Privacy Policy

RAWLITY Studio ("RAWLITY," "we," "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights as a user.

We collect the following information when you use our service:

• Account data:email address, display name (from Google or email registration)
• Profile data:full name, phone number, Line ID (optional)
• Order data:shipping address, card details, declared value, payment slip image
• Usage data:page views and authentication events (via Supabase)

We use your information exclusively to:

• Process and track your card grading submissions
• Send your cards back to the correct return address
• Notify you of order status updates
• Verify payments via SlipOK
• Improve our service quality

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your data is stored securely on Supabase (hosted on AWS). We implement industry-standard security measures including:

• Row-level security (RLS): you can only access your own data
• JWT authentication for all API requests
• Private storage bucket for payment slips
• Encrypted connections (TLS/HTTPS) for all data transfers

We use the following third-party services, each governed by their own privacy policies:

• Supabase:authentication, database, and file storage
• Google OAuth:optional sign-in method
• SlipOK:payment slip verification
• Netlify:website hosting

Public reports. If you choose a pre-grade and we publish your report, the report page (card name, scans, and pre-grade) becomes viewable by anyone who has its unguessable link. It does not include your name, address, phone, or order details. Payment slips and personal data are kept only as long as needed to provide the service.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account and associated data
• Object to, or request restriction of, the processing of your data
• Request a copy of your data in a portable format (data portability)
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at rawlitystudio@gmail.com. We respond within the timeframe required by Thailand's Personal Data Protection Act (PDPA).

We use session cookies solely for authentication (Supabase session management). We do not use advertising or tracking cookies.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our service constitutes acceptance of any changes.

For privacy-related inquiries, please contact us at rawlitystudio@gmail.com.

Data Controller: RAWLITY STUDIO, 87/193 Soi Watcharapol 13/1, Don Mueang, Bangkok 10210, Thailand. Data-protection enquiries and data-subject requests are handled by our data-protection contact at rawlitystudio@gmail.com.