PaiNaiNa ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our travel planning service. This policy complies with Thailand's Personal Data Protection Act (PDPA).

1. Information We Collect

Personal Information

When you create an account, we collect:

• Name and email address
• Profile picture (optional)
• Authentication credentials

Usage Information

We automatically collect:

• Device information (browser type, operating system)
• IP address and location data
• Pages visited and features used
• Date and time of visits

Travel Information

When you use our service, we collect:

• Trip itineraries and plans you create
• Destinations and places you save
• Notes and comments
• Photos you upload

2. How We Use Your Information

We use your information to:

• Provide and maintain our Service
• Create and manage your account
• Enable trip planning and collaboration features
• Personalize your experience
• Send service-related communications
• Improve our Service and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

3. Legal Basis for Processing (PDPA)

Under Thailand's PDPA, we process your data based on:

• Consent: When you create an account and agree to this policy
• Contract: To provide services you requested
• Legitimate Interest: To improve our services and ensure security
• Legal Obligation: To comply with applicable laws

4. Information Sharing

We may share your information with:

• Trip collaborators: When you invite others to your trips
• Service providers: Third parties that help us operate our Service (hosting, analytics)
• Legal requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate security measures to protect your information, including:

• Encryption of data in transit (HTTPS)
• Secure data storage
• Access controls and authentication
• Regular security assessments

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time. Some information may be retained for legal or legitimate business purposes.

7. Your Rights Under PDPA

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected]

8. Cookies

We use cookies and similar technologies to enhance your experience. For more details, please see our Cookie Policy.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Thailand. We ensure appropriate safeguards are in place for such transfers in compliance with PDPA.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: