Privacy Policy

VAIN is operated by Signa Asset Co., Ltd., a company registered in Thailand under registration number 0205567044915, with registered address at 88/1 Moo 1, Nong Prue, Chonburi 20150, Thailand.

For privacy questions or data requests, contact us at: privacy@usevain.com

We collect the following categories of personal data:

Account data

• Full name
• Email address
• Password (stored encrypted, never readable)
• Business name
• Business address
• Phone number

Google Business Profile data (when connected)

• Google account email address
• Google Business Profile name
• Business locations
• Google reviews including reviewer display names, ratings, review text, and timestamps
• Review response status
• Review reply drafts

Usage data

• Pages visited
• Features used
• Login timestamps
• Device type and browser
• IP address

Billing data

• Subscription plan
• Payment timestamps
• Invoice records
• Payment method type (we do not store full card numbers, these are handled by our payment processor)

We use your data only for the following purposes:

• To provide and operate the VAIN platform
• To display your Google reviews inside your dashboard
• To generate suggested review reply drafts
• To post approved replies to your Google Business Profile on your instruction
• To send transactional emails including account confirmations, billing receipts, and service notices
• To provide customer support
• To improve the platform based on usage patterns
• To comply with legal obligations

We do not use your data for advertising. We do not sell your data to any third party.

VAIN connects to Google Business Profile via Google OAuth. When you authorize this connection, VAIN may access:

• Your Google account email address
• Your Google Business Profile name and locations
• Your Google reviews including reviewer names, ratings, review text, and timestamps
• Your existing review responses
• The ability to post review responses on your behalf

VAIN uses this data only to:

• Display reviews in your VAIN dashboard
• Generate suggested reply drafts
• Post replies you have approved or enabled for automatic posting
• Track review response status
• Provide business insights within the platform

VAIN does not sell Google user data. VAIN does not use Google user data for advertising. VAIN does not share Google user data with any party except as described in section 5 of this policy.

You may revoke VAIN access to your Google account at any time by visiting your Google Account permissions at myaccount.google.com/permissions or by disconnecting from within VAIN settings.

VAIN complies with the Google API Services User Data Policy. Our use of Google user data is limited to the purposes described in this policy and is not used for any secondary purpose.

We share data with the following third party processors only where necessary to provide the service:

Anthropic (AI reply generation)

When you use VAIN Reviews, review text from your Google Business Profile may be sent to Anthropic PBC to generate suggested reply drafts. Anthropic processes this data only to provide the requested service. Where supported, VAIN uses API settings that prevent customer data from being used to train public AI models. Anthropic's privacy policy is available at anthropic.com/privacy.

Supabase (database and authentication)

Your account data and business data is stored securely using Supabase infrastructure. Supabase privacy policy is available at supabase.com/privacy.

Payment processor

Billing and payment data is handled by our payment processor. We do not store full payment card numbers. Details of our payment processor are available on request.

Email provider

Transactional emails are sent via a third party email delivery provider. Only your email address and the content of the email is shared for this purpose.

We do not use any other third party processors that have access to personal data without your knowledge.

We retain your data for the following periods:

• Account profile data: until you delete your account
• Google OAuth tokens: until you disconnect Google or delete your account
• Review data imported from Google: until you disconnect your location or delete your account
• AI generated reply drafts: up to 24 months or until deleted by you
• Usage and analytics logs: 12 months
• Billing records: 7 years as required by Thai accounting law
• Support communications: 24 months

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required for legal, tax, fraud prevention, or dispute resolution purposes.

Under Thailand's Personal Data Protection Act (PDPA), you have the following rights:

• Right to access: you may request a copy of the personal data we hold about you.
• Right to correction: you may request correction of inaccurate or incomplete data.
• Right to deletion: you may request deletion of your personal data where we no longer have a lawful basis to retain it.
• Right to restriction: you may request that we restrict processing of your data in certain circumstances.
• Right to data portability: you may request your data in a structured, commonly used format.
• Right to object: you may object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: you may lodge a complaint with the Personal Data Protection Committee of Thailand.

To exercise any of these rights, contact us at privacy@usevain.com. We will respond within 30 days and may request verification of your identity before actioning your request.

We implement appropriate technical and organizational measures to protect your personal data including:

• Encrypted data storage
• Encrypted data transmission via HTTPS
• Encrypted password storage
• Access controls limiting staff access to personal data
• Secure OAuth token storage
• Regular security reviews

No system is completely secure. If you believe your account has been compromised, contact us immediately at privacy@usevain.com.

To delete your account and request deletion of your personal data:

• Email privacy@usevain.com with subject line "Account Deletion Request"
• Include your registered email address
• We will confirm deletion within 30 days

To disconnect Google Business Profile access only without deleting your account:

• Go to Settings in your VAIN dashboard
• Select Connected Accounts
• Select Disconnect Google
• Or visit myaccount.google.com/permissions and remove VAIN access

VAIN uses essential cookies required for the platform to function including authentication session cookies. We do not use advertising cookies or tracking cookies for marketing purposes.

VAIN is a business platform and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice within the platform. Continued use of VAIN after changes take effect constitutes acceptance of the updated policy.

For all privacy related questions, data requests, or complaints:

Signa Asset Co., Ltd.

88/1 Moo 1, Nong Prue, Chonburi 20150, Thailand

Registration number: 0205567044915

Email: privacy@usevain.com