT — counsel to confirm] We log IP addresses to compute trust signals. They are retained for a maximum of 90 days, after which the IP field is erased in place.
How long we keep data
[DRAFT — counsel to confirm] Retention summary: phone — one-way hash; IP — 90 days; banned-account phone hash — up to 1 year; message content — retained permanently as a public record (anonymised if detached or banned).
Your rights
[PLACEHOLDER — pending legal counsel]
[DRAFT — counsel to confirm] You can request deletion of your account and personal data (username, phone hash, IP logs). We sever the link between you and your messages so they become permanently anonymous. The message content itself remains in the public archive under PDPA's archival / public-interest exception and cannot be withdrawn once published.
Sharing with authorities
[DRAFT — counsel to confirm] We do not voluntarily disclose usernames, phone numbers, or account–message links. We respond only to a valid court-issued warrant reviewed by our legal counsel. Every government request is logged and published in our monthly transparency report.
Contact and Data Protection Officer
[PLACEHOLDER — pending legal counsel]
See also our Terms of Service