[[PLACEHOLDER]]-style tokens
(entity name, address, contact details). Do not rely on it as final legal terms.
Last updated: not yet published (draft)
Privacy Policy
Effective date: [[EFFECTIVE_DATE]]
This Privacy Policy explains what personal data [[LEGAL_ENTITY_NAME]], [[REGISTERED_ADDRESS]] ("Octopus", "we", "us", "our") collects when you use the Octopus website (the "Service"), why we collect it, how long we keep it, and who we share it with. It applies to visitors, registered accounts, and anyone who submits an inquiry through the Service.
Octopus is a search index for Thai real estate listings sourced from public Facebook Group posts. This policy covers data about you as a user of the Service. It does not cover the listing content itself (photos, prices, descriptions) posted by third parties, which is addressed separately in our Terms of Service.
1. Data we collect
1.1 Data you give us
- Account email. When you sign in via magic link, we collect and store the email address you provide.
- Google account profile. If you choose to sign in with Google, we receive your name, email address, and profile identifier from Google as part of the OAuth sign-in flow.
- Inquiries. When you contact a poster through a listing's "Contact" form, we collect your chosen contact channel (phone, email, LINE, or other), the contact value you supply, and any optional message you write.
- Favorites and saved searches. If you save a listing or a search filter combination while signed in, we store that selection against your account.
- Voice input (optional). If you use the microphone button on the search box, the audio clip you record is sent to a speech-to-text provider to be transcribed into text. The resulting transcript is shown to you and is never submitted automatically — you review and edit it before running a search.
1.2 Data collected automatically
- Magic-link tokens. When you request a sign-in link, we generate a single-use token associated with your email address and a short expiry window, so we can verify it's really you when you click the link.
- Session data. A signed session cookie identifies you as logged in across requests. It does not contain your password, because we don't have one.
- Website analytics (where enabled). Once you grant consent, we use a self-hosted analytics tool (umami) to understand aggregate usage of the Service — for example, which pages are viewed and how the catalog and search features are used. This analytics tool is cookieless by design and runs on our own infrastructure; no analytics data is shared with a third-party analytics vendor.
2. Why we process your data, and on what basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Letting you sign in without a password | Account email, magic-link token, Google profile (if used), session cookie | Necessary to provide the service you requested (contractual necessity) |
| Handling a property inquiry you submit | Contact channel, contact value, message | Necessary to fulfil your request; legitimate interest in connecting you with a relevant listing |
| Remembering favorites and saved searches | Account, saved listing/search data | Necessary to provide a feature you opted into |
| Transcribing voice search input | Audio clip you record | Consent — the feature only activates when you press the mic button |
| Understanding and improving the Service | Aggregate, cookieless usage analytics | Consent, granted through our cookie/analytics banner before analytics loads |
| Security, abuse prevention, and rate limiting | IP address, request metadata | Legitimate interest in keeping the Service available and free of abuse |
3. How long we keep your data
- Account email and profile data is kept for as long as your account exists. If you ask us to delete your account, we delete or anonymize this data, subject to any residual copy needed for fraud prevention or legal compliance.
- Magic-link tokens expire shortly after issue and are deleted once used or expired.
- Inquiries are retained for as long as needed to support the follow-up on the listing you inquired about, and thereafter for a limited period for record-keeping.
- Favorites and saved searches are kept until you remove them or delete your account.
- Voice clips are processed for transcription and are not retained by us once transcription completes; retention by the speech-to-text provider is governed by that provider's own terms.
- Analytics data is aggregate and cookieless, and is retained on our own infrastructure for a limited rolling window sufficient for trend analysis.
4. Third parties we share data with
We use a small number of service providers ("processors") to operate the Service. We do not sell your personal data, and we do not share it for third-party advertising.
| Processor | Purpose | Data involved |
|---|---|---|
| Cloudflare | Image hosting and content delivery (re-hosted copies of listing photos) | Re-hosted listing images; standard request/connection metadata (e.g. IP address) as part of serving content |
| Optional sign-in (OAuth) | Name, email address, Google account identifier — only if you choose to sign in with Google | |
| Resend | Sending transactional email (magic-link sign-in emails) | Your email address, the sign-in link |
| DeepSeek | LLM parsing of scraped listing text into structured fields | Third-party listing content (from public Facebook posts) — this processing does not involve your personal data as a user of the Service |
| Speech-to-text provider (Whisper) | Transcribing your voice search input, only when you use the mic feature | The audio clip you record and its resulting transcript |
| umami (self-hosted) | Website usage analytics, after consent | Aggregate, cookieless page-view and interaction data — hosted on our own infrastructure, not shared with a third party |
5. Cookies and similar technologies
We use a small number of strictly necessary cookies to keep you signed in (the session cookie) and to prevent abuse. These do not require consent, because the Service cannot function without them.
We separately offer self-hosted, cookieless usage analytics (umami). Analytics only begin loading and collecting data after you grant consent via the cookie/analytics banner shown on your first visit. You can withdraw consent at any time, and analytics will stop loading on subsequent visits. Because umami does not use tracking cookies and does not build cross-site profiles, it collects materially less data than typical third-party analytics tools.
6. International data transfers
We are based in [[GOVERNING_JURISDICTION]]. Some of our processors (see the table above) may process data outside [[GOVERNING_JURISDICTION]], including in jurisdictions with different data protection laws. Where we transfer personal data internationally, we rely on the relevant processor's own safeguards and, where applicable, standard contractual or equivalent transfer mechanisms.
7. Security
We use reasonable technical and organizational measures to protect your data, including encrypted transport (HTTPS), hashed and single-use sign-in tokens, and access controls limiting who within our organization can see personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children
The Service is not directed at, and is not intended for use by, individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [[CONTACT_EMAIL]] and we will take steps to delete it.
9. Your rights
Depending on where you are located, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Thailand-specific rights under the Personal Data Protection Act are set out in detail in our PDPA Notice.
To exercise any of these rights, contact us at [[CONTACT_EMAIL]]. We will respond within the timeframe required by applicable law.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in the Service or in applicable law. We will post the updated policy with a revised effective date, and where changes are material we will make reasonable efforts to notify you.
11. Contact
Questions about this Privacy Policy, or requests relating to your personal data, can be sent to [[CONTACT_EMAIL]].