Privacy Notice

For sellers, Heysub handles account and business details, identity-verification documents, payout details, products, and support messages. For buyers, this includes contact information, orders, subscriptions, access records, and invoice or tax details supplied for a purchase.

We also process device, browser, IP, sign-in, API, and webhook records needed to operate the service. Payments use ReservePay; Heysub keeps transaction records and may receive payment status, payment-method details, and limited card information such as the last four digits.

We use information to create accounts, verify sellers, fulfil purchases, provide access, renew subscriptions, issue billing documents, deliver transaction emails, resolve disputes, and provide support. We also use it to secure the platform, prevent fraud, and meet legal or accounting duties.

The legal ground depends on the purpose: performing a contract, complying with law, legitimate interests balanced against your rights, or consent where required. Required information is identified during collection; without it, a purchase, verification, or payout may not be completed. Marketing consent, where requested, is separate from essential service messages.

Sellers receive buyer information needed for delivery, support, and their legal duties. ReservePay processes payments; Supabase supports authentication, databases, and verification-document storage; Cloudflare supports web hosting; Resend delivers transactional emails. Providers receive the information needed for their role, subject to applicable arrangements.

We may also disclose information for lawful requests, fraud investigations, and disputes. Providers may process information outside Thailand; applicable transfer safeguards must be used. Sellers’ independent use of customer information is also subject to their own privacy responsibilities.

API and webhook logs are normally kept for 30 days, or 90 days for Studio accounts. Verification documents are kept while the seller account is open and for 365 days after closure; the verification outcome and document-type record may remain.

Transaction, invoice, tax, and dispute records may need to remain after account closure for legal, accounting, or claims purposes. Other information is deleted or anonymised when it is no longer needed, subject to lawful retention and backup cycles. Closing an account does not mean every financial record is immediately erased.

Heysub uses browser storage and similar technologies for sign-in flows, cart contents, interface preferences, and form recovery. Blocking or clearing them may affect those features. Any optional analytics or advertising technologies require their own disclosure and choices where applicable.

We use access controls and restricted storage to protect information. No online service is completely secure. Protect your sign-in links and API keys, and contact Help promptly if you suspect unauthorised access.

Subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection to processing, and withdraw consent where processing relies on it. Withdrawal does not invalidate earlier lawful processing. You may also complain to the competent data-protection authority, including Thailand’s PDPC where applicable.

Contact Heysub through Help to make a request. We may verify your identity and retain information where a legal obligation or valid exception applies. For a seller’s separate use of your data, contact that seller as well. Do not submit a child’s personal information unless authorised and lawful.

Use Help for privacy questions, rights requests, or concerns about handling your information. Describe the account or purchase involved without sending passwords, API secrets, or unnecessary identity documents.

We will publish material changes to this notice with the applicable date and give additional notice where required. Heysub is provided by SYNORA LAB CO., LTD. (Head Office), tax ID 0105558102674.