Version 2.0, effective 6 November 2026
This policy explains how Thanatthorn Jangjai trading as Ahangsa Property (อหังสา พร็อพเพอร์ตี้) collects, uses and discloses the personal data of website visitors, people who enquire or ask us to find a unit, property owners and our team, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). The Thai version prevails if the two differ.
1. Data controller
The data controller is Thanatthorn Jangjai (ธนัชธรณ์ แจ้งใจ), an individual running a real-estate brokerage under the name Ahangsa Property (อหังสา พร็อพเพอร์ตี้).
For anything about your personal data or your rights: e-mail contact@ahangsa.com or phone 082-284-9844 or LINE @274qaljz.
2. What we collect at each point of contact
Where: Enquiry form (listing page) and sending your saved list
What we collect: Name, phone, LINE ID, e-mail (only what you fill in), preferred channel, message, budget, move-in date, the listing(s), the first page you landed on, the referring site and campaign (utm) parameters in the link if any, the time, and a hash of your IP address
How: From you, when you submit
Where: Find-me-a-room form
What we collect: Name, phone, LINE ID, e-mail, budget min / max, areas, bedrooms, move-in date, notes, the time, and a hash of your IP address
How: From you, when you submit
Where: List-your-property form (text)
What we collect: Owner name, phone, LINE ID, e-mail, project name, rent and / or sale, asking price, bedrooms, size, floor, available date, notes, the time, and a hash of your IP address
How: From you, when you submit
Where: List-your-property page with photos
What we collect: Name, phone, LINE ID, Facebook, e-mail, property details, price, available date, photos, your acknowledgement of the fee terms and consent record (text, version, time), and a hash of your IP address
How: From you; photos are kept in private storage only administrators can open
Where: Clicks on contact buttons (call, LINE, e-mail, form, share, save)
What we collect: The kind and position of the button, the page, its language, the listing if any, the time, and a hash of your IP address. No IP address, no browser type and no name is stored
How: Automatically when you click (not recorded for logged-in staff)
Where: Viewing a listing
What we collect: The listing, the date and a hash of your IP address (to count viewers)
How: Automatically when the listing page opens
Where: Property-owner data obtained indirectly
What we collect: Name, phone, LINE ID, e-mail, Facebook profile link, unit details and photos, and the original post text
How: Copied by our team from posts the owner published publicly in Facebook groups for renting / selling condos (PDPA s.25), see section 4
Where: Service-provider logs
What we collect: IP address, browser type, page requested and time
How: Recorded automatically by our hosting provider (Vercel); we do not copy them into our database
Where: Team accounts
What we collect: Name, e-mail, phone, LINE ID, role, password (stored one-way hashed by the authentication service) and the change log of the back office
How: From team members and their use of the system
| Where | What we collect | How |
|---|---|---|
| Enquiry form (listing page) and sending your saved list | Name, phone, LINE ID, e-mail (only what you fill in), preferred channel, message, budget, move-in date, the listing(s), the first page you landed on, the referring site and campaign (utm) parameters in the link if any, the time, and a hash of your IP address | From you, when you submit |
| Find-me-a-room form | Name, phone, LINE ID, e-mail, budget min / max, areas, bedrooms, move-in date, notes, the time, and a hash of your IP address | From you, when you submit |
| List-your-property form (text) | Owner name, phone, LINE ID, e-mail, project name, rent and / or sale, asking price, bedrooms, size, floor, available date, notes, the time, and a hash of your IP address | From you, when you submit |
| List-your-property page with photos | Name, phone, LINE ID, Facebook, e-mail, property details, price, available date, photos, your acknowledgement of the fee terms and consent record (text, version, time), and a hash of your IP address | From you; photos are kept in private storage only administrators can open |
| Clicks on contact buttons (call, LINE, e-mail, form, share, save) | The kind and position of the button, the page, its language, the listing if any, the time, and a hash of your IP address. No IP address, no browser type and no name is stored | Automatically when you click (not recorded for logged-in staff) |
| Viewing a listing | The listing, the date and a hash of your IP address (to count viewers) | Automatically when the listing page opens |
| Property-owner data obtained indirectly | Name, phone, LINE ID, e-mail, Facebook profile link, unit details and photos, and the original post text | Copied by our team from posts the owner published publicly in Facebook groups for renting / selling condos (PDPA s.25), see section 4 |
| Service-provider logs | IP address, browser type, page requested and time | Recorded automatically by our hosting provider (Vercel); we do not copy them into our database |
| Team accounts | Name, e-mail, phone, LINE ID, role, password (stored one-way hashed by the authentication service) and the change log of the back office | From team members and their use of the system |
A hash of your IP address is computed from the address and a secret of ours; it lets us count and prevent abuse without storing the address itself.
We do not collect payment card data or sensitive data under PDPA s.26.
3. Purposes and lawful bases
Purpose: Replying, finding a unit you asked for, arranging viewings
Lawful basis: Steps at your request before entering a contract (s.24(3))
Purpose: Taking a property on, assessing it, replying, preparing a brokerage agreement
Lawful basis: Steps at your request before a contract (s.24(3)); for the photo submission page also your consent as worded in the form (s.19)
Purpose: Contacting owners who advertised publicly, to offer brokerage and market that unit
Lawful basis: Legitimate interest (s.24(5)), using only what the owner published, and stopping when the owner objects
Purpose: Performing rental / sale contracts we broker, and keeping accounting and tax records
Lawful basis: Contract (s.24(3)) and legal obligation (s.24(6))
Purpose: Statistics of views and contact clicks to improve the site, and preventing spam / abuse
Lawful basis: Legitimate interest (s.24(5))
Purpose: Managing team accounts, access control and audit
Lawful basis: Working arrangements (s.24(3)) and legitimate interest (s.24(5))
| Purpose | Lawful basis |
|---|---|
| Replying, finding a unit you asked for, arranging viewings | Steps at your request before entering a contract (s.24(3)) |
| Taking a property on, assessing it, replying, preparing a brokerage agreement | Steps at your request before a contract (s.24(3)); for the photo submission page also your consent as worded in the form (s.19) |
| Contacting owners who advertised publicly, to offer brokerage and market that unit | Legitimate interest (s.24(5)), using only what the owner published, and stopping when the owner objects |
| Performing rental / sale contracts we broker, and keeping accounting and tax records | Contract (s.24(3)) and legal obligation (s.24(6)) |
| Statistics of views and contact clicks to improve the site, and preventing spam / abuse | Legitimate interest (s.24(5)) |
| Managing team accounts, access control and audit | Working arrangements (s.24(3)) and legitimate interest (s.24(5)) |
We do not use your data for advertising or marketing messages, we do not sell it, and we make no automated decisions that affect you.
4. Owner data obtained from public posts (PDPA s.25)
Source: rental / sale posts that owners publish themselves in public Facebook groups, with contact details so that interested people can reach them.
Purpose: to contact the owner to offer our brokerage service and, once the owner agrees, to list the unit on our website (the owner's contact details are never shown on public pages).
If you are an owner and do not want us to keep or use your data, tell us via e-mail contact@ahangsa.com or phone 082-284-9844 or LINE @274qaljz. We will stop contacting you and delete your data, except what the law requires us to keep.
5. Recipients, processors and transfers abroad
Provider: Supabase
Used for: Database, authentication, file storage
Data involved: Everything in section 2
Where processed: Singapore
Provider: Vercel
Used for: Website hosting and system logs
Data involved: Requests to the site (incl. IP address and browser type)
Where processed: Singapore (the site's servers) and the provider's global network
Provider: Upstash (via Vercel KV)
Used for: Short-lived rate-limit counters (expire within 1 hour)
Data involved: IP-address hashes only
Where processed: The provider's region
Provider: Cloudflare
Used for: Domain name system (DNS) only; website content and forms do not pass through it
Data involved: Domain-name lookups (the IP address of your DNS resolver)
Where processed: The provider's global network
Provider: Resend
Used for: E-mailing our team about enquiries, find-me-a-room requests and listed properties (sent to our own inbox only)
Data involved: Name, contact details and what you entered
Where processed: United States
Provider: OpenStreetMap
Used for: The map on listing and condo pages (loads when you scroll to it)
Data involved: Your IP address and browser data sent to the map servers directly
Where processed: OpenStreetMap Foundation servers
Provider: LINE
Used for: Only when you choose to contact us on LINE
Data involved: What you send in the chat, under LINE's policy
Where processed: As set by LINE
Provider: Anthropic
Used for: An AI assistant in the back office that helps our team extract details from copied listing posts
Data involved: Post text, which may include an owner's name and contact details (never data from the website forms)
Where processed: United States
| Provider | Used for | Data involved | Where processed |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Everything in section 2 | Singapore |
| Vercel | Website hosting and system logs | Requests to the site (incl. IP address and browser type) | Singapore (the site's servers) and the provider's global network |
| Upstash (via Vercel KV) | Short-lived rate-limit counters (expire within 1 hour) | IP-address hashes only | The provider's region |
| Cloudflare | Domain name system (DNS) only; website content and forms do not pass through it | Domain-name lookups (the IP address of your DNS resolver) | The provider's global network |
| Resend | E-mailing our team about enquiries, find-me-a-room requests and listed properties (sent to our own inbox only) | Name, contact details and what you entered | United States |
| OpenStreetMap | The map on listing and condo pages (loads when you scroll to it) | Your IP address and browser data sent to the map servers directly | OpenStreetMap Foundation servers |
| LINE | Only when you choose to contact us on LINE | What you send in the chat, under LINE's policy | As set by LINE |
| Anthropic | An AI assistant in the back office that helps our team extract details from copied listing posts | Post text, which may include an owner's name and contact details (never data from the website forms) | United States |
Inside our organisation only Ahangsa Property (อหังสา พร็อพเพอร์ตี้) team members who need it can access your data. We may disclose data where the law or a competent authority requires it.
For transfers to Singapore, the United States and the other places in the table we use providers with recognised security standards and data-processing terms, and we follow the PDPA's rules on cross-border transfers.
6. How long we keep data
- Enquiries, find-me-a-room requests and property listings submitted to us: at most 2 years after the last contact
- Records of rental / sale contracts we broker: for the period accounting and tax law requires
- Owner data from public posts: at most 2 years after the last contact, or until the owner objects
- IP-hash statistics (views and contact clicks): at most 2 years
- Photos of a submission we declined: deleted 30 days after the decision
- Rate-limit counters: expire by themselves within 1 hour
- Team accounts: while active and at most 2 years after the account is closed
Deletion at the end of these periods is currently done by our team (only the declined photos and the counters are deleted automatically), and we delete at once when you ask, unless the law requires us to keep the data.
7. Your rights
- Access your data and get a copy
- Have it corrected and kept up to date
- Have it deleted, destroyed or anonymised
- Have its use restricted
- Object to its collection, use or disclosure (including owner data from public posts, section 4)
- Receive it, or have it sent to someone else, in a machine-readable format
- Withdraw consent you gave (photo submission page) at any time, without affecting what was done before
How: contact e-mail contact@ahangsa.com or phone 082-284-9844 or LINE @274qaljz with your name and the channel you used with us. We may ask for more to verify who you are, and we reply within 30 days of receiving your request.
If you think we do not comply with the PDPA, you may complain to the Office of the Personal Data Protection Committee (PDPC).
9. Security
- Encrypted connections (HTTPS) and role-based access for our team
- Owner and enquirer contact details never appear on public pages, and other people's phone numbers, LINE IDs and e-mails in listing descriptions are removed before display
- IP addresses are hashed with a secret before storage, and form submissions are rate-limited
- Submitted photos are kept in private storage, and back-office changes are logged
If a personal data breach happens, we act and notify as the law requires.
10. Minors
Our service is meant for adults. If you are under 20, please have a parent or guardian contact us. If we learn that we hold a minor's data without the parental consent the law requires, we delete it.
11. Changes to this policy
We may update this policy; the version and effective date are shown on this page. The website's terms of use are at /terms.
Version 2.0, effective 6 November 2026.