011. Scope and purposes

This notice covers accounts, listings, drafts, uploads, communications, support and safety processes. Data is used to provide the requested service, prevent abuse, handle requests and satisfy applicable legal duties. A specific operation may rely on contractual necessity, legitimate interests, legal duties or consent as appropriate; accepting Terms is not blanket consent to all processing.

022. Data received

Account information includes email, password hash, display name, optional phone, avatar, languages, verification and Terms acknowledgements. Offers include text, prices, attributes, photos and any submitted address/coordinates. Chats, reviews, reports and support requests contain what users submit. Technical records can include IP, browser/device signals, session and anti-abuse events. Avoid submitting health records, identity documents, bank-access details or other unnecessary sensitive data.

033. Public and private information

Approved listings, their author identity, reviews and selected profile details can be public. A listing address or exact map point can disclose a property's location. Profile visibility and phone switches control the corresponding public responses; a hidden profile does not make existing public listings anonymous. Account email, security settings and verification records are not public profile information. Others may copy public material; changing a switch does not remove their copies.

044. Providers, AI and staff access

Hosting, database/object storage, message delivery, bot protection, maps and AI features can involve external service providers. AI features and the support assistant may send text or images through OpenRouter to the selected model provider. Authorised staff may access relevant records for support, reports, moderation and security. Communications are not represented as end-to-end encrypted. Do not send secrets to a bot or assume AI processing is local to your device.

055. Location, cookies and anti-abuse

Manual region selection is an alternative to device geolocation. Necessary cookies/local storage support sessions, preferences and drafts. Device/browser and IP signals may be used to identify abuse and account evasion; a device signal is not itself proof of identity or wrongdoing. The cookie notice does not authorise advertising or optional tracking. See the Cookies document for the distinction.

066. Retention and deletion

Retention depends on the data, purpose, applicable legal minimums and any necessary dispute preservation. Removing an account removes its access and related database records according to the deletion flow; it must not be interpreted as immediate removal of every file, recipient copy or backup. Public material may have been copied. Use a privacy request for access or deletion questions. This notice does not establish a blanket five-year retention period or unrestricted retention of all chats.

077. Your requests and security

Use Legal requests to ask about access, copies, correction, deletion, objection, restriction, portability or withdrawal of consent where applicable. Proportionate verification may be needed to prevent disclosure to someone else; do not send a passport unsolicited. Applicable deadlines and lawful exceptions depend on the request. No system is risk-free. This notice does not claim a completed security audit, guaranteed encryption at rest or a designated DPO.

088. Lawful disclosure and international processing

Providers may process data outside Thailand depending on their actual infrastructure. Such processing needs an applicable legal basis and safeguards; merely using this site is not consent to all international transfers. Requests from competent authorities are checked for authority, scope and applicable procedure. Only necessary data should be disclosed under a lawful basis; a court order is not asserted to be required for every possible request.

09Meta advertising analytics and listing permission

Meta Pixel is optional and loads only when you separately allow Meta advertising analytics as well as site analytics. It sends page views, successful registration and listing-start/submission events to Meta, which receives browser/device and connection data, page URLs and its advertising cookies (_fbp/_fbc, normally up to 90 days). Vito does not pass account emails, phone numbers, message text or listing text/photos to the Pixel. Advertising click/browser identifiers are stored with your first-touch account attribution when permitted. Your consent choice lasts 180 days; the first landing source is also kept in this browser tab's session storage after analytics permission. You can turn off Meta separately at /legal/cookies; this stops new events, clears this browser's Meta cookies and requests removal of the linked Meta identifiers in Vito. Turning off site analytics also requests deletion of this browser's linked site analytics history. Past information already received by Meta is handled under Meta's privacy controls. A separate, initially unchecked permission in each listing allows Vito to reuse its text and photos for promotion elsewhere, excluding contact details and private messages. You can withdraw listing permission in My listings; this stops new use, while already published external materials may remain. In-site reminders about the first listing can be disabled at /welcome or in notification settings.

10First-listing reminders and launch bonus

The functional vito_launch_offer cookie lasts up to 30 days and contains only a signed offer expiry and chosen listing intent; it contains no advertising click identifiers. It preserves the launch offer before registration independently of optional analytics. Paid Meta campaign links can qualify new accounts for a single promotion bonus. The account stores its real submission deadline, reserved listing and promotion period; normal moderation remains mandatory. Promotion gives a highlight and extra priority in relevant sections, without guaranteeing enquiries or sales. There is no purchase or automatic renewal. In-site prompts can be disabled; email tips, listing reminders and bonus messages require a separate optional choice in reminder preferences. Each email has an unsubscribe link; opening the link does not unsubscribe until confirmation, while mail clients may use one-click unsubscribe. Delivery and signed-in click records, and first-listing button/draft actions, are retained for up to 90 days for operational delivery and launch reporting. The one-time bonus record remains until account deletion to prevent duplicate grants. Message content is not used in these reports.

119. Optional acquisition analytics

If you allow analytics in the cookie preferences, Vito records first-visit attribution, campaign IDs, coarse device/language data and visit times. Login links this history to your account so the owner can measure registration, first moderated publication and first buyer enquiry. The dashboard shows aggregate statistics; it does not show message content or personal identities. This optional collection is separate from account and safety services. Choose Necessary only at /legal/cookies to stop collection and request deletion of this browser's linked analytics history. Site analytics records stay in Vito; separately permitted Meta events are described below. Advertising expenses are imported separately from the owner's Meta account. The Cookies document describes storage durations and controls.