Last updated: 19 September 2026 • version 1.1 (adds §9, the AI assistant)
1. Data Controller
HubSwitch Co., Ltd. ("Company") is the data controller under the Personal Data Protection Act B.E. 2562 (PDPA). HubPro Customer is a consumer platform for personal inventory management, service bookings, and e-wallet functionality.
2. Purposes of Data Collection
User registration and identity verification
Personal Inventory management
Service bookings and appointments
E-wallet payments and transactions
Notifications and status tracking
Product search and matching via PIM (Product Information Management)
Service improvement analytics (with consent)
3. Types of Data Collected
PIIPersonal Identifiable Information
Full name
Email, phone number
Profile photo
Shipping address (if applicable)
INVENTORYPersonal Inventory Data
Items, rooms, storage locations
Product photos (a receipt photo is read for its items, never stored)
Barcodes/GTIN
Expiry dates, lot numbers
FINANCIALFinancial Data
Wallet balance, transaction history
Payment information
Purchase history
4. Legal Basis
Consent (PDPA S.19) — for marketing and analytics
Contract (PDPA S.24(3)) — for service delivery
Legal obligation (PDPA S.24(6)) — for financial records per Accounting Act
Legitimate interest (PDPA S.24(5)) — for fraud prevention
5. Data Retention Periods
Only one thing is deleted by age: the weekly record of which members of a group used it together, removed automatically 8 weeks after that week ends. Nothing else is deleted by age: what the account deletion screen lists goes when you confirm the request, the rest is as set out below, or goes when you delete the item holding it.
Account data: kept until the deletion request is processed — cancellable for 7 days
Inventory data: until item/account deletion
Financial and appointment data in your account (payments, wallet transactions, appointments): kept for now, even after you ask for your account to be deleted. It is removed by the final deletion step after the grace period, which is not switched on yet — to have it removed, contact the data protection officer. Once that step is on, a wallet that still holds money, points or pending cashback is not deleted until the officer has reviewed it, and a shop keeps its own record that a booking was made with it, with what identifies you taken out.
Cookies: the language cookie (NEXT_LOCALE) — kept for 1 year when you choose a language; when you open a page in a language other than your browser's, it is set as a session cookie that goes when the browser closes (replacing a 1-year one you chose) · Google Analytics cookies (_ga, and _ga_ followed by the site's code), which ask for 2 years from your latest visit and exist only once you accept analytics cookies; some browsers keep them for less, Chrome for at most 400 days — the browser removes them when they expire, you can delete them at any time in your browser settings, and withdrawing consent does not remove cookies already in your browser
Support conversations: this channel is not open, so none of this is collected at all
6. Data Subject Rights (Articles 30-36)
You have the following rights under PDPA:
Right of access — request a copy of your personal data
Right of rectification — correct inaccurate or incomplete data
Right of erasure — request deletion (except legally required data)
Right of data portability — receive data in machine-readable format
Right of restriction — restrict certain data processing
Right to object — object to processing for marketing purposes
Exercise these rights by contacting our Data Protection Officer at dpo@hubswitch.com — the same address appears on the "Data Privacy & PDPA Rights" card on your profile page. The right to erasure can also be exercised in the app, at Profile > Delete Account (the request can be cancelled during its grace period); the other rights still go through the DPO.
7. Cookies and Similar Technologies
We use cookies and localStorage as follows:
Essential cookies — the language cookie (see section 5) · signing in (Firebase Authentication) is kept in your browser's storage until you sign out, not a cookie
Analytics cookies — Google Analytics (with consent)
You can manage cookie consent at any time via the cookie banner at the bottom of the page.
8. Data Storage
Data is stored on Google Cloud Platform (GCP) region asia-southeast1 (Singapore) for production and us-central1 for staging. All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
9. Nong, the AI assistant — what is sent for processing
When you type a question to Nong, your question, part of the recent conversation, and the information the system retrieves to answer it are sent through the Company's servers (Google Cloud, Singapore region) to be processed by outside providers:
OpenRouter, Inc. (United States), which forwards the request to a provider running the language model — currently a DeepSeek model. The provider and the country where it is processed can differ from one request to the next.
Google Cloud (Vertex AI), Singapore region, to turn text into numbers used to find the information for the answer.
Before sending, the system automatically removes national ID numbers, phone numbers, hospital numbers (HN) and email addresses. It does NOT remove people’s names. Please do not type names or health information about patients or anyone else.
The Company asks these providers not to keep the data or use it to train models, and is putting in place contracts that cover transfers abroad.
Using Nong is optional. You can choose not to use it, and you can withdraw your consent at any time from the assistant page — after that, your questions are no longer sent.