Privacy notice

Controller and contact

Apichet Liawpirojh · Cosmo Mansion, Soi Pracha Uthit 45, Pracha Uthit Road, Bang Mot, Thung Khru, Bangkok.

Account and sign-in information

Configured Google, GitHub or ChatGPT sign-in supplies a provider account identifier and available profile information, such as verified email, name or avatar. Matching email alone never merges accounts. We keep linked identities, encrypted or hashed session credentials and sign-in timestamps to maintain your account. Provider OAuth access and refresh tokens are discarded after verification.

Email sign-in is available only when delivery is configured and enabled. It uses Resend and a single-use link valid for 10 minutes in the requesting browser. Email sign-in remains disabled for public use in this release. Website sign-in does not give us access to your AI-provider conversations or passwords.

Membership, Trial, Beta and computers

We store your membership status, verified paid expiry, payment references, accepted purchase-terms version, device identifiers, invitation acceptance/status, original Trial dates and extension/restart history with reasons and owner actions. Founding reservation and first-payment records enforce the 20-place offer. Full and accepted active Beta allow two authorized computers; Trial allows one.

These records support the requested account service and payment contract, and prevent fraud, repeated free trials and unauthorized device access. Signing in or downloading does not start Trial. Its original dates and history are retained when the owner extends or restarts it. The native renewal credential is protected with Windows DPAPI; a saved cache alone cannot unlock a fresh launch.

Optional mobile readings

Pairing and sync are optional. With your explicit pairing action, the server stores the computer name, identifier, token hashes and timestamps, plus the latest quota snapshot: provider, remaining percentage, source label, reset time and pause state. Only these fields are uploaded. Provider passwords, sessions, conversations and raw diagnostic files are excluded. Your computer must be on and online for new readings.

Payments and private support

Stripe handles payment details. This application stores customer, subscription, checkout, invoice and refund references and status; it does not store your card number or CVV. We store support messages, account contact, category and resolution timestamps. Only your account and the configured product owner can read your private tickets. Do not include passwords, keys, card details or sensitive personal data. Saving a ticket does not automatically send an email.

Required and optional data

Account identifiers, security credentials and authorized-device records are required for sign-in and entitlement. Payment references and term acceptance are required for paid access. Without them those functions cannot be provided. Mobile sync, display names and support messages are optional unless needed to investigate your request.

Service providers and transfers

Sites/OpenAI and Cloudflare provide hosting, database and infrastructure security. Stripe processes billing. Google, GitHub and ChatGPT process their sign-in service; avatars may load directly from the provider. Resend processes email sign-in when enabled. Email sent to the published Gmail address passes through your email provider and Gmail. These providers can process information outside Thailand under their own terms. Actual processing locations and transfer safeguards must be reviewed before paid launch.

Retention and deletion

The server keeps the latest snapshot per computer. You can delete synced readings and revoke their upload access from your account. Pairing links expire after 10 minutes; invitation links after 7 days. Expiration prevents use and does not guarantee immediate deletion of every record. Session renewal has a 7-day window and a maximum 30 days from fresh sign-in.

General support is reviewed for deletion or anonymization 12 months after resolution. Expired technical pairing and rate-limit records are reviewed after 30 days. Reviews are manual; this release has no scheduled purge. Open issues, unresolved disputes, financial evidence, privacy requests and records with unknown historical dates are excluded from routine deletion.

Account and linked-profile information is kept while your account is open. Account closure and erasure requests are verified and reviewed individually. Minimum Trial, Beta, device-revocation and Founding outcome records remain where necessary to enforce the once-only Trial or offer and prevent fraud; their necessity is reviewed annually. Account closure is not an automatic new Trial. Unnecessary profile or message content is considered separately from these minimum records.

Our baseline for payment, refund, purchase-consent and related accounting evidence is 5 years from the relevant accounting close or tax filing, using the later applicable date. Applicable tax/accounting duties or an unresolved dispute may require longer retention. This baseline is a retention policy, not a representation that every tax-registration rule applies to every customer or to this seller.

The live database is hosted through Sites and Cloudflare D1. Owner recovery exports are encrypted for the owner’s Windows profile and kept outside website and customer downloads. The target review period for owner recovery copies is 30 days; legal or unresolved-incident holds are documented separately. The provider’s actual backup window and a current full restore have not yet been verified. Deleting live data does not guarantee immediate deletion from provider backups; access requests can ask about the current backup position.

Your controls and rights requests

Your account can export available records, disconnect computers, revoke credentials and delete mobile sync. Exports exclude authentication secrets and other users. Deleting sync does not delete billing, support, account or Trial history. Contact the controller to request access, correction, deletion, restriction, objection, portability or withdrawal of applicable consent. We verify the requester and review applicable exceptions and obligations. The in-app export is not a guarantee of a complete statutory response.

You may contact Thailand’s Personal Data Protection Committee through its official channels.

Cookies and local storage

Functional session cookies maintain sign-in; a browser language setting remembers Thai or English until changed or cleared. Hosting security cookies may be used, including the observed Cloudflare __cf_bm. Platform sign-in cookies depend on the provider. No analytics or advertising pixels were found in this website release source.

Community feedback

Posting is optional. After you confirm publication, the title, message, category, status, vote count and owner reply are public. Your email is not displayed on the board.