Upload Your Property For Free

Privacy Policy

Last updated: 11 August 2026

This policy explains how FlexStay Bangkok (“FlexStay Bangkok”, “we”, “us”) handles personal data on flexstay-bangkok.com and in the FlexStay Bangkok iOS app. It applies to everyone who browses listings and to real-estate agents and property owners who register for the portal.

1. Who is responsible

FlexStay Bangkok
Email: privacy@flexstay-bangkok.com

2. Browsing without an account

You do not need an account to search listings, open the map or contact an agent. We do not ask browsing users for a name, an email address or a phone number, and we do not create a user profile for them.

When a listing is opened or a contact button is tapped, we record:

  • the identifier of the listing,
  • whether the event was a view or a contact click, and which channel was used,
  • the time of the event.

These events carry no user ID, no device identifier and no advertising identifier, and they are not combined into a profile. They tell an agent how often their listing was seen. Our servers process the IP address of the request only to enforce a rate limit against abuse; it is stored as an irreversible hash, never in plain text, and the limiter records are discarded after 24 hours.

We do not use Google Analytics, advertising networks, tracking pixels or any cross-site or cross-app tracking. The app does not ask for App Tracking Transparency permission because it does not track you.

3. Portal accounts for agents and owners

If you register for the portal to publish listings, we process the data you enter: email address, password (stored only as a salted hash by Firebase Authentication), display name, company name, phone number, LINE ID, an optional logo URL, and whether the account is an agent or an owner account.

We use this data to operate your account, to review your submissions, and to show your contact details on the listings you publish. Your name, company, phone number, LINE ID and email appear publicly on every listing of yours that we approve – that is the purpose of the listing, and you decide what to submit.

4. Listing content and photos

Listings and photos submitted through the portal are stored on our servers. Every submission is first saved with the status “pending” and is not publicly visible. Our team reviews it and only then publishes it. We may reject, unpublish or remove content that is inaccurate, unlawful or objectionable.

The iOS app requests access to your photo library only at the moment you pick photos for a listing. It reads nothing else from your library and never accesses it when you only browse.

5. Legal bases

Where the GDPR applies, we rely on Article 6(1)(b) – performance of a contract – for operating portal accounts and publishing the listings you submit, and on Article 6(1)(f) – legitimate interests – for keeping the service secure, preventing abuse and producing the aggregate view and contact counts shown to agents. Where the Thai Personal Data Protection Act (PDPA) applies, we rely on the equivalent contractual necessity and legitimate interest grounds.

6. Cookies and local storage

We set no advertising or analytics cookies, and there is no consent banner because there is nothing to consent to. The website stores two things in your browser, both strictly functional: your light or dark theme preference, and – only if you sign in to the portal – the session token that keeps you signed in. Clearing your browser storage removes both.

7. Service providers

We use Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Storage and Cloud Functions, operated by Google Cloud EMEA Limited / Google LLC) to host the service and store the data described above. Google acts as our processor under a data processing agreement. Our Cloud Functions run in the asia-southeast1 region (Singapore).

Maps in the app are rendered by Apple Maps on your device. When you tap Call, LINE, WhatsApp or Email, your device hands the request to that app or service, and their own privacy policy governs what happens next. We do not see the content of your conversation with an agent.

We do not sell personal data, and we do not share it for advertising purposes.

8. International transfers

Our data is stored on Google Cloud infrastructure and may be processed outside your country, including in Singapore and the United States. Google's Standard Contractual Clauses cover these transfers where required.

9. How long we keep data

  • Portal account data: until you delete your account, or after a reasonable period of inactivity.
  • Listings and photos: until you or we remove them, or until your account is deleted.
  • View and contact counters: for the lifetime of the listing they belong to.
  • Rate-limit records containing a hashed IP address: 24 hours.

10. Deleting your account

Portal account holders can delete their account at any time. In the iOS app, open the Portal tab, scroll to the bottom and choose Delete Account. You confirm with your password, and we then permanently remove your profile, every listing you submitted – published or pending – every photo you uploaded for them, and your sign-in itself. The deletion is immediate and cannot be undone.

If you cannot access the app, write to privacy@flexstay-bangkok.com from the email address of the account and we will delete it for you.

11. Your rights

Depending on where you live, you have the right to access your data, correct it, have it deleted, restrict or object to its processing, and receive a copy in a portable format. Write to privacy@flexstay-bangkok.com and we will respond within 30 days. You may also lodge a complaint with your local data protection authority, or in Thailand with the Personal Data Protection Committee.

12. Children

The service is meant for adults looking for housing. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

13. Security

All traffic is encrypted with HTTPS/TLS. Access to the database is restricted by server-side security rules: unpublished listings are visible only to their author and to our reviewers, and profile records are readable only by their owner. Passwords are never stored in plain text.

14. Changes

If we change this policy we will update the date at the top of this page and, for material changes, notify portal account holders by email.

15. Contact

Privacy questions: privacy@flexstay-bangkok.com
Everything else: our support page.