Privacy Policy

Introduction

Second Stories ("we," "our," or "us") operates the Second Stories mobile application (the "Service") that enables users to rent and sell fashion items through a peer-to-peer marketplace platform.

This Privacy Policy describes how we collect, use, and share information when you use our Service. By using Second Stories, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide to Us

Account Information:
- Name and email address
- Phone number
- Profile photo
- Thai ID verification documents (for identity verification)
- PromptPay account information

Listing Information:
- Item photos and descriptions
- Pricing information
- Item condition and specifications
- Location information for item pickup/delivery

Transaction Information:
- Rental and purchase history
- Payment receipts and transaction records
- Communication between users
- Reviews and ratings

Communication Data:
- Messages sent through our in-app messaging system
- Customer support communications
- Notifications preferences

Information We Collect Automatically

Device Information:
- Device type, operating system, and version
- Unique device identifiers
- IP address and general location information
- App usage analytics and crash reports

Usage Information:
- How you interact with our Service
- Features you use and time spent in the app
- Search queries and browsing behavior
- Push notification interactions

Information from Third Parties

Authentication Services:
- Google Sign-In: Basic profile information (name, email, profile photo)
- Facebook Sign-In: Basic profile information or anonymous identifiers
- LINE Login: Basic profile information (name, email, profile photo)

Payment Services:
- PromptPay transaction confirmations
- Payment processing information from our payment partners
- Bank transfer confirmations

How We Use Your Information

We use the information we collect to:

Provide and Improve Our Service
- Create and manage your account
- Process rentals, sales, and payments
- Facilitate communication between users
- Verify user identity and prevent fraud
- Provide customer support
- Send transaction confirmations and updates

Safety and Security
- Verify user identity through Thai ID validation
- Monitor for fraudulent or suspicious activity
- Enforce our Terms of Service
- Protect the rights and safety of our users

Communications
- Send important service notifications
- Provide customer support responses
- Send marketing communications (with your consent)
- Push notifications about rentals, messages, and app updates

Analytics and Improvements
- Analyze app usage to improve our Service
- Develop new features and functionality
- Conduct research and analytics
- Generate aggregated, non-identifying statistics

How We Share Your Information

We may share your information in the following circumstances:

With Other Users
- Your public profile information (name, photo, ratings)
- Item listings and descriptions
- Reviews and ratings you provide
- Communication necessary for transactions

With Service Providers
- Payment processors (for transaction processing)
- Cloud storage providers (for data hosting)
- Analytics services (for app improvement)
- Customer support tools
- Identity verification services

For Legal Reasons
- To comply with applicable laws and regulations
- To respond to legal requests and court orders
- To protect our rights and the safety of our users
- To prevent fraud and abuse

Business Transfers
- In connection with a merger, acquisition, or sale of assets
- During bankruptcy or similar proceedings

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

- Encryption of sensitive data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication requirements
- Secure data centers and cloud infrastructure
- Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

- Account Information: Retained while your account is active and for 3 years after account deletion
- Transaction Records: Retained for 7 years for legal and tax compliance
- Communication Data: Retained for 2 years after the last interaction
- Usage Analytics: Aggregated data may be retained indefinitely

You may request deletion of your personal information at any time, subject to legal retention requirements.

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability
- Request access to your personal information
- Receive a copy of your data in a portable format

Correction and Updates
- Update your account information through the app
- Request correction of inaccurate information

Deletion
- Delete your account through the app settings
- Request deletion of specific information

Communication Preferences
- Opt out of marketing communications
- Manage push notification settings
- Control email preferences

Data Processing
- Object to certain processing activities
- Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@secondstories.com or through the app's support feature.

Children's Privacy

Second Stories is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than Thailand, including countries that may not have the same data protection laws as your jurisdiction. We ensure appropriate safeguards are in place for such transfers.

Third-Party Services

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

Third-Party Services We Use:
- **Firebase (Google):** Authentication, database, and analytics
- **PromptPay:** Payment processing
- **Facebook SDK:** Social login and analytics
- **Apple Services:** Authentication and push notifications

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy in the app
- Sending an email notification
- Displaying a prominent notice in the app

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: hello@secondstories.com
Support: Through the Second Stories app support feature (LINE account)
Address: [Your Business Address]

Compliance

This Privacy Policy is designed to comply with:
- Thailand's Personal Data Protection Act (PDPA)
- Apple App Store Review Guidelines
- Google Play Store Privacy Requirements
- General Data Protection Regulation (GDPR) where applicable

Second Stories Team
Building a sustainable fashion community

This Privacy Policy was last updated on 26/07/2025. Please review it periodically for any changes.*