Privacy Policy

Last updated:

This policy explains what personal data Keeprer collects, why, and what you can do about it. Tawin Leknok, an individual based in Thailand who runs Keeprer, is the data controller. We follow Thailand's Personal Data Protection Act (PDPA) and, for users in the EU and UK, the GDPR.

1. Data we collect

  • Freelancer account: email address, login details (managed by our database provider), and your name if you sign in with Google.
  • Profile and payout: display name, PromptPay or payout details and account name, profile link name, headline, bio, role, location, skills, social links, profile and cover images, portfolio items and services.
  • Projects: project and client names, scope, revision settings, links to your work, notes, the revision items clients send, and a timeline of what happened.
  • Payment slips: images your clients upload as proof of payment, compressed in their browser before upload and stored privately.
  • Hire requests and chat: the name and contact (LINE ID, phone or email) a person enters when they press Hire, the brief and the chat messages.
  • Notifications: if you turn them on, a technical address for your browser's push service and your language.
  • Billing: if you pay for a plan, your Stripe customer ID and subscription status. Card details go directly to Stripe; we never see or store them.
  • Welcome questions: if you answer them after signing up, where you heard of Keeprer, your kind of work, how you freelance, roughly how many clients you have and what you want help with. You can skip them.
  • First visit: the campaign tags (utm_*) or the website that sent you on your first visit, kept in a cookie and saved with your welcome answers so we know which channels bring freelancers.
  • Technical data: IP address and browser information our hosting and database providers log to run and protect the service.

2. Why we use it

We do not sell personal data, show ads, or use advertising or analytics trackers.

  • To provide Keeprer: show your delivery links, portfolio and chat, count revisions, send notifications and run your plan (legal basis: contract).
  • To keep Keeprer secure and stop abuse, such as spam through the Hire button (legal basis: legitimate interests).
  • To understand who uses Keeprer and which channels bring them, from your welcome answers and first visit, so we can improve the product (legal basis: legitimate interests; the questions are optional).
  • To meet legal and accounting duties for our own subscription payments (legal basis: legal obligation).

3. Your clients' data

When you add a client to a project, or a client sends revisions, slips or messages, you decide what is collected about them and why. For that data, you are the controller and Keeprer processes it on your behalf. Only collect what you need, and let your clients know you use Keeprer.

4. What is public

Your public profile (name, images, headline, bio, skills, social links, portfolio, services and number of closed projects) can be seen by anyone with its link and may appear in search engines. Delivery links and chat links are private, but anyone who has the link can open them.

5. Who we share data with

We share data only with services that help us run Keeprer, under their own privacy and security commitments:

  • Supabase: database, login, file storage and live updates.
  • Stripe: subscription payments.
  • Our hosting provider, which runs the website.
  • Google, Apple and Mozilla push services: to deliver notifications to your browser. They see the notification text.
  • Google: only if you choose “Continue with Google”.
  • Simple Icons (cdn.simpleicons.org) and YouTube (i.ytimg.com): your browser loads social icons and video thumbnails from them on profile pages, so they see your IP address.
  • Websites you link to: when you add a portfolio link, our server visits it once to read its title and preview image.

6. International transfers

Some of these providers store or process data outside Thailand, for example in Singapore, the EU or the US. Where required, we rely on safeguards such as the providers' standard contractual clauses.

7. Cookies and browser storage

We use no advertising or tracking cookies, so there is no cookie banner.

  • Login cookies: keep you signed in (needed for the app to work).
  • lang: remembers your language.
  • keeprer_invite: remembers the friend's invite code you signed up with, for up to 30 days.
  • keeprer_src: remembers where your first visit came from (campaign tags or referring site), for up to 90 days. It is ours alone and isn't shared with ad networks.
  • In your browser's local storage: the chat link of a hire request you started, your dashboard currency, and recently viewed projects. These stay on your device.

8. How long we keep data

We keep your data while your account is open. When you ask us to delete your account, we delete your profile, projects, chats, slips and push subscriptions within 30 days, except records we must keep for tax and accounting, such as subscription invoices, which Stripe and we keep as the law requires.

9. Your rights

You can ask to see, correct, download or delete your personal data, to object to or limit how we use it, and to withdraw consent where we rely on it. Email tawinleknok@gmail.com. We reply within 30 days. You can also complain to Thailand's Personal Data Protection Committee, or to the data protection authority where you live.

10. Security

Data is sent over HTTPS. Database access is limited to each account by row-level security, payment slips are kept in private storage, and card payments are handled by Stripe. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

11. Children

Keeprer is for working freelancers and is not meant for children. We do not knowingly collect data from children under 13 (or the minimum age in your country).

12. Changes and contact

If we change this policy in a significant way, we will tell you in the app or by email.

Contact: tawinleknok@gmail.com · Tawin Leknok, an individual in Thailand