Privacy Policy
Last updated: 21 October 2026
Univerza Co., Ltd. ("we") operates the city information websites, including each city's website on the same platform (the "Service"). This policy explains what personal data we collect, why we collect it, who we share it with, and what rights you have under the Personal Data Protection Act B.E. 2562 (2019) (PDPA).
1. Data controller and contact
- Personal data controller: Univerza Co., Ltd.
- Address: [[Address]]
- Email for personal data matters: developer@univerza.co
2. Data we collect
2.1 Data you give us directly
| Data | Collected when |
|---|---|
| Display name, email, password (stored using one-way encryption, so no one can read it) | You register with email |
| Phone number | You link a phone number or sign in with an SMS OTP code |
| Name, email, profile picture, and Google account ID | You sign in with Google |
| The city you registered with | You register from a particular city's website |
| Posts, comments, images, and uploaded files | You use the community features or submit content to the system |
| Title, details, category, and location of the incident | You submit a complaint or report an incident |
| Business information and business contact details | You register, edit, or request advertising for a business |
2.2 Data generated by your use
- Sign-in data: We use an httpOnly cookie to remember that you are signed in. Scripts on the web page cannot read this cookie
- Usage statistics: We record events that happen on the page, such as seeing or clicking a content block, clicking menus, search terms, and changes to reading view, together with a random ID that is created and stored in your browser. This ID is not linked to your member account. We use it only to count whether visitors return
- Technical data: The server records IP addresses, browser type, and access times for security and to troubleshoot system problems
2.3 Data stored in your browser
The following data stays in your browser only (localStorage), unless it is sent back as described in Section 2.2. You can delete it yourself at any time by clearing the site's data in your browser
- Items you have saved
- The reading view you chose
- The zodiac sign you chose on the horoscope page
- The random ID used for statistics under Section 2.2
We do not use third-party cookies or third-party tracking scripts for advertising.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and maintaining accounts, verifying identity, and sending OTP codes | Performance of a contract (Terms of Use) |
| Displaying content you post, and handling complaints or incident reports you submit | Performance of a contract |
| Sending emails needed for your account, such as email verification or a notice when your email is changed | Performance of a contract |
| Reviewing content, preventing misuse, and keeping the system secure | Legitimate interests |
| Analyzing usage statistics to improve the Service | Legitimate interests |
| Complying with government orders or the law, such as the Computer Crime Act | Legal obligation |
4. Disclosure of data
We do not sell personal data. We disclose data only in the following cases
- Public: Your display name and the content you post in public areas, such as community posts, are visible to other users
- City teams: Staff authorized to manage the website of the city you belong to can see your account data and the matters you submit in that city, as far as necessary to review content and handle matters
- Service providers acting for us: Hosting and file storage providers, SMS providers, and email providers, who receive only the data needed to provide that service.
- Google: When you choose to sign in with Google, Google will know that you signed in to our Service, under Google's own privacy policy
- Government agencies: When there is an order or a legal obligation
If data is transferred to be stored or processed outside Thailand, we will follow the measures that the PDPA requires.
5. Retention
| Data | How long we keep it |
|---|---|
| Account data | For as long as the account is active, and deleted or anonymized within 5 years after the account is closed |
| Posted content | Until you delete it, or until we remove it under the governance policy |
| Complaints and incident reports | 1 year |
| Computer traffic data | At least 90 days under the Computer Crime Act, or longer as the law requires |
| Usage statistics | 12 months |
6. Your rights
You have the following rights under the PDPA
- Request access to, or a copy of, your data
- Request that your data be corrected so that it is accurate
- Request deletion or destruction of your data, or that it be made non-identifiable
- Request that the use of your data be suspended
- Object to processing that relies on legitimate interests
- Request data portability
- Withdraw consent you previously gave
- Lodge a complaint with the Personal Data Protection Committee Office
You can edit your name, email, phone number, and password yourself on the My Account page. For other requests, contact developer@univerza.co. We will reply within 30 days of receiving your request.
7. Security
- Data is transmitted over HTTPS
- Passwords are stored using one-way encryption
- Staff permissions are limited by role and by the city they manage
- Staff at the city administrator level must use two-factor authentication (2FA)
8. Minors
The Service is not designed for people under 12 years of age. If you are under that age, you must have the consent of your legal guardian before registering as a member.
9. Changes to this policy
When this policy changes, we will update the date above. If a change affects your rights, we will notify you on the website or by email before it takes effect.