Privacy Policy

This Privacy Policy explains how BMS ("we", "the Platform") collects, uses, and protects information when you use our business management software — whether as a shop owner running a store on the Platform ("Shop Owner") or as a customer chatting with a shop that uses the Platform ("End Customer").

1. Information We Collect

From Shop Owners (account holders):
  • Account information: name, email, phone number, password (stored as a salted hash, never in plain text).
  • Shop information: shop name, staff accounts, roles/permissions, subscription plan.
  • Channel credentials you connect: access tokens for LINE Official Account, Facebook Page, Instagram, and TikTok — used only to send/receive messages on your behalf.
  • Business data you enter: products, prices, inventory, orders, suppliers, and purchase records.
From End Customers (people chatting with a shop):
  • Information shared in conversation: name, phone number, shipping address, and messages sent to the shop.
  • Channel identifiers (e.g., LINE user ID, Facebook PSID) needed to route replies back to the correct person.
  • Payment slip images you upload, used to verify a payment (processed by AI, see Section 4).
Important: for End Customers, the Shop Owner you are chatting with is the data controller of your information under applicable law (e.g., Thailand's PDPA). We process this data on the Shop Owner's behalf and instructions — see Section 3.

2. How We Use Information

  • Operate the service: run the inbox, product/order/inventory management, and reporting features you use.
  • AI-assisted replies: when a Shop Owner enables AI auto-reply, customer messages are sent to our configured AI provider (for example Anthropic/Claude or DeepSeek) to generate a suggested or automatic response, and to look up product/stock information.
  • Payment verification: uploaded payment slips are analyzed by AI to help confirm amount and reference — this assists the Shop Owner but does not replace their own verification.
  • Security and abuse prevention: detect suspicious activity, enforce rate limits, and keep an audit log of admin actions within each shop.
  • Support and communication: respond to support requests and send service-related notices.
  • Improve the Platform: understand usage patterns and fix issues (using technical/aggregate data, not message content, wherever possible).

3. Multi-Tenant Data Isolation

  • Each shop's data is logically isolated by tenant and enforced at the database level (row-level security) — one shop cannot query another shop's products, orders, customers, or conversations.
  • Platform administrators do not browse shop data directly; inspecting a shop's data requires an explicit, logged "enter tenant" action, and every such action is recorded in an audit trail.
  • Shop staff access is controlled by role-based permissions configured by the Shop Owner/Administrator of that shop.

4. Third-Party Services We Use

  • Messaging channels: LINE Messaging API, Meta (Facebook/Instagram) Graph API, TikTok — to send and receive messages on behalf of a shop.
  • AI providers: configured large-model and OCR providers such as Anthropic (Claude), DeepSeek, or Alibaba Cloud Model Studio (Qwen OCR) — to generate AI replies and analyze payment slip images, when a Shop Owner enables these features.
  • Optional public-site analytics: when Google Analytics is configured, it loads only after you allow analytics in PDPA settings. We send the public page path, a coarse referral category and contact/demo/signup link clicks. We do not send form text, calculator inputs, raw query strings, account identifiers or private business pages. Google may process technical connection information and analytics cookies. Advertising signals are disabled. You may withdraw permission in the footer; future collection stops and this integration's cookies are cleared. The consent choice and analytics cookies expire after 180 days. A link click is not proof of a completed registration or sale.
  • Infrastructure: our hosting and database providers, used to run and store the Platform's data securely.
  • We do not sell personal data to third parties, and we do not use conversation content for advertising.

5. Data Retention & Deletion

  • We retain shop and customer data for as long as the shop's account is active, or as needed to comply with legal, tax, or accounting obligations.
  • Customer records are soft-deleted (marked inactive, not immediately erased) so that order history and accounting records remain consistent; hard deletion can be requested via Support.
  • Shop Owners can request export or deletion of their shop's data by contacting Support.
  • End Customers who want their data removed should first contact the shop they interacted with; if unresolved, contact us via Support and we will assist.

6. Data Security

  • Passwords are hashed; channel access tokens and other secrets are stored encrypted at rest.
  • Access to production data is restricted to authorized personnel and logged.
  • No method of storage or transmission is 100% secure — we apply reasonable, industry-standard safeguards but cannot guarantee absolute security.

7. Your Rights

  • Depending on your jurisdiction and role (Shop Owner or End Customer), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing.
  • To exercise these rights, contact us via the Support page. We will respond within a reasonable timeframe and may need to verify your identity or your relationship to the relevant shop first.

8. Changes to This Policy

We may update this Privacy Policy as the Platform evolves. Material changes will be reflected by updating the date below; continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
By using this Platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions, please contact us via the Support page.