Privacy Policy

1. Personal data we collect

Information you give us:

• Waitlist and account details: email address, phone number, country, username, display name, profile photo, password and language preference.
• Identity verification (sellers and high-value bidders): legal name, date of birth, Thai national ID or passport details, a selfie or ID photo, and bank account or PromptPay details. We use licensed verification providers and keep only what we need.
• Payment information: payment card or account details are collected by our payment processors; we receive a token, the last digits and the card type, not the full card number.
• Shipping details: recipient name, address and phone number.
• Content: listings, photos, videos, live streams, chat messages, reviews, support requests and anything else you post or send through the Service.
• Communications: messages you send to us or other users, survey answers and contest entries.

Information collected automatically:

• Device and log data: IP address, device type, operating system, app version, browser, language, time zone, crash reports and the pages, streams and items you view or interact with.
• Activity: searches, bids, purchases, sales, follows, likes, stream watch time and notification interactions.
• Approximate location derived from your IP address or, if you allow it, precise location from your device to show local shipping options and prevent fraud.
• Cookies and similar technologies, described below.

Information from other sources: payment processors (payment status, chargebacks), shipping partners (tracking events), identity and fraud-prevention providers, social sign-in providers such as Google, Apple, Facebook or LINE if you use them to log in, and publicly available information.

2. How we use personal data

We use personal data for the following purposes and on the following legal bases under the PDPA:

• To provide the Service, including creating your account, running live auctions, processing bids, payments and payouts, arranging shipping and handling returns and disputes (performance of a contract).
• To verify identity, prevent fraud, shill bidding, money laundering and abuse, and keep the community safe (legitimate interests and legal obligation).
• To communicate with you about your account, orders, bids, streams you follow and changes to our terms (performance of a contract and legitimate interests).
• To send marketing, launch updates and personalised recommendations by email, SMS or push notification (consent, which you can withdraw at any time).
• To improve and develop the Service, including analytics, testing new features, training moderation and recommendation systems (legitimate interests).
• To moderate live streams and content, enforce our Terms of Service and protect our rights (legitimate interests and legal obligation).
• To comply with law, including tax, accounting, consumer protection, anti-money-laundering and court or regulator requests (legal obligation).

If you joined our waitlist before launch, we use your email and phone number to tell you when Pramoon goes live and to offer launch-day perks. You can unsubscribe from any message using the link or by contacting us.

3. How we share personal data

We do not sell your personal data. We share it only as described here:

• With other users: your username, profile photo, follower counts, listings, reviews and your bids and chat messages inside a stream are visible to other participants. When you buy, the seller receives your name, shipping address and phone number to deliver your order. When you sell, the buyer sees your shop name and may see your return address.
• With service providers who process data for us: cloud hosting, live video delivery, payment processing, identity verification, shipping and label printing, customer support tools, analytics, email, SMS and push notification providers. They may use the data only on our instructions.
• With payment partners and banks to complete payments, payouts, refunds and chargebacks.
• With authorities, regulators, courts or law enforcement when required by law, to respond to a lawful request, or to protect the rights, property or safety of Pramoon, our users or the public.
• With a buyer or successor if Pramoon is involved in a merger, acquisition, financing or sale of assets, subject to this policy.
• With your consent or at your direction, for example when you connect a social account or share a stream outside Pramoon.

4. Live streams and public content

Live streams are public to everyone on Pramoon. If you host a stream, your video, audio and anything visible in your camera frame is broadcast and may be recorded by us for replays, moderation and dispute resolution. If you join a stream, your username, bids, reactions and chat messages are visible to the host and other viewers and may be included in recordings and clips. Please do not share personal information in chat.

You can control some of this: choose a username that is not your legal name, use a non-identifying profile photo, and adjust notification and visibility settings in the app.

5. Cookies and similar technologies

We use cookies, local storage, SDKs and similar technologies to keep you signed in, remember your preferences (such as language and the launch countdown shown on our website), measure how the Service is used, prevent fraud and, where you consent, show you relevant marketing. You can manage cookies through your browser settings and, in the app, through your device's privacy settings. Blocking essential cookies may stop parts of the Service from working.

6. Data retention

We keep personal data only for as long as needed for the purposes above. In general: account data while your account is active and for up to 2 years after closure; transaction, tax and accounting records for 5 to 10 years as required by Thai law; identity verification records for as long as required by anti-money-laundering rules; live stream recordings for a limited period for moderation and disputes unless saved as a replay; and waitlist data until launch marketing ends or you unsubscribe. We may keep data longer to resolve disputes, enforce our terms or comply with law, and we may keep anonymised data indefinitely.

7. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, logging, tokenised payments and staff confidentiality obligations. No system is completely secure, so please use a strong unique password, enable two-factor authentication when available, and tell us immediately at privacy@pramoon.com if you suspect your account has been compromised. Where required by the PDPA, we will notify the Personal Data Protection Committee and affected users of a data breach.

8. International transfers

Pramoon is operated for Thailand, but some of our service providers (for example cloud hosting, video delivery and analytics) process data in other countries. Where personal data leaves Thailand, we take the steps required by Section 28 of the PDPA, such as transferring only to countries with adequate protection, using contractual safeguards or binding corporate rules, or relying on another lawful basis such as the performance of your contract or your consent.

9. Your rights

Under the PDPA you have the right to:

• access and obtain a copy of your personal data;
• have inaccurate or incomplete data corrected;
• request deletion or anonymisation of your data, subject to legal retention requirements;
• restrict or object to certain processing, including direct marketing and processing based on legitimate interests;
• receive your data in a portable, machine-readable format where processing is automated and based on consent or contract;
• withdraw consent at any time, without affecting processing that happened before withdrawal; and
• lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To exercise these rights, use the settings in the app or email privacy@pramoon.com. We will verify your identity and respond within 30 days, as the PDPA requires. We may refuse a request where the law allows, and we will tell you why.

10. Children

The Service is for adults. You must be at least 18 years old to create an account, bid or sell. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us at privacy@pramoon.com and we will delete it. Where Thai law treats a user under 20 as a minor for consent purposes, we obtain parental or guardian consent when required.

11. Marketing choices

You can turn off marketing emails using the unsubscribe link, stop SMS by replying as instructed or contacting us, and manage push notifications in your device settings. We will still send you service messages about your account, bids, orders and important changes.

12. Changes to this policy

We may update this Privacy Policy from time to time. If the changes are material, we will notify you in the app or by email before they take effect. The date at the top shows when the policy was last updated.

13. Contact us

For privacy questions, requests or complaints, contact our Data Protection Officer at privacy@pramoon.com. For general help, contact support@pramoon.com.