Privacy Policy

Last updated 5 October 2026

1. Introduction

KanSpam (กันสแปม) is operated by Spectrum Consultants Co., Ltd. ("the Company", "we"). KanSpam screens and blocks spam messages and comments on our customers' own Facebook Pages. This Privacy Policy explains what personal data we collect, why, how long we keep it, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

It applies to two groups of people: customers — the businesses that subscribe to KanSpam and connect their Pages — and people who message or comment on a customer's Page, whose messages we process only to decide whether they are spam.

2. Information we collect

From customers:

• Your Facebook name, Facebook user ID and the email address Facebook shares with us when you log in.
• The Pages you connect and the Page access token that authorises us to act on each Page. Tokens are encrypted at rest and never stored in plain text.
• The product or service description you write for each Page (used to tune spam classification to that Page's business) and your rule settings.
• Payment records for the prepaid credit balance: top-up amounts, timestamps, the payment reference returned by the payment provider, and any bank transfer slip image you upload.
• The tax-invoice details you enter: name, address and tax identification number.

About people who message or comment on a customer's Page:

• The Page-scoped ID (PSID) and display name Facebook assigns to them on that Page.
• The text of messages sent to the Page and of comments posted on it, with timestamps.
• Block and hide records: the ID blocked or the comment hidden, the rule that fired, and the time.

Technical data from anyone using the dashboard: IP address, browser and device metadata, and the cookies described in section 8.

3. How we use it

• To classify messages and comments on a customer's Page as spam or not spam, block or hide matching senders at Page level, and show the customer the resulting list with an unblock control.
• To operate your account: login, connected Pages, the prepaid credit balance, renewals and reminders.
• To verify payments and issue tax invoices.
• To respond to your support requests.
• To comply with legal obligations.

4. Facebook Platform Data

Data obtained through the Facebook Platform is used solely for the purpose disclosed to you and as permitted by Meta's Platform Terms. We do not sell Facebook user data, and we do not use it for advertising or for any purpose other than operating KanSpam for the Page it was obtained from.

5. AI processing and third-party model providers

Some classification steps are performed by AI models operated by third-party providers rather than by software running only on our own servers. Where that happens, the message or comment text is transmitted to that provider.

Cross-border transfer. That processing may take place in other countries, including the United States. Those destination countries may not have been certified by Thailand's Personal Data Protection Committee as providing an adequate level of protection. We transfer personal data abroad only where there is a lawful basis under the PDPA and appropriate safeguards are in place.

What is sent is the text only, together with the classification instructions. Page-scoped IDs, names, Page IDs, access tokens and account details are not included in the request. These providers process the text under their own terms in order to return a classification.

We choose which providers to use and may change them from time to time; the category of recipient and the limits on what is sent do not change when we do. AI classification is controlled per Page: where it is switched off for a Page, no text from that Page leaves our servers.

6. Data retention

• Message and comment text used to reach a block or hide decision — 90 days.
• Block and hide records — kept while the customer's account is active, because they are what makes unblocking possible.
• Customer account data, Page tokens and settings — while the account is active. After cancellation the customer has at least 30 days to export their data, after which all of the above is deleted within 30 days.
• Payment and tax-invoice records — for as long as Thai tax and accounting law requires, even after the account is closed.

7. Data sharing

We share data only with:

• Meta Platforms — the block, hide and unblock actions we perform on your Page through Meta's APIs.
• Hosting and infrastructure providers — bound by data processing agreements.
• AI model providers — as described in section 5, limited to message and comment text.
• Payment providers — the bank or payment gateway that processes a top-up sees the amount and payment reference, never any message content.
• Authorities — where the law requires it.

We do not sell personal data.

8. Cookies

The dashboard sets a session cookie that keeps you logged in and a cookie that remembers your language. Neither is used for advertising or tracking across other sites.

9. Your rights

Under the PDPA you have the right to access the personal data we hold about you, to request correction or deletion, to withdraw consent, to object to processing, and to lodge a complaint with the Personal Data Protection Committee. To exercise these rights, follow the steps on our Data Deletion page or email support@kanspam.com. We respond within 30 days.

10. Security

We use TLS encryption in transit, encrypt Page access tokens at rest, and restrict access to all data stores to the staff who operate the service.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes are posted on this page with an updated date. Continued use of the service after that date constitutes acceptance of the updated policy.

12. Contact

Spectrum Consultants Co., Ltd.
Email: support@kanspam.com
Website: kanspam.com