Privacy Policy

When you create an account we collect your name, email address, and password. Optional fields include phone number, nickname, profile photo, and language preference.

Instructors also provide professional details: specialization tags, bio, pricing, service area, session types, certifications, gallery photos, and bank account details for payouts (stored encrypted by our payment partners where possible).

When you book, message, or leave reviews, we store the content of those interactions. We also automatically log technical data such as IP address, browser type, device type, and timestamps for security and analytics.

• To match you with suitable instructors and process bookings.
• To process payments and issue refunds or payouts.
• To send booking confirmations, reminders, and service notices (by email, SMS, or LINE).
• To moderate content and resolve disputes between users.
• To understand platform usage and improve the service (aggregated, where possible).
• To comply with legal obligations under Thai law.

We share data with service providers we depend on to run FloSpace: Vercel (hosting), Neon (database), Resend (email), Infobip (SMS), Omise (payments), LINE (authentication + messaging), and Ably (real-time messaging). Each has its own privacy terms. We do not sell your personal data.

Public profile information (name, nickname, bio, photos, reviews you leave) is visible to other users. Private instructor reviews of clients are visible only to instructors and FloSpace administrators.

You have the right to access, correct, delete, restrict processing of, and receive a portable copy of your personal data, as well as to withdraw consent where processing is based on it. To exercise any of these rights, email hello@flospace.app. We will respond within 30 days.

We keep account data for as long as your account is active. Booking, payment, and review records are retained for 7 years to meet tax and consumer protection requirements. Messages between users are retained while the conversation is active; you can clear read messages at any time.

Passwords are stored hashed with bcrypt. All traffic between your device and FloSpace uses HTTPS. Payment details are handled exclusively by Omise — we never see or store your card numbers. Bank account information for instructor payouts is stored in our database with access limited to FloSpace administrators and our payment partners.

FloSpace is not intended for users under 18. We do not knowingly collect data from minors. If you believe a child has provided us with personal data, please contact us so we can remove it.

Data controller: FloSpace, Bangkok, Thailand. Email: hello@flospace.app. For complaints you are not satisfied with, you can contact Thailand's Personal Data Protection Committee (PDPC).