Privacy Policy | Ganghkau Pinra

1. Our role and an Organization's role

Ganghkau Pinra provides tools for organizations to manage membership, events, internal communication, and community relationships. Each organization using the platform decides which membership information it collects, who may access it, and how long it needs the information for its own activities. That organization is responsible for handling its members' information lawfully and for answering questions about its own membership practices. We operate and support the platform.

2. Information we collect

Account information. Your name, username, email address, preferred name, phone number, profile photo, language preference, and social-login account information. When you sign in through a social provider, we receive the information that provider makes available for sign-in, which may include your name, email address, and profile image.

Membership information. Your membership ID, role, verification and renewal status, department or role assignments, and answers to fields created by an organization. Depending on the organization, these fields may include contact details, date of birth, address, emergency contact details, or other information entered by you or an administrator.

Content and activity. Posts, comments, event registrations and attendance, badges, household and relationship records, notifications, and activity history created through the platform.

Media and organization information. Profile images, membership images, organization logos, organization photos, event images, feed attachments, and organization contact, location, and social-link details.

Technical information. Information required to operate and secure the service, such as browser and request information, security logs, and error reports when an error-monitoring service is enabled.

Sensitive information, where an organization chooses to collect it. Because Ganghkau Pinra is often used by community and religious organizations, membership information may reveal things like religious affiliation, ethnicity, or community association simply by identifying which organization you belong to, and an organization's own custom fields could capture health, dietary, or other sensitive details. We treat this the same as any other membership information an organization is responsible for, but you should be aware that joining an organization on the platform can itself disclose this kind of information to that organization.

3. How we use information, and why we're allowed to

Provide, secure, maintain, and improve accounts, memberships, events, feeds, and community tools.
Authenticate users and link an account to a membership when authorized.
Enable organization administrators to manage their organization and communicate through the platform.
Provide public membership-card verification when an organization has issued an active, verified card.
Respond to support requests, investigate misuse, and protect the platform, its users, and organizations.
Meet legal obligations and enforce our Terms of Service.

In plain terms: we use information because it's needed to provide the service you or your organization asked for, because an organization has a legitimate interest in managing its own members and activities, because the law requires or allows it, or because you've given consent (for example, by choosing to make information visible in a community directory or on a verification page).

We do not currently send you email — there are no signup, password-reset, or notification emails from Ganghkau Pinra itself. Updates happen inside the platform (for example, through the Feed), and any email you receive about an organization comes from that organization directly, not from us.

4. Visibility and public membership-card verification

Information is visible according to the platform settings and the permissions assigned by an organization. Organization administrators can access the membership records they manage. Other members may see only the information made available in their organization or its community directory.

An active, verified membership card includes a QR code. Anyone with that code can open a public verification page containing the member's public display name, profile image, membership ID, membership status, and renewal history, together with the organization name, logo, contact details, address, and social links that the organization has chosen to show. An organization can stop this public verification by making the membership inactive, archived, or deceased.

5. How information is shared, and the services we use

We do not sell personal information. We share information only as needed to operate the platform: with the organization that manages the relevant membership; with other members when the applicable visibility settings allow it; with social-login providers you choose; and with the service providers below that help us host, secure, or support the platform. We may also disclose information when required by law or when needed to protect people, rights, property, or the security of the service.

Google Sign-In (and, when enabled, Facebook or Line) — to let you sign in without a separate Ganghkau Pinra password.
Sentry — an error-monitoring service that helps us detect and fix problems in production; it may receive limited technical details about a request when an error occurs.
OpenStreetMap, including its Nominatim search service, and the Leaflet mapping library — used for the organization and event location pickers and for displaying maps and address links. When you use a location picker or view a map, your browser communicates directly with these third-party services, which may log that request (including your IP address) independently of us.
Our hosting and network infrastructure providers — including our web server and content-delivery/tunnel provider, which handle traffic to and from the platform.

6. International data transfers

Ganghkau Pinra is operated from Thailand, but the service providers listed above may process information in other countries, and our infrastructure may route traffic through servers outside Thailand. Where we transfer personal information internationally, we rely on the fact that these providers operate under their own security and privacy commitments, and we take reasonable steps to make sure information continues to be protected consistently with this Privacy Policy wherever it is processed.

7. Cookies and similar technologies

We use essential cookies for sign-in, language selection, security, and form protection. We do not use advertising cookies or sell information for targeted advertising, and we don't currently run analytics or advertising trackers of our own. Our browser does not currently respond differently to a "Do Not Track" browser signal, because we don't track you across other sites in the first place.

8. Retention

We keep account, membership, and activity information for as long as needed to provide the service, maintain organization records, resolve disputes, meet legal obligations, and protect the platform. An organization may keep historical membership records after a member is no longer active. Backup and security records may remain for a limited period after deletion or deactivation.

9. Your choices and rights

You can update much of your account and membership information in the platform. You may also request access, correction, deletion, or other rights available under applicable law through our Privacy and Data page. Contact the relevant organization first for information it manages. We may need to verify your identity before completing a request, and some information may need to be retained for legal, security, or record-keeping reasons.

An organization owner can also export a portable copy of the organization's data — including membership records, media, and activity content — for example, to back it up, move it between deployments, or keep an offline record before deactivating or deleting the organization. Once that copy has been downloaded, it is outside our systems, and safeguarding it becomes the organization's responsibility.

10. Children and sensitive information

The platform is not intended for children to create accounts without appropriate parent or guardian involvement. As described in Section 2 of our Terms of Service, an organization may instead keep a non-account ("unlinked") membership record for a child. Organizations that enter information about children, health, emergency contacts, or other sensitive information are responsible for ensuring they have a lawful basis and any required permission to do so. If you believe information about a child was provided improperly, contact us promptly.

11. Security and breach notification

We use reasonable technical and organizational safeguards designed to protect information, including encrypted connections, access controls, secure session handling, and protected password storage where a password is used. No internet service can guarantee absolute security. If we become aware of a security incident that affects your personal information, we will take reasonable steps to investigate and contain it, and we will notify affected users and, where required, the relevant authorities, as required by applicable law.

12. Changes to this policy

We may update this Privacy Policy when the platform or legal requirements change. The effective date above shows when it was last revised. Continued use after an update means you acknowledge the updated policy, where permitted by law.

13. Contact

For privacy questions or requests, contact Ganghkau Pinra at [email protected]. Ganghkau Pinra is operated by Wehkawng Zahkung Shiengkat, based in Thailand.