Freelanth
LegalPDPA Compliant

Privacy Policy

Last Updated: July 1, 2026

Freelanth values your privacy. This policy explains how we collect, use, and protect your personal data in compliance with Thailand's Personal Data Protection Act (PDPA) B.E. 2562.

1. Overview

Freelanth.com is operated by Purrclaw Co., Ltd., acting as the "Data Controller" under PDPA. We process personal data to provide our freelance marketplace platform. This policy applies to all Freelanth users including Clients, Freelancers, and visitors.

2. Data We Collect

Data You Provide Directly:

  • Full name, email, phone number
  • Profile photo, bio, skills, province
  • National ID number and Selfie (for KYC only)
  • Company information, Tax ID
  • Bank/card details (via Stripe — Freelanth does not store directly)
  • Display Name: A public-facing alias used to represent you on the platform, auto-generated at registration if not manually set
  • Early Adopter status: The timestamp at which Onboarding was completed, used solely to calculate the 30-day eligibility window (legacy migrated users only)

🔒 Email Privacy Guarantee

Freelanth uses anonymized identifiers to protect your identity across all public-facing interfaces. Your email address will never be publicly visible or disclosed to other users.All usernames, job poster names, and freelancer names displayed on the platform are anonymized display names — never real email addresses.

Automatically Collected Data:

  • IP address, browser type, device
  • Pages visited, time spent
  • Session cookies for Authentication

3. How We Use Data

We process personal data on the following legal bases:

  • Contract: Providing services, processing payments, managing Escrow, and delivering platform features
  • Consent: Sending marketing emails (withdrawable at any time)
  • Legitimate Interests: Fraud prevention, usage analytics, service improvement
  • Legal Obligation: Complying with legal requirements such as KYC and tax reporting

4. Data Sharing

We do not sell personal data to third parties. We share data with:

  • Stripe: Payment processing and Stripe Connect for freelancers
  • Resend: Transactional emails such as payment confirmations
  • Supabase: Secure cloud database storage
  • Uploadthing: Image and file storage
  • Business partners: Public profile name and info for job matching
  • Government authorities: When ordered by court or legal authority

5. Data Security

  • Passwords encrypted with bcrypt (no plain text storage)
  • All connections via HTTPS/TLS
  • Optional two-factor authentication (2FA) via TOTP
  • Credit card data processed by Stripe (PCI DSS Level 1) — Freelanth never touches card data
  • Database encrypted with daily backups
  • Cloudflare WAF protection against DDoS and web attacks

6. Cookies & Tracking

We use the following types of cookies:

  • Necessary: Session token for Login — cannot be disabled
  • Preferences: Language, light/dark mode
  • Analytics: Anonymous usage data

We do not use cross-site tracking cookies.

7. Data Retention

  • Active accounts: Retained for the account's lifetime
  • Deleted accounts: Personal data deleted within 30 days, except legally mandated data
  • Transaction history: Retained 7 years per accounting law
  • KYC data: Retained 5 years after account closure
  • Access logs: Retained 90 days

8. Your Rights Under PDPA

Under PDPA, you have the right to:

  • Access: Request to see your personal data we hold
  • Rectification: Correct inaccurate data via account settings
  • Erasure: Request deletion of your personal data (within legal limits)
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing in certain circumstances
  • Withdraw Consent: Withdraw previously given consent
  • Complaint: Lodge a complaint with PDPC (Personal Data Protection Committee)

Submit requests to: privacy@freelanth.com — We respond within 30 days.

9. Minors

Freelanth's services are not intended for individuals under 18 years of age. If we discover we have collected data from a minor without parental consent, we will delete it immediately.

10. Policy Changes

We may update this policy from time to time. Material changes will be notified via email and platform announcement at least 30 days before taking effect. Continued use constitutes acceptance of the updated policy.

11. Contact Data Protection Officer (DPO)

  • DPO Email: privacy@freelanth.com
  • General Email: support@freelanth.com
  • Website: freelanth.com
  • Response time: Within 30 days of receiving your request