NIVAS — Privacy Notice
1. Who we are.
Joinme Estate Co., Ltd. (company registration no. 0105562009870), 50/477 Soi Krungthep Kreetha 7, Hua Mak, Bang Kapi, Bangkok 10240, Thailand ("NIVAS", "we") is the data controller for your account data, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Contact: contact@nivasagent.com.
2. Data about you.
- Account and profile: name or company, e-mail, password (stored encrypted by our login provider), phone, LINE, WhatsApp, photo or logo, social links, profile texts and video you add, your organisation and role, invitation code used.
- Your work in the app: listings, deals, calendar, documents, credits history, messages you send to support, feedback.
- NIVAS Bot: the names you give your computers, when they were last seen, the Facebook account labels you add, groups, posting history and bot status. Never your Facebook password or session.
- Technical: app error reports (screen, error message, browser type), with e-mails, phone numbers and links removed, kept 30 days. We use no advertising or analytics trackers.
3. Data you store about other people.
Clients, property owners and other agents you add (names, phone, LINE, e-mail, social accounts, nationality, budget, notes) belong to you or your organisation, who is their data controller. NIVAS processes them only on your instructions to provide the Service. Owner contact details are kept in a restricted area that only authorised members of your organisation can read.
4. Data from public posts.
To help agents find properties, we collect property posts published in public Facebook groups, including the poster's name, the contact details written in the post and the post link. We rely on our legitimate interest. You can ask us to remove your details at contact@nivasagent.com.
5. Why we use your data.
To create and run your account and the Service (contract); to secure it, prevent abuse and fix errors (legitimate interest); to send service e-mails such as confirmation and password reset (contract); to meet legal obligations. We do not sell personal data and do not use it for advertising.
6. What is public.
When you share your agent card or a property page, it shows your name, company, phone, LINE, WhatsApp, photo and the links you chose — never your e-mail. Listing photos are stored at public addresses: anyone with a photo's link can see it.
7. Who we share with.
Only service providers that run the Service for us: Supabase (database and login), Netlify (website hosting), Cloudflare (domain and photo storage), Resend (e-mails), Anthropic (optional AI writing help; phone, e-mail and LINE are removed before text is sent), Telegram (only if you connect bot notifications) and Google Drive (only the folder links you give us to import photos). Within your organisation, its administrators see the shared work. NIVAS staff access data only to provide support or keep the Service safe. We may disclose data when the law requires it.
8. Transfers outside Thailand.
Our providers may store data on servers outside Thailand. We use providers that apply recognised security and data-protection safeguards, as the PDPA requires.
9. How long we keep data.
While your account is active. Error reports: 30 days. When you ask for deletion, we delete or anonymise your account data within 30 days, except what the law requires us to keep; backups are overwritten on their normal cycle. Data of an organisation is kept while the organisation uses NIVAS.
10. Security.
Encrypted connections, access rules on every table so each account sees only what it is allowed to, restricted storage for owner contacts, and no storage of Facebook credentials.
11. On your device.
The app keeps your login session and preferences (language, theme, layout) in your browser's local storage. No advertising cookies.
12. Your rights.
You can ask to access or get a copy of your data, correct it, move it, object to or restrict its use, have it deleted, and withdraw any consent. Request account deletion in Settings › « Request account deletion », or write to contact@nivasagent.com. We answer within 30 days. You can also complain to the Office of the Personal Data Protection Committee (PDPC).
13. Children.
NIVAS is for professionals aged 20 or more and is not intended for children.
14. Changes.
We will tell you in the app before an important change to this notice.