Privacy Policy

SoiPass helps people discover local perks and deals from venues in Thailand — we're currently launching in Pattaya, with more cities planned. If you have any question about this policy or your data, contact us at hello@soipass.com.

• Your email address, used for passwordless ("magic-link") sign-in.
• Profile details you choose to provide: display name, preferred city, and interests.
• The deals you save/favourite.
• Details you submit through our List your venue form, if you apply as a business.
• Basic product analytics — page/screen views, searches, category selections, saves/unsaves, and sign-up/sign-in events.
• An anonymous/session identifier (stored as a cookie) used for our first-party analytics — this identifies a browser session, not you personally.
• Basic technical data where tracked, such as device type, browser, and operating system.
• Approximate location — such as country, region, or city — derived from technical request data provided by our hosting/CDN provider, where available. This is city-level at best, not precise GPS positioning.
• UTM parameters, referrer, and landing page, where available, to understand how visitors find SoiPass.
• Interactions with our "Add SoiPass to your phone" prompts — such as whether the prompt was shown, clicked, or led to an install — so we can understand and improve that experience.
• Your language preference, stored on your device (cookie and/or local storage), so the app opens in your chosen language next time.

• No passwords — sign-in uses a one-time magic link instead.
• No payment data — SoiPass does not process payments today.
• No exact GPS or precise location data — only approximate, city-level location derived from technical request data, where available.
• No raw IP addresses stored by our current analytics — where we use IP data at all, we store only a one-way salted hash, never the address itself.
• No invasive device fingerprinting (canvas, font, or hardware probing).

• To provide and secure your account.
• To save and show your favourite deals.
• To improve recommendations and content over time.
• To understand how people use SoiPass and improve the product.
• To manage and review venue applications.
• To contact venues that apply to be listed.
• To keep the service secure and prevent abuse.
• To understand our audience and demand (e.g. device mix, approximate location, install behaviour) for product decisions and operational and investor reporting — never sold or shared with advertisers.

SoiPass aims to handle personal data responsibly in line with the spirit of Thailand's Personal Data Protection Act (PDPA). As an early-stage startup, we don't claim full formal legal compliance certification — but we take data handling seriously and will keep improving this as SoiPass grows. You can always contact us with privacy questions or requests.

• Supabase — hosting, authentication, and our database.
• Netlify — website hosting.
• Resend — sending transactional emails (e.g. magic links, venue application notifications).
• Our analytics is first-party, stored in our own Supabase database — we don't use third-party trackers or ad networks.
• We do not sell personal data to advertisers.

• Account and profile data is kept while your account is active.
• Venue application details are retained as needed for admin review and our business records.
• Analytics data is retained for product and operations purposes unless deleted or aggregated in the future.

You can ask us to access, correct, or delete your personal data, or object to/withdraw consent for certain uses where applicable. Email hello@soipass.com and we'll get back to you.

We may update this policy as SoiPass develops new features. We'll update the date at the top of this page when we do.