Exito Group Co., Ltd. (“Exito Group”, “we”) values the protection of your personal data. This policy explains how we collect, use, disclose and protect your data when you use this website, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data we collect
- Data you provide directly — such as your name, email, phone, company and message, when you contact us by email or phone.
- Website usage data — such as pages visited, device and browser type, which may be collected via essential cookies.
2. How we use your data
- To respond to and provide the services you request
- To improve the website and user experience
- To comply with applicable laws
3. Legal basis
We process your data on the basis of consent, contract performance, legitimate interest, and legal compliance, as required by the PDPA.
4. Disclosure and sub-processors
We do not sell or rent your personal data. We may share the minimum necessary data with service providers who help us operate, under confidentiality and data-processing agreements, or where required by law. The categories we use are:
- Hosting and cloud infrastructure — such as Cloudflare for this website.
- Email and communication tools — to respond to you and manage requests.
- Meta platforms — Facebook, Messenger, Instagram, WhatsApp Business (see section 9).
- AI model providers — such as OpenAI, Anthropic and Google, where a chatbot must send your message for processing to generate a reply. We use offerings that do not train models on the data.
Some providers are located outside Thailand. Cross-border transfers are made under the safeguards required by the PDPA.
5. Cookies
This website uses cookies. See our Cookie Policy for details.
6. Data retention
We retain your data only as long as necessary for the purposes above, or as required by law.
7. Your rights
Under the PDPA, you have the right to access, rectify, erase, object to, restrict, and receive/port your data, and to withdraw consent, by contacting us below.
8. Data security
We apply appropriate technical and organizational measures to protect your data from unauthorized access, alteration or disclosure.
9. Data from Meta platforms (Facebook, Instagram, WhatsApp)
We build and operate chatbot and marketing-automation systems that run through an application registered with Meta, both on our own pages and on our clients'. When you message us or connect an account to our app, we may process:
- Messenger / Instagram Direct: page-scoped or Instagram-scoped user ID, display name, profile picture, and the messages and attachments exchanged with the page.
- WhatsApp Business: phone number, profile name, and the content of messages you send to a connected business number.
- Facebook Login: name, email and profile picture, according to the permissions you grant, to authenticate you and link the pages you manage to the system.
- Page management and Marketing API: the list of pages and ad accounts you manage, access tokens (stored encrypted), and statistics for pages, posts and ad campaigns — mostly aggregated and non-identifying.
Purposes: to answer messages automatically and hand over to a human agent, to provide product and service information and capture leads, to send follow-up messages where you have consented, to produce reporting dashboards, and to improve service quality.
Our commitments: we request only the permissions needed for the features actually in use; we do not sell, rent or transfer Meta platform data to advertisers or data brokers; we do not use it for decisions about credit, insurance or employment; and we comply with the Meta Platform Terms and Developer Policies. Our services are not a Meta product and Meta does not endorse them.
Our role: where a system runs on a client's page or account, the client is the data controller and we act as data processor on their instructions. Where it runs on Exito Group's own pages, we are the data controller.
10. Withdrawing consent and deleting your data
You can disconnect our app at any time through Facebook/Instagram settings (Settings > Apps and Websites / Business Integrations), and you can ask us to delete the data we hold, free of charge. See User Data Deletion for the full process and timelines.
11. Contact us
Exito Group Co., Ltd.
1 Empire Tower, Floor 47, Room 4703, South Sathorn Rd., Yannawa, Sathorn, Bangkok 10120
Email: prinz@exitogroup.co.th · Tel: +66 (0) 85 099 3971