Privacy policy
How Avalisa Estate collects, uses and protects personal data, in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
Last updated 2026-10-01
1. Who we are
Avalisa Estate (avalisa-estate.vercel.app) is a property listing and price-check service operated by Genie Benny Co., Ltd., Samut Prakan, Thailand. Genie Benny Co., Ltd. is the data controller for the personal data described here.
Contact: avalisa.estate@gmail.com
2. What we collect
Account: your email, the name you give us and the properties you save. Passwords are handled by our sign-in provider and we never see them.
Listings you submit: property details, photos, and the contact details you provide (name, phone, LINE ID, email).
Viewing requests: your name, contact details, message and preferred time.
Comments: the display name and text you post, plus a daily-rotating code made from your network address and browser, used only to stop spam. We do not store your IP address.
Payments: the plan, amount and status of your order. Card, PromptPay and PayPal details are handled by Stripe and PayPal; we never receive your card number.
Usage statistics: pages viewed, approximate country and city, language, device type, the site you came from and what you searched. No advertising or tracking cookies are used, and the visitor code changes every day.
Cookies: only what the site needs to work, such as your sign-in session and your language and theme choices.
3. How we use it
To run the site and your account, publish and review listings, pass your viewing request to the owner or agent of that listing, process payments for promotions, prevent spam and abuse, answer support requests, and improve the site using statistics that do not identify you.
Legal bases: performing our service for you (contract), our legitimate interest in a safe and working site, your consent where we ask for it, and legal obligations such as tax records.
4. Who we share it with
The owner or agent of a listing, when you ask for a viewing (only what they need to contact you).
Service providers that work for us: Supabase (database and sign-in), Vercel (hosting), Stripe and PayPal (payments) and Google (email). Some of them store data outside Thailand, for example in Singapore or the United States, under their own security and data-protection terms.
Authorities, when Thai law requires it.
We never sell personal data, and sellers' contact details are never published on the site.
5. How we protect it
Encrypted connections (HTTPS), database access rules so each person sees only their own records, staff-only access to contact details, and no payment card data on our servers.
6. How long we keep it
Account data while your account is open. Viewing requests and listing submissions for up to 2 years. Comments until they are removed. Payment records for as long as Thai tax law requires. Statistics are kept as totals; the daily visitor code cannot be linked across days.
7. Your rights
Under the PDPA you can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent. Email avalisa.estate@gmail.com; we reply within 30 days. You can also complain to the Personal Data Protection Committee (PDPC).
8. Children and changes
The service is meant for people aged 18 and over. If we change this policy, we post the new version here with a new date.