Scope of this Policy
This policy explains how KVC Computer collects, uses, discloses, stores and protects information relating to kvc.computer and KVC Social Operation, an internal system for authorised users to manage organisational social media accounts, including services connected to Facebook and Meta.
Information We May Process
- Internal user account information such as display name, username, role and permissions
- Authorised connected social account information such as Page ID, Page name and connection status
- Required API tokens or credentials stored in protected form and not exposed back to ordinary users
- Content and media such as text, images, captions, versions and publishing schedules
- Publishing information such as time, status, Provider Content ID, permalink and post-publish verification result
- Comments or platform information only where permissions and APIs allow access
- Audit and security logs such as actor, time, action and result
- Technical website logs that hosting may generate, such as request time, IP address and browser information
- Browser localStorage used to remember website theme and motion preferences
How We Use Information
- Operate and maintain the website and KVC Social Operation
- Connect social media accounts authorised by an administrator
- Create, review, approve, schedule, publish and verify content
- Provide operational history and audit trails
- Enforce permissions, prevent unauthorised access and investigate security events
- Diagnose and resolve technical issues
- Comply with platform requirements and applicable law
Meta / Facebook Data
When an administrator connects a Facebook Page or Meta service, the system may use permissions required for authorised functions such as reading Page information, managing posts, reading API-permitted information and verifying publishing results. Meta data is used only to provide authorised functions. KVC does not sell personal information to third parties. Use of Meta data is also subject to Meta Platform Terms and related Meta requirements.
Disclosure of Information
- Platform providers required for operation, such as Meta/Facebook
- Infrastructure, hosting, security and technical service providers required to operate the service under appropriate controls
- Government authorities or legally authorised parties where disclosure is required by law
Infrastructure Providers and International Transfers
KVC may use third-party hosting, infrastructure, security and platform providers where necessary to operate, deliver and protect the website and KVC Social Operation. These providers may process limited technical information such as IP address, request time, browser or device information and service logs only as necessary for the relevant service. Some providers may process or store information outside Thailand. Where applicable, KVC will implement appropriate measures for such transfers in accordance with applicable data protection law.
Data Retention
- Website technical and security logs: generally no longer than 90 days unless needed for incident investigation or a legal obligation
- Privacy enquiries, support enquiries and related correspondence: generally 2 years after the last interaction
- KVC Social Operation content, media, schedules and publishing records: generally 2 years after the record is no longer required for operations
- KVC Social Operation audit and security logs: generally 2 years from the event
- OAuth/API tokens and connected-account credentials: retained only while the connection remains active; after disconnection KVC will revoke or delete them promptly, targeting completion within 30 days
- Records of deletion or privacy-rights requests: generally 2 years after the request is closed
- Information needed for disputes, security investigations or legal obligations may be retained longer where necessary and will be deleted or anonymised when no longer required
Security
- Role- and account-scoped access controls
- Access limited to authorised users
- Protection of sensitive credentials without exposing raw provider credentials through normal UI
- Audit and Security Event logging for important actions
- Connection health and credential validation checks
Data Subject Rights
Subject to applicable law, you may have rights to request access, correction, deletion, restriction or objection to certain processing, and to withdraw consent where processing relies on consent. Requests may require identity verification and may be subject to legal limitations.
Data Deletion
For deletion requests relating to KVC Social Operation or a Facebook/Meta connection, see User Data Deletion. Some audit or security records may be retained where necessary for security, legal compliance or dispute resolution.Third-party Services
The website and KVC Social Operation may connect to third-party services such as Meta/Facebook, LINE, Google Maps and other providers with their own policies and terms. Use of those services is also subject to the relevant provider terms.
Cookies and Browser Storage
The website has no analytics or advertising cookies as of the effective date of this policy and uses localStorage only for theme and motion preferences. If analytics or other cookies are added later, this policy and any applicable consent requirements will be reviewed before use.
Privacy Contact
KVC Computer Limited Partnership
legal@kvccom.co.th
Policy Changes
KVC may update this policy when the service, platform requirements or applicable law change. The updated version will show its revised or effective date on this page.