Privacy Policy
Last Updated: August 31, 2026
1. Introduction
FastDee Chat ("we", "our", or "us") provides a customer service management platform that helps businesses manage conversations and orders from Facebook Pages, Instagram Business accounts, TikTok Shop, TikTok Business accounts (messaging, ads & comments), Shopee, Lazada, and LINE Official Accounts. This Privacy Policy explains how we collect, use, and protect your information in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and international data protection standards.
This policy also covers the FastDee Android and iOS apps, operated by Wizard Business Solution Pro Co., Ltd. They let authorized team members access their FastDee account, projects and connected customer conversations.
Request account and data deletion / ขอให้ลบบัญชีและข้อมูล · Help and support / ติดต่อช่วยเหลือ
2. Information We Collect
2.1 From Facebook/Instagram
- Basic Profile: Name, email, profile picture
- Facebook Pages: List of Pages you manage, Page access tokens
- Instagram Business Accounts: Instagram accounts connected to your Pages
- Messages: Customer messages sent to your Pages/Instagram accounts
2.2 From TikTok Shop
- Shop Authorization: Shop ID, shop name, access tokens, refresh tokens
- Orders: Order ID, status, amounts, items purchased, shipping details, tracking numbers
- Products: Product catalog, SKUs, prices, stock levels, product images
- Buyer Information: Buyer name, phone number, shipping address (masked by default; unmasked only after TikTok grants elevated permissions and only for legitimate order fulfillment)
- Messages: Customer Service messages between shop and buyers (only when Chat scope is granted)
- Webhook Events: Real-time notifications for orders, messages, and account status changes
2.3 From Other Marketplaces (Shopee, Lazada)
- Authorization Tokens: To access your shop data on your behalf
- Orders & Products: Similar to TikTok Shop integration
2.4 Usage Data
- Login timestamps
- Features used within the platform
- Technical information (browser, IP address, device)
2.5 FastDee Mobile App
- Account and workspace: Account identifiers and the profile and project information needed to sign in and apply your team's access permissions.
- Customer content: Customer details, conversation messages and order information made available to your account; photos and other media you choose to upload when using messaging features.
- Notifications: Device installation identifiers and push-notification tokens used to deliver notifications when enabled. You can manage notification permission in your device settings.
3. How We Use Your Information
- Service Delivery: To provide customer service management features
- Message Management: To display and enable responses to customer messages
- Webhook Integration: To receive real-time message notifications
- Account Management: To manage your Pages and Instagram accounts
- Platform Improvement: To improve our service and user experience
4. Data Storage & Security
- Data is stored securely using Supabase (PostgreSQL)
- All connections use HTTPS encryption
- Access tokens are encrypted and stored securely
- We implement industry-standard security measures
5. Data Sharing
We do NOT share, sell, or disclose your personal information to third parties, except:
- With Your Consent: When you explicitly authorize sharing
- Service Providers: Third-party services that help us operate (Supabase, OpenAI for AI features)
- Legal Requirements: When required by law
6. Facebook & Instagram Data
- We only access data necessary for service functionality
- Messages are stored to enable conversation history
- Page access tokens are used solely to send/receive messages
- We comply with Facebook Platform Policies and Instagram API Terms
7. User Rights and Data Deletion
You have the right to:
- Access: View your data stored in our system
- Delete: Request deletion of your FastDee account and associated personal data
- Revoke: Revoke Facebook/Instagram permissions anytime
- Export: Request a copy of your data
How to request deletion / วิธีขอลบบัญชีและข้อมูล
Contact our existing data-protection address, [email protected], with the subject [Data Request] FastDee account deletion. Include the email associated with your FastDee account and the project name, if known, and say whether you want to delete your account and associated data or request deletion of specific personal data. Do not send passwords, OTPs or access tokens.
You can use this contact route without reinstalling the app. Identity verification and the existing retention and response periods described below apply. Uninstalling FastDee or disconnecting a social channel is not the same as requesting account deletion.
หากต้องการขอลบบัญชี FastDee และข้อมูลส่วนบุคคลที่เกี่ยวข้อง ให้ส่งคำขอไปที่ [email protected] โดยระบุอีเมลบัญชี ชื่อโปรเจกต์หากทราบ และขอบเขตข้อมูลที่ต้องการลบ ไม่ต้องติดตั้งแอปใหม่ และไม่ควรส่งรหัสผ่าน รหัส OTP หรือ access token การยืนยันตัวตน ระยะเวลาดำเนินการ และการเก็บข้อมูลให้เป็นไปตามรายละเอียดด้านล่าง
8. Data Retention
- Active account data: Retained while your account is active
- Messages: Retained for business continuity and customer service
- TikTok Shop orders: Retained for 5 years (tax/accounting compliance) from order completion
- TikTok Shop buyer PII: Retained only while order is active; anonymized 90 days after order completion
- Shop access tokens: Deleted within 7 days of shop disconnection or deauthorization
- Deleted accounts: Data deleted within 30 days of account deletion request
- PDPA deletion requests: Processed within 30 days, confirmation code provided
9. Cookies
We use cookies for:
- Session management and authentication
- User preferences
- Analytics (anonymized)
10. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.
11. Changes to Privacy Policy
We may update this Privacy Policy. Changes will be posted on this page with an updated "Last Updated" date.
12. Contact Us
For privacy concerns or data requests:
13. Facebook/Instagram Specific Terms
By using our service with Facebook/Instagram:
- You authorize us to access your Pages and Instagram Business accounts
- You understand we receive customer messages sent to your accounts
- You can revoke access anytime through Facebook Settings → Apps and Websites
- We comply with Facebook Platform Terms and Instagram API Terms
14. TikTok Shop Specific Terms
By using our service with TikTok Shop:
- You authorize us to access your TikTok Shop data (orders, products, messages) on your behalf
- You confirm that you are the shop owner or an authorized representative with proper consent to connect the shop
- Buyer personal information (name, phone, address) is masked by default per TikTok Shop's data protection requirements; unmasking requires additional TikTok approval and is used solely for legitimate order fulfillment
- We process webhook events (orders, messages, deauthorization) in real-time and verify signatures using HMAC-SHA256
- You can revoke access anytime through TikTok Seller Center → App Management; upon revocation, we will deactivate the integration within 5 minutes and delete tokens within 7 days
- We comply with TikTok Shop Partner Terms and TikTok Developer Data Policy
- Buyer data deletion requests (PDPA/GDPR) are processed via our endpoint
/api/tiktok/data-deletion within 30 days
14A. TikTok Business Messaging Specific Terms
When you connect a TikTok Business Account to use Business Messaging (direct messaging) features:
- Data collected: Direct messages (text, images, attachments) exchanged between your TikTok Business Account and TikTok users, sender/recipient identifiers, and conversation/message timestamps.
- Purpose: Solely to display conversations and let you respond to your customers within FastDee. We do NOT use message content for advertising, profiling, or any purpose other than responding to the user.
- No misuse of automation: We do not send unsolicited proactive promotional messages and do not disguise automated messages as manual replies, in line with TikTok Business Messaging guidelines.
- Retention: Messages are retained while your account is active for customer-service history, and deleted within 30 days of account deletion or upon request.
- Deletion & revocation: You may revoke the app's access anytime in your TikTok settings; upon revocation we stop retrieving messages and delete related tokens within 7 days.
- Regional availability: Business Messaging is not available for accounts registered in the EEA, Switzerland, the UK, or the US.
- We comply with the TikTok for Developers Terms and TikTok Business Messaging policies.
14B. TikTok for Business (Ads, Comments & Insights) Specific Terms
When you authorize FastDee with your TikTok Business / advertiser account:
- Advertising data: Ad accounts, campaigns, ad groups, ads, audiences, and performance reports — used to let you manage and measure advertising from within FastDee.
- Comments & mentions: Comments and mentions on your ads and organic content — used to let you monitor and reply to them.
- Account insights: Aggregated account and content metrics — used for reporting within FastDee.
- Purpose limitation: This data is used only to provide the advertising, engagement, and analytics features you request; we do not sell it or use it for unrelated purposes.
- Retention & deletion: Retained while your account is active; deleted within 30 days of account deletion or upon request. Tokens are deleted within 7 days of disconnection.
- We comply with the TikTok API for Business terms and the TikTok Developer Data Policy.
15. PDPA Compliance (Thailand)
We comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):
- Legal Basis for Processing:
- Contract performance — to deliver the services you subscribed to
- Legitimate interest — for order management, customer service, and fraud prevention
- Consent — for marketing communications and optional analytics
- Legal obligation — tax, accounting, and regulatory record-keeping (5 years)
- Your Rights Under PDPA: Access, rectify, delete, restrict processing, data portability, object to processing, and withdraw consent
- Cross-Border Data Transfer: Some data (e.g., images in AWS S3 ap-southeast-1) is stored in Singapore, which provides adequate data protection per Thai PDPA standards
- Response Time: All PDPA requests processed within 30 days
- Complaint: You may file a complaint with the Personal Data Protection Committee of Thailand (PDPC) at pdpc.or.th
16. Data Protection Officer (DPO)
For data protection inquiries, deletion requests, or to exercise your rights:
- DPO Contact: [email protected]
- Operated by: Wizard Business Solution Pro Co., Ltd. (บริษัท วิซาร์ด บิซิเนส โซลูชั่น โปร จำกัด), 51/114 ซอย รามอินทรา 40 แยก 25 แขวงนวลจันทร์ เขตบึงกุ่ม กรุงเทพมหานคร 10230
- Subject Line: Please prefix with
[PDPA] or [Data Request] for faster routing
- Response Time: Acknowledgment within 72 hours; full response within 30 days
- Identity Verification: For security, we may request documentation to verify your identity before processing sensitive requests
17. Thai Language Summary (สรุปเป็นภาษาไทย)
เอกสารฉบับเต็มเป็นภาษาอังกฤษ สรุปประเด็นสำคัญ:
- ข้อมูลที่เก็บ: ข้อมูลบัญชีผู้ใช้, ข้อมูลจาก Facebook/Instagram/TikTok Shop/Shopee/Lazada/LINE เช่น ข้อความ, คำสั่งซื้อ, สินค้า
- การใช้ข้อมูล: ให้บริการ CRM, ตอบแชท, จัดการคำสั่งซื้อ
- สิทธิของคุณตาม PDPA: เข้าถึง, แก้ไข, ลบ, คัดค้านการประมวลผล, ถอนความยินยอม
- การเก็บรักษา: คำสั่งซื้อ TikTok 5 ปี (ภาษี), PII ลูกค้า 90 วันหลัง order เสร็จสิ้น
- ผู้ดูแลข้อมูล (DPO): [email protected] (บริษัท วิซาร์ด บิซิเนส โซลูชั่น โปร จำกัด)
- ร้องเรียน: PDPC (สำนักงานคณะกรรมการคุ้มครองข้อมูลส่วนบุคคล) pdpc.or.th
© 2026 FastDee Chat. All rights reserved.
Terms of Service ·
Payment Policy