ChaoMoto (chaomoto.com and app.chaomoto.com) is a software-as-a-service operated by Akaris Property Co., Ltd., a company registered in Thailand (registration no. 0845565018229), 214/58 Moo 1, Koh Phangan, Surat Thani 84280, Thailand ("we", "us"). This policy explains how we handle personal data under the Thai Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
Two roles
For the people who create a ChaoMoto account (shop owners and their staff), we are the data controller.
For the data that a rental shop enters about its own customers (names, phone numbers, passport photos, scooter photos and videos, signatures, payments), the shop is the data controller and we act as its data processor. We only process that data on the shop's instructions, to provide the service. Customers of a shop should contact the shop directly to exercise their rights; we will help the shop answer.
Data we collect about account holders
Identity and contact: first name, last name, company (optional), email address, phone number with country code, address.
Account: password (stored only as a secure hash by our authentication provider), shop membership, role and access rights.
If you sign in with LINE: your LINE user ID, display name, profile picture and email address, if you allow LINE to share them.
Billing: subscription plan, number of scooters billed, payment status. Card details are handled by our payment provider and are never stored by us.
Technical: IP address, browser type, and logs needed for security and debugging. The site stores your language choice and your login session in your browser's local storage. We do not use advertising or tracking cookies.
Why we use it (purposes and legal basis)
To create and run your account and provide the service (performance of a contract).
To send service emails: account confirmation, password reset, invitations, billing notices (performance of a contract).
To bill the subscription and keep accounting records required by Thai tax law (legal obligation).
To keep the service secure, prevent fraud and fix errors (legitimate interest).
To send product news, only if you agree; you can unsubscribe at any time (consent).
Who we share it with
We do not sell personal data. We use the following service providers, who process data on our behalf under contract:
Supabase (database, authentication and photo storage, servers in Singapore).
Cloudflare (website hosting, security and video storage in the Asia-Pacific region).
Resend (sending of service emails).
Stripe (subscription payments, when enabled).
LINE / LY Corporation (only if you choose to sign in with LINE).
Google Fonts (fonts loaded by the website).
Some of these providers are based outside Thailand (for example in Singapore, the United States or Japan). When data is transferred abroad, we rely on the providers' contractual safeguards as permitted by the PDPA. We may also disclose data when required by Thai law or a competent authority.
How long we keep it
Account data: for as long as your account is active, then deleted within 90 days after the account is closed, except where the law requires us to keep it.
Rental data entered by a shop: kept for the shop until the shop deletes it or closes its account, then deleted within 90 days.
Billing and accounting records: kept for the period required by Thai law (generally 5 years).
Backups are overwritten on a rolling basis.
Security
Data is encrypted in transit (HTTPS). Each shop's data is isolated by access rules in the database: a shop can only see its own data, and staff only see what their access rights allow. Photos and videos are stored privately and are only shown to signed-in members of the shop.
Your rights
Under the PDPA you can ask to access your data, get a copy, correct it, delete it, restrict or object to its use, move it to another service, and withdraw your consent at any time. You can also complain to the Personal Data Protection Committee (PDPC) of Thailand. To exercise your rights, write to contact@akarisproperty.com. We answer within 30 days.
Children
ChaoMoto is a business tool and is not meant for people under 20 years old.
Changes
We may update this policy. The date at the top shows the latest version. If a change is important, we will tell account holders by email or in the app.
