Privacy Policy — Reyoung Internal Tools

Last updated: 9 October 2026

Reyoung Clinic (Thailand) operates two internal software tools, used only by the clinic owner and staff acting on his instructions. They are not offered to the public and have no public login:

• Reyoung Ads Manager — manages advertising and customer messaging for the clinic's own Facebook Page, its own Instagram professional account (@reyoung_clinic) and its own advertising account, using Meta's APIs.
• Reyoung Backup — stores encrypted backups of our internal system in the clinic owner's Google Drive.

Data we receive from Meta (Facebook and Instagram)

• Performance data about our own advertisements: spend, impressions, clicks, message and purchase counts, ad names and IDs.
• When someone messages our Facebook Page or Instagram account, Meta notifies our server. From that notification we keep only the person's page-scoped ID (a number that only identifies them to our Page or account), the time, and the advertisement referral identifiers (ad ID, source, type) when the conversation started from one of our ads.
• For people who message our Facebook Page, we also keep the account name shown in our conversation list, so our staff can match a booking to the conversation.
• When we reply from our Instagram account through our messaging tool, Meta returns a message ID.

We never store the text of messages that we receive from Meta, and we never send it to any AI service.

Data our staff enter

Our staff record bookings and deposits in our internal LINE groups: the customer's name, phone number, amount, branch and a photo of the bank transfer slip. Before 9 Oct 2026, staff sometimes also posted a screenshot of a conversation or of the advertisement information screen, so we can tell which advertisement a customer came from. Our staff are instructed (9 Oct 2026) to post only bank transfer slips in these groups.

Why we use the data

• To measure which of our own advertisements lead to conversations, bookings and deposits, and to manage our advertising budget.
• To reply to people who message us.
• To keep our booking and deposit records accurate.

Service providers that process data for us

We do not sell personal data and we do not share it with anyone for their own purposes. These providers process data only on our behalf:

• DigitalOcean (Singapore) hosts our server and database.
• Anthropic (Claude AI) receives:
  • our own advertising performance data (per-ad metrics, names and IDs) to draft suggestions for the clinic owner;
  • images our staff post in our internal LINE groups (bank transfer slips, advertisement screenshots) to read the amount, the date and the advertisement ID. A slip shows the sender's name, and a conversation screenshot posted by staff can show part of that conversation;
  • short internal messages from our staff when they report a technical problem.
  Our developer also uses Anthropic's Claude Code as an engineering assistant on our server; during maintenance it can read stored records.
• LINE (LY Corporation) carries our internal staff groups, where booking and deposit records are posted, and delivers our bot's replies to those groups.
• Google: Google Drive (the clinic owner's account) stores an encrypted (AES-256) nightly backup of our system and the video files of our advertisements; Google Sheets (the clinic owner's account) holds our internal customer records.
• Telegram delivers internal reports and approval requests to the clinic owner, and stores a copy of the encrypted nightly backup in the owner's private chat.

Reyoung Backup and Google Drive

Reyoung Backup uses the limited Google Drive permission drive.file: it can access only the backup files it creates in the clinic owner's own Google Drive and cannot see, read or change any other file. Backups on Google Drive are kept for 14 days and then deleted automatically. The account owner can delete the files or remove the app's access at any time at myaccount.google.com/permissions.

How long we keep data

Records are kept while they are needed to run the clinic's bookings and measure our advertising, and are deleted on request. Encrypted backups on Google Drive are deleted after 14 days; encrypted copies in the owner's private Telegram chat are kept by the owner.

Your choices

You can ask us to delete data linked to your Facebook or Instagram profile at any time: https://ops.reyoung.clinic/data-deletion.html

Contact

Email: sapp.kittisak@gmail.com (Reyoung Clinic)

สรุปภาษาไทย

เครื่องมือภายในของ Reyoung Clinic ใช้กับเพจ บัญชี Instagram บัญชีโฆษณา และ Google Drive ของคลินิกเท่านั้น จาก Meta เราเก็บเฉพาะรหัสผู้ใช้เฉพาะเพจ เวลา รหัสโฆษณา และชื่อบัญชีในรายการแชทของเพจ Facebook — ไม่เก็บและไม่ส่งเนื้อหาข้อความจาก Meta ให้ AI ผู้ประมวลผลแทนเรา: DigitalOcean · Anthropic (ข้อมูลโฆษณาของเรา และรูปที่พนักงานโพสต์ในกลุ่ม LINE ภายใน เช่น สลิป ภาพหน้าจอแชท) · LINE · Google (Drive/Sheets) · Telegram ไม่ขายและไม่ส่งต่อข้อมูลเพื่อประโยชน์ของผู้อื่น · ขอลบข้อมูลได้ที่ https://ops.reyoung.clinic/data-deletion.html