Privacy Policy

Do9ood is a social platform for sharing everyday acts of goodness. We built the system with "Privacy by Default" — anonymous mode is the default, and you always control who sees your stories.

This policy explains the data we collect, how we use it, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

Data you provide directly

Email and name (from Clerk Authentication at signup)

Deed content: story, category, impact, media (images/video)

Privacy settings: visibility mode (anonymous / public / followers)

Interests selected during onboarding

Data generated by use

Thanks given and received

Campaigns joined

Standard usage logs (IP address, browser, timestamp) for security and debugging

Data we do not collect

Passwords (fully managed by Clerk)

Credit card information (fully managed by Stripe — we never access it)

Real-time location data

We use your data to:

Deliver a feed filtered by your categories of interest

Send Thanks notifications (if you enable them)

Review and moderate content per community policy

Analyze aggregate usage to improve the product

Prevent abuse and spam

We do not sell your personal data to third parties, and we do not use your data for behavioral advertising.

Do9ood is one of the few platforms that defaults to anonymous:

Default: your deed is shown without identifying you

You choose to be public: switch to "Public" or "Followers only" at any time

Automatic face blur: when you upload a photo, the app automatically detects and pixelates faces directly in your browser — the original image is never sent to the server

Backend data: even if a deed is anonymous, it is still linked to your account so you can edit or delete it, and to prevent abuse

Clerk (Authentication)

Login data (email, session) is managed by Clerk Inc. See Clerk's privacy policy at clerk.com/privacy.

Cloudflare

D1 (Database): deed and onboarding data stored in Cloudflare D1

R2 (Storage): media files (images, video) stored in Cloudflare R2

Workers: application runs on Cloudflare's global Edge Network

Workers AI: every deed is processed by AI to check safety and classify content — content is not retained after processing. When you use "Help me write", your typed note is sent to Workers AI and deleted immediately after the response is returned

Stripe (Payments)

Supporter payment data is handled by Stripe Inc. See stripe.com/privacy.

Brevo (Email)

Notification emails (e.g. "someone thanked your deed") are sent via Brevo. See brevo.com/legal/privacypolicy.

International Data Transfers

Your data may be processed outside Thailand via Cloudflare's Edge Network, which spans multiple regions including Southeast Asia, the United States, and Europe. These transfers are governed by Cloudflare's Data Processing Addendum, which meets internationally recognized privacy standards. We only work with sub-processors that maintain certified security and privacy practices.

Do9ood requires posters to:

Confirm consent every time before posting a deed featuring another person

Blur or crop the faces of anyone who has not consented before publishing

Not post identifying information of others without permission

If you appear in content without your consent, contact privacy@do9ood.com — we will act within 48 hours.

Active accounts: data is kept as long as the account is active

Account deletion: deeds and personal data deleted within 30 days (except security logs, kept 90 days)

System logs: kept for up to 90 days

Anonymous aggregate data: may be kept as anonymized statistics

Under PDPA you have the right to:

Access: request a copy of your personal data — contact privacy@do9ood.com

Rectify: correct inaccurate data directly in Settings

Erase: delete your account and all data yourself at Settings → Danger Zone → "Delete account permanently", or contact privacy@do9ood.com

Portability: export your deed data as JSON — contact privacy@do9ood.com

Object: object to certain types of data processing — contact privacy@do9ood.com

Withdraw consent: withdraw consent at any time without affecting prior processing

Complain: lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) at pdpc.or.th

Data deletion process

When you delete your account via Settings or by email request, we will:

Remove your publicly visible deeds within 24 hours

Delete your profile and settings data within 7 days

Delete all data from primary systems within 30 days

Remove security logs within 90 days

We use only essential cookies:

Session cookie (Clerk): to maintain login state

Preference cookie: to save UI settings (if any)

We do not use tracking cookies, third-party analytics cookies, or advertising cookies.

Do9ood is open to all ages, but users under 20 (or the age specified by local law) should obtain parental consent before registering, per Section 20 of the PDPA.

If we make significant changes to this policy, we will notify you by email at least 14 days in advance. Continued use after the effective date constitutes acceptance of the new policy.

We process your personal data on the following legal bases:

Consent: deed content, photos, and interests you select — you give explicit consent at signup and when posting

Contract: notification emails, account management, and Supporter payments — necessary to provide the service you requested

Legitimate interest: security logs, spam prevention, and aggregate statistical analysis — to protect the platform and all users

Legal obligation: records required by law, such as transaction logs

You may withdraw consent at any time via Settings or by contacting privacy@do9ood.com