Privacy Policy

Effective 25 October 2026

This policy explains what personal data Plaazaa collects, why we use it, who we share it with and the choices you have. We wrote it to follow Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

The short version

  • We collect what we need to run your account and your Spaces.
  • Content you post in a Space is visible to that Space's members, according to the Space's settings.
  • We never sell your personal data.
  • You can see, download, correct or delete your data, and you can close your account at any time.

1. Who we are

Plaazaa ("we", "us") operates plaazaa.com, plaazaa.com and related apps, and is the data controller for the personal data described here. Contact us about privacy at support@plaazaa.com.

2. Data we collect

  • Account data: name, username, email address, password (stored encrypted), and optionally phone number, date of birth and gender.
  • Profile data: profile and cover photos, bio, city, school or workplace if you add them.
  • Content: posts, photos, videos, comments, reactions, messages, problem reports, listings, events and files you share.
  • Community data: the Spaces, groups and pages you join or manage, and your role in them.
  • Location: only when you choose to share it — for example, pinning a problem report or a listing.
  • Technical data: IP address, device and browser type, language, log and security information, and cookies (see section 8).
  • Payments: if you buy a paid feature, the payment provider processes your card details; we receive only a confirmation and the amount.
  • Messages to us: what you send through the contact form or by email.

3. How we use your data and our legal bases

  • To provide the service — create your account, show your Spaces and feed, deliver messages and notifications (performance of our contract with you).
  • To keep Plaazaa safe — prevent spam, fraud and abuse, verify members, and enforce our Terms (legitimate interests; legal obligations).
  • To improve Plaazaa — understand which features are used and fix problems (legitimate interests).
  • To contact you — service and security messages; marketing only with your consent, which you can withdraw at any time.
  • To meet legal duties — respond to lawful requests from authorities and keep records the law requires.

Where we rely on your consent, you can withdraw it at any time without affecting processing that already took place.

4. What other people can see

Your name and profile photo are visible to other members. Content you post in a Space is visible to that Space's members; public posts can be seen by anyone on Plaazaa. Space admins (for example, a local government office or a juristic office) can see member lists and the reports or requests sent to their Space. Use the privacy settings on your account and posts to control your audience.

5. Who we share data with

We do not sell personal data. We share it only with:

  • Service providers who run parts of Plaazaa for us under contract — cloud hosting and storage (for example DigitalOcean and Amazon Web Services), email delivery (Mailgun) and spam protection (Google reCAPTCHA). They may only use the data to provide their service to us.
  • Space organisers, for content and reports you send to their Space.
  • Payment providers, when you buy a paid feature.
  • Authorities, when the law requires it or to protect someone's safety.
  • A successor, if Plaazaa is merged or sold — under this policy, with notice to you.

AI tools. When you press an AI button (for example ✨ Tidy, ✨ Spelling & tone, 🌐 Translate, ✨ Caption from photo, and future AI tools), the text of that post or comment, or the photo you chose, is sent to our AI service provider to make the suggestion. Nothing is sent unless you press the button. Translations are saved so the same text is not translated twice.

6. International transfers

Some of our providers store data outside Thailand, for example in Singapore or the United States. When data leaves Thailand we use providers with appropriate safeguards, as the PDPA requires.

7. How long we keep data

We keep your data while your account is open. When you delete content it is removed from Plaazaa, and backup copies are overwritten within 90 days. When you close your account we delete or anonymise your personal data within 30 days, except what we must keep by law or to resolve disputes, which we keep only as long as needed.

8. Cookies

We use cookies that are necessary to keep you signed in, remember your settings (such as language and light or dark look) and protect against abuse. We do not use advertising cookies from third parties. You can block cookies in your browser, but parts of Plaazaa will stop working.

9. Your rights

Under the PDPA you can:

  • access and get a copy of your personal data (you can also download it from Settings);
  • ask us to correct inaccurate data;
  • ask us to delete or anonymise your data;
  • object to or restrict certain processing;
  • ask us to transfer your data to another service;
  • withdraw consent at any time;
  • complain to the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To use these rights, write to support@plaazaa.com. We reply within 30 days.

10. Children

You must be at least 13 years old to use Plaazaa. Members under 20 need the consent of a parent or guardian where Thai law requires it. Class and school Spaces are run by teachers and schools, who are responsible for getting any consent needed for their students.

11. Security

We use encryption in transit (HTTPS), encrypted passwords, access controls and monitoring to protect your data. No system is perfectly secure; if a breach affects you, we will notify you and the PDPC as the law requires.

12. Changes to this policy

We will post any change on this page and update the date above. If a change is significant, we will tell you in Plaazaa or by email before it takes effect.

© 2026 Plaazaa