Privacy Policy
This policy explains how Astralaos (“we”, “us”) collects, uses and protects personal data when we manage our social media pages, run marketing, and communicate with you on WhatsApp. It applies to our Meta app and to the tools we operate for these purposes.
Information we collect
Facebook and Instagram pages
When our team connects a Facebook Page or Instagram account to our app through Facebook Login, we receive only what the approved permissions allow:
- The connecting user’s Facebook ID, name and profile picture.
- The Pages or accounts they manage, including IDs, names and pictures.
- Access tokens that let the app publish and read results on those Pages.
- Posts, images and videos we create or schedule, and engagement figures for them (for example reach, likes and comments).
When you message us on WhatsApp, or agree to receive messages from us, we process:
- Your phone number and WhatsApp profile name.
- The content of messages, images, files and voice notes you send us, and our replies.
- Message timestamps and delivery status (sent, delivered, read).
- Your messaging preferences, including whether you agreed to receive marketing messages.
Marketing
For marketing we may use your name, contact details (phone number or email), the products or services you asked about, and how you responded to our posts, ads or messages.
We do not collect passwords, payment card details or private messages unrelated to your conversations with us.
How we use information
- To publish, schedule and measure posts on our own social media pages.
- To reply to your questions and provide customer support on WhatsApp.
- To send order, booking or service updates you requested.
- To send marketing messages about our products, services and promotions, only if you have agreed to receive them.
- To understand which content and campaigns work, using aggregated results where possible.
Marketing messages and your consent
We send marketing messages on WhatsApp or other channels only after you opt in. You can opt out at any time:
- Reply STOP to any of our WhatsApp messages, or tell us in the chat that you no longer want marketing messages.
- Use the unsubscribe link in any marketing email.
- Email contacts@astralaos.com.
Opting out of marketing does not stop service messages you have asked for, such as replies to your questions.
Legal basis
We process personal data on the basis of your consent (for example for marketing messages), to take steps you request or perform a service for you (for example answering an enquiry or handling an order), and for our legitimate interest in running and improving our business. We follow Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).
Sharing
We do not sell or rent your personal data. We share it only with:
- Meta Platforms (Facebook, Instagram, WhatsApp), which delivers our posts, ads and messages. Meta handles data under its own policies, including the WhatsApp Privacy Policy and Meta Privacy Policy.
- Service providers that host or operate our systems on our behalf, under confidentiality obligations.
- Authorities, when required by law.
Storage and security
Data we store is kept on servers we control. Administrative access goes through an encrypted private network, and access is limited to people who need it. Access tokens are used only for the purposes described here.
Retention
- WhatsApp conversations: kept for up to 2 years after our last interaction, then deleted, unless the law requires longer.
- Marketing preferences: kept while you are subscribed; your opt-out record is kept so we do not message you again.
- Page connection data and tokens: kept while a Page is connected, and deleted when it is disconnected.
- Backups expire within 30 days.
Your rights
You can ask us to access, correct, delete or export your personal data, to restrict or object to its use, or to withdraw your consent at any time. Email contacts@astralaos.com and we will respond within 30 days. You may also complain to Thailand’s Personal Data Protection Committee.
Data deletion
To delete your data:
- WhatsApp and marketing data: email contacts@astralaos.com with the subject “Data deletion request” and the phone number or email concerned, or ask us in the WhatsApp chat.
- Facebook app connection: go to Facebook Settings & privacy → Settings → Business integrations (or Apps and websites), find the app and select Remove. This immediately revokes our access. You can also email us as above.
We will delete the data within 30 days and confirm by email or WhatsApp.
Children
Our services are not intended for anyone under 13, and we do not knowingly collect their data.
Changes to this policy
If we change this policy, we will update this page and its effective date.
Contact
Questions about this policy or your data: contacts@astralaos.com