Legal

1. Data Controller

Signa Asst Co., Ltd (registration 0205567044915), 88/1 Moo 1, Nong Prue, Chonburi 20150, Thailand. Privacy contact: privacy@leaseshield.asia. Lease Shield generally acts as data controller for account management, subscriptions, lease analysis, evidence storage, document generation, Resolve cases, security and support. The role may vary in limited circumstances depending on the specific processing arrangement.

2. Scope

Applies to: website visitors, registered users, tenants, landlords, property managers, agents, Resolve customers, and individuals whose information appears in uploaded documents.

3. Personal Data Collected

Identity and contact: name, email, telephone, language preference.

Account data: credentials, login records, security logs.

Property and lease data: lease documents, property details, risk scores, generated reports and letters.

Third-party data in uploads: landlord, agent, co-tenant, guarantor information; passport, visa, TM30 or identity documents when voluntarily uploaded; payment receipts; bank details appearing in documents; photos, videos, audio, message screenshots.

Case data: Resolve case notes, communications, case outputs.

Payment data: subscription status, transaction records.

Technical data: IP address, browser and device data, cookie and analytics data (where consent given).

AI data: document extracts submitted for analysis, AI prompts, generated responses.

4. Sources

Direct user input; platform usage; documents uploaded by users; other parties to a Resolve case; payment, authentication and technical providers; automated analysis.

5. Third-Party Data Uploaded by Users

Users must have a lawful basis to upload information, upload only information reasonably relevant to the tenancy or dispute, avoid uploading unnecessary sensitive information, redact unnecessary ID numbers and financial data where possible, and not upload unlawfully obtained recordings. Lease Shield may remove content reasonably believed to be unlawful or irrelevant.

6. Purposes and Lawful Bases

7. Sensitive Personal Data

Uploaded documents may contain health information, immigration data, criminal allegations or financial data. Users should not upload sensitive information unless necessary. Where sensitive data is required for a legal claim, Lease Shield processes it under an applicable PDPA basis. Users are encouraged to redact unnecessary sensitive details before uploading.

8. AI and Automated Processing

Lease scan analysis and the Lisa assistant submit document content and prompts to AI models integrated through the platform infrastructure, provided by OpenAI and Anthropic. Processing occurs in Singapore-based infrastructure. Platform AI integrations are configured to not use user content for model training. Risk scores and generated outputs are informational only and do not constitute legal advice. Outputs may be incomplete or incorrect. Users should verify all critical information independently.

9. Recipients and Service Providers

10. International Transfers

Lease Shield uses providers whose infrastructure is located in Singapore and other countries. Where personal data is transferred outside Thailand, Lease Shield relies on applicable safeguards under Sections 28 and 29 of the Thailand PDPA.

11. Retention

Lease Shield retains personal data only as long as necessary. Active account data is retained while the account is open. Vault documents follow the user's deletion instructions subject to legal retention requirements. Payment and accounting records are retained for seven years per Thai legal requirements. Resolve case records are retained for five years after case closure. Security and access logs are retained for twelve months. Deleted files are soft-deleted immediately and permanently purged during periodic maintenance cycles. Some data may be retained longer where required for fraud prevention, chargebacks or legal claims.

12. Security

Lease Shield uses reasonable administrative, technical and organisational measures appropriate to the risk, including encryption in transit, role-based access controls, and access restricted to authorised personnel and service providers on a need-to-know basis. No system is completely secure. Users should use a strong password and keep account credentials confidential.

13. Resolve Case Access

Ordinary Lease Shield staff do not routinely access Vault documents. When a user opens a Resolve case, only files deliberately submitted to that case are reviewed by authorised Resolve Case Officers. Access is limited to the case purpose. Documents not submitted to the case remain private.

14. Data Subject Rights

Users have the right to: access, copy, correction, deletion or anonymisation, restriction, objection, portability, withdrawal of consent, and complaint to the Thai Personal Data Protection Committee (PDPC). Rights are not absolute and may be limited by legal obligations or legal claim requirements. Submit requests to privacy@leaseshield.asia.

15. Children

Lease Shield accounts are for users aged 18 and over. If Lease Shield becomes aware that a minor has registered, the account will be suspended and data reviewed for deletion.

16. Breach Response

Lease Shield maintains an incident response process and will provide legally required notifications to the Thai PDPC and affected individuals where applicable.

17. Policy Changes

Material changes will be notified in advance. The effective date will be displayed on this page.