Privacy policy

01Who we are

Faodu is a service for monitoring online product prices and stock. This policy covers the Faodu website and app. Faodu is the data controller for the personal data described here. For anything about your personal data, contact [email protected].

02What we collect

Account

Username, email address, display name and profile picture. If you sign up with a password, we store only a hash of it, never the password itself.

Sign in with Google

Your Google account ID, name, email address and profile picture (the openid, email and profile scopes), nothing more.

What you monitor

Product links, the fields and conditions you set, your instructions to the AI, screenshots used to pick fields, and the result of each check, such as price, stock status and text read from the page.

Page access

Browser Steps, which may include a shop username or password you enter, and proxy settings. Secret values are encrypted and never sent back to the browser.

Notifications

The email address that receives alerts (verified first), your Discord webhook or other webhook, your alert rules, and delivery history.

Support chat

Messages and images you send in the in-app support chat.

Payments

Stripe processes payments. We never receive or store card numbers; we keep only your Stripe customer and subscription IDs, your plan and its payment status.

Security and usage

The IP address and browser (user agent) of each session, a log of security events such as sign-ins and password changes, and usage counters for plan limits.

03Cookies and browser storage

The Faodu app sets only two cookies, both required for it to work: tl_session keeps you signed in and tl_csrf protects against forged requests. Your browser also remembers your chosen theme and language in localStorage.

We use no advertising cookies, analytics cookies or third-party tracking pixels.

04How we use it

Running the service

Creating and maintaining your account, checking pages on schedule, keeping history and sending the alerts you set up (performance of a contract).

Billing

Managing plans, payments and legally required records (contract and legal obligation).

Security

Preventing unauthorised access and misuse, and finding and fixing problems (legitimate interests).

Talking to you

Answering support chat, telling you about your account and changes to the service, and showing news or promotions in the in-app bell (contract and legitimate interests).

We do not use your data for targeted advertising.

05Service providers

We share data with these providers only as far as needed to run Faodu. Each handles it under its own terms.

Google

Verifies your identity when you sign in with Google, and delivers alert emails through the Gmail API from Faodu’s own account, so recipient addresses and alert content pass through Google.

OpenAI and DeepSeek

When you ask the AI to analyse a page, we send that page’s URL and content with the fields and instructions you set to the configured AI provider. We do not send your name, email address or Faodu account details, but if the page itself shows personal data, for example after a login, that data is sent too.

Stripe

Takes payments and manages subscriptions.

Amazon Web Services

Stores images from support chat and announcements in private storage (S3).

Discord and your webhooks

When you turn them on, alert content is sent to the channel or URL you configured.

Hosting

The servers and database the service runs on.

When Faodu checks a page, the shop receives a request from our servers or from your proxy, along with whatever Browser Steps enter, such as your username and password for that shop.

We may disclose data when required by law, a court order or a competent authority.

06Data from your Google account

Faodu’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google data only to create your account, sign you in and show your name and picture. We do not sell it, use it for advertising, or let people read it unless you agree, it is needed for security, or the law requires it.

Faodu never asks to read, send or manage email in your Gmail account; alert emails come from Faodu’s own account. You can disconnect Faodu from Google at myaccount.google.com/permissions.

07International transfers

Some of the providers above process data outside Thailand, for example in the United States, and in the People’s Republic of China for DeepSeek. We send only what the service needs and choose providers that protect data under their own terms.

08How long we keep it

• Account and settings: for as long as your account is open.
• Check history: for your plan’s history period; older history is deleted automatically every day.
• Sessions: until they expire, you sign out, or you revoke them.
• Alert content: deleted once delivery finishes; only the status stays in delivery history.
• Payment records: as long as tax and accounting law requires.

When you ask us to delete your account, we delete or anonymise your data within 30 days, except records the law requires us to keep and backups, which are overwritten on their normal cycle.

09Security

Data travels over HTTPS. Passwords and session tokens are stored as hashes. Secrets such as Discord webhooks, proxy passwords, steps marked secret and pending alert content are encrypted in the database. Only administrators can access stored data, and administrator actions are logged.

No system is perfectly secure. If a breach puts you at risk, we will notify you and the Personal Data Protection Committee as the law requires.

10Your rights

Under the PDPA you have the right to:

• access your data and get a copy of it;
• receive it, or have it sent to someone else, in a machine-readable format;
• have it corrected and kept up to date;
• have it deleted, destroyed or anonymised;
• have its use restricted;
• object to its processing;
• withdraw consent where we rely on consent.

Much of this you can do yourself in the app: edit your profile, change your password, review and revoke sessions, turn off alerts and disconnect Discord.

For anything else, including deleting your account, email [email protected] from the address on your account. We reply within 30 days.

If you believe we have not followed the law, you can complain to the Office of the Personal Data Protection Committee (PDPC).

11Minors

Faodu is not designed for children. If you are under 20, the age of majority in Thailand, you should have a parent’s or guardian’s consent before using it. If a minor has given us data without consent, contact us and we will delete it.

12Changes to this policy

When we change this policy we update the effective date above. For significant changes we will tell you in the in-app bell or by email before they take effect.

13Contact

Email [email protected], or use the support chat in the Faodu app.