Privacy policy
This notice explains what personal data KASET GEN-Y, the operator of this website and of its online marketplace, collects about you, what we use it for, who we pass it to, how long we keep it, and what you can tell us to do with it — under the Thai Personal Data Protection Act B.E. 2562.
Where anything in this notice conflicts with how the service actually works, the facts prevail — please tell us so we can correct the notice.
Who controls your personal data
The personal data controller for this website and its drone-booking system is KASET GEN-Y (เกษตร เจนวาย), the KASET GEN-Y office, which provides its services through the business’s own online marketplace.
- Legal entity operating the business
- GREEN CENTER SERVICE LIMITED PARTNERSHIP (ห้างหุ้นส่วนจำกัด กรีนเซ็นเตอร์เซอร์วิส)Juristic person registration number / taxpayer identification number 0403559001303
- Office address
- 386 Moo 13, Ban Thum Subdistrict, Mueang Khon Kaen District, Khon Kaen 40000386 หมู่ 13 ต.บ้านทุ่ม อ.เมือง จ.ขอนแก่น 40000
- Phone
- 063-289-6829 · 062-191-5748
- [email protected]
- LINE
- @449dunud
- Business hours
- Daily 09:00–18:00
For now, enquiries about personal data use the same channels as the general contact channels above. If a dedicated data protection officer is appointed, we will publish their name and contact details on this page.
The personal data we collect
We collect only the data needed to take on jobs, schedule them, send a pilot to the right plot, and keep evidence of the work that can be checked later.
- Contact details
- Your first name and surname or the name you go by, your phone number, and your address for product deliveries.
- LINE account data
- When you open the system through LINE, we receive your user ID, display name and profile picture from LINE, to link them to the jobs you book and to send you job-status messages.
- Google account and user account data
- When you sign in with Google, we receive your name, email address and profile picture from Google · If you set your own username and password, we store your password only in a non-reversible form (a hash); no one in the system can see your password.
- Data for tax invoices
- When you request a full tax invoice, we keep the taxpayer name, taxpayer identification number, branch code and registered address. For an individual, the taxpayer identification number is the national ID card number.
- Reward points and applications
- Your points balance and the history of points earned and used, and the information you fill in on an application to become a Farm Hub partner.
- Smart Farm device data
- For users of the smart farm system: sensor readings (such as temperature, humidity and water level), commands to switch equipment on and off, and the command history, which are linked to your farm and your account.
- Farm plot data
- The plot location, the district and subdistrict names, the area in rai, the crop type and growth stage, and any obstacles you tell us about, such as power lines, electricity poles and tall trees.
- GPS coordinates
- The coordinates of the plot pin you place, and the pilot’s location coordinates while working. These are used to navigate to the plot and to confirm that the work really took place on your plot. The website asks for your device’s location only when you tap to allow it.
- Plot photos and job photos
- Photos taken before, during and after spraying, including photos of crop leaves you send us to help look at symptoms.
- Transfer slips and payment data
- The slip images you upload, which usually show the payer’s account name, the bank, part of the account number, the amount, the date and time of the transfer, and the transaction reference code.
- Messages you send us
- Chat messages with staff or the automated assistant, requests, complaints, and job review ratings.
- Technical data
- IP address, device and browser type, and system access records (logs), which are generated automatically when you use the service and are used for security and to fix system problems.
We do not intend to collect sensitive personal data under Section 26, such as health data, religion or biometric data. Please do not submit such data to the system. If it is submitted when it is not needed, we will delete it when we find it.
What we use it for, and our lawful basis
We use your data only for the purposes below. If we want to use it for any other purpose, we will tell you and ask for your consent first.
- Taking on jobs, scheduling, and providing the spraying service
- We use your name, phone number, plot location, coordinates, area and crop type to calculate the price, match you with a Farm Hub and a pilot in your area, and navigate to your plot.The box for item 1 that you tick when signing up confirms that you acknowledge the collection of this set of data, which is necessary to provide the service (it is not an optional consent) · If you later ask to “withdraw” this item on the My details page, we will stop providing member services to that account, because the service cannot be provided without this data — documents the law requires us to keep remain as set out in section 07 · Data that is not necessary (occupation · how you heard about us · receiving news) is based on consent: you can use the full service without ticking these, and you can withdraw at any time.Lawful basis — Contractual basis — necessary to provide the service you booked
- Job-status updates and calling you back
- We use your phone number and LINE account to let you know that the pilot has set off, has arrived at the plot, has finished the job, or needs to postpone the job because of the weather.Lawful basis — Contractual basis
- Checking payments and issuing proof of payment
- We use transfer slips and order records to confirm the amount paid, issue receipts, and keep them as accounting evidence.Lawful basis — Contractual basis and legal obligation — tax and accounting law
- Keeping evidence of work quality and resolving disputes
- We use before-and-after photos, coordinates and working times to prove that the work was actually done as agreed, and to check things when a complaint is made.Lawful basis — Legitimate interest — both yours and ours
- System security
- We use technical data and usage records to prevent misuse of the system, fake bookings and attacks on the system.Lawful basis — Legitimate interest
- Improving the service
- We use summary data that does not identify individuals, such as the number of jobs per district and the most common crop types, to plan staffing and service areas.Lawful basis — Legitimate interest
- Sending news and promotions
- We send news about products, packages or activities by LINE or SMS only if you have given your consent, and you can cancel at any time without affecting your right to use the service.Lawful basis — Consent — can be withdrawn at any time
Sending photos and payment slips to an AI system
Important
When you upload plot photos, crop-leaf photos or transfer-slip images to the system, the image is sent to an external artificial intelligence (AI) model provider to be read and interpreted automatically. The current provider is OpenAI, whose servers are in the United States.
The system uses AI to process images for two tasks:
- Reading transfer slips — the system sends the slip image to the AI to read the amount, the transfer date and time, the bank and the payer’s account name, and then automatically compares them with the amount due, so that payment can be confirmed faster.
- Checking spraying-job photos — the system sends plot or crop-leaf photos to the AI to help check whether the image is clear enough to serve as evidence, and to help make a preliminary assessment of what can be seen in the image.
What is sent out is the image itself and a short accompanying description only. We do not attach your name, phone number or LINE user ID to the image. Please note, however, that the image itself may contain personal data, such as the account name on a slip or the faces of people who appear in a plot photo.
What the AI reads is only information to help with the decision. Staff always make the final decision. The system will not reject a job, cancel an order or reject your payment based on the AI result alone.
Tip: before uploading a slip, cover or remove the parts that are not needed, such as the full account number, and avoid taking plot photos that clearly show other people’s faces unless necessary.
Transfers of data outside Thailand
Some data is sent for processing outside Thailand, as follows.
- People’s Republic of China
- DeepSeek — the messages you type to the automated assistant on the website and in LINE (your name, phone number and account ID are not attached)
- United States
- OpenAI — slip images and plot/crop-leaf photos · Google — account data when you sign in with Google · Resend — emails the system sends you · Cloudflare — requests to the website (its network spans many countries, including Thailand)
- Under LINE’s policies
- Messages and account data when you use the service through LINE
We send only what is necessary for the purposes stated · some of the destination countries above have not yet been declared by the Personal Data Protection Committee to have adequate data protection standards, so we tell you here and in the automated assistant’s input box before you type · if you do not want your messages to be processed outside Thailand, contact our staff by phone as set out in section 13 instead of using the automated assistant.
How long we keep your data
We keep data only for as long as necessary for the purpose for which it was collected, plus any period for which the law requires it to be kept. After that, we delete or destroy the data, or make it unable to identify you.
- Job data and evidence photos — kept so that they can be checked later and used to resolve disputes
- Receipts, tax invoices and payment documents — at least 5 years from the date the tax return for that month is filed (Revenue Code, Section 87/3), and supporting accounting documents at least 5 years from the date the accounts are closed (Accounting Act B.E. 2543 (2000), Section 14) — so they cannot be deleted before that period ends, even if you ask
- Sign-in records (time · IP address · device) — at least 90 days (Computer-Related Crime Act, Section 26)
- Pilots’ GPS locations while working — deleted automatically after 7 days
- LINE message events received by the system — deleted automatically after 90 days
- Data kept on the basis of consent, such as receiving news — use stops as soon as you withdraw your consent
If you would like to know the retention period for a particular set of data, contact us through the channels in section 13 and we will let you know.
Your rights under the law
Under the Personal Data Protection Act B.E. 2562 (2019), you have the following rights, and exercising them is free of charge.
- Access and copies
- Ask to see what data we hold about you, and ask for a copy of it.
- Correction
- If data is incorrect or out of date — for example, your phone number has changed or your plot size is wrong — you can ask us to correct it.
- Deletion or destruction
- Ask for data to be deleted when it is no longer needed for its purpose, or after you have withdrawn your consent.
- Restriction of use
- Ask us to stop using data temporarily, for example while its accuracy is being checked.
- Objection to collection, use or disclosure
- Object to processing based on legitimate interest, and object at any time to the use of your data for direct marketing.
- Data portability
- Receive your data in a machine-readable format, or ask for it to be sent to another data controller, as far as is technically possible.
- Withdrawal of consent
- Withdraw any consent you have given at any time, without affecting processing that was lawfully carried out before then.
- Complaint
- Complain to the Personal Data Protection Committee if you believe we are not complying with the law.
How to exercise your rights: contact us by phone, LINE or email as listed in section 13 and tell us which right you want to exercise. We may ask you to verify your identity first, so that no one else can obtain your data, and we will complete the request within 30 days of receiving it.
In some cases we may refuse a request where the law allows, for example when we still have a legal duty to keep that document, or when the data is necessary for exercising legal claims. In such cases we will tell you the reason.
How we keep your data secure
We protect data in a way that is reasonable for the nature of our business, including:
- Sending and receiving data over encrypted connections (HTTPS) across the whole website
- The operations screens for admins, hubs and pilots are blocked from being indexed by search engines and require identity verification before use
- Limiting access rights so that people can see only what they need for their role
- Requiring external service providers who access data to keep it confidential and to use it only on our instructions
No system is 100 percent secure. If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify the Office of the Personal Data Protection Committee within 72 hours where feasible, and notify you as required by law.
Data belonging to minors
This service is intended for people who have reached the age of majority, as users and as contracting parties. If a minor is to use the service or give consent in matters beyond what the law permits, consent must first be obtained from the person exercising parental authority.
If we find that we have collected a minor’s data without valid consent, we will delete that data as soon as we become aware of it.
Changes to this notice
When the service changes, this notice must change with it. We will always keep this page in line with what the system actually does, and will show the date of the latest update at the top of the page.
If there is a material change, such as a new purpose or a new recipient of data, we will let you know through the channels we already use to contact each other, before the new terms take effect.
Contacting us, and complaints
For any matter about personal data — whether to exercise your rights, ask for an explanation or make a complaint — contact us through these channels.
- Personal data controller
- KASET GEN-Y (เกษตร เจนวาย)Operated by GREEN CENTER SERVICE LIMITED PARTNERSHIP (ห้างหุ้นส่วนจำกัด กรีนเซ็นเตอร์เซอร์วิส)
- Address
- 386 Moo 13, Ban Thum Subdistrict, Mueang Khon Kaen District, Khon Kaen 40000386 หมู่ 13 ต.บ้านทุ่ม อ.เมือง จ.ขอนแก่น 40000
- Phone
- 063-289-6829 · 062-191-5748
- [email protected]
- LINE
- @449dunud
- Business hours
- Daily 09:00–18:00
If you have contacted us and are still not satisfied with how the matter was resolved, you have the right to complain to the Office of the Personal Data Protection Committee, which is the regulator under the law.
