Privacy Policy

Starts 13 October 2026

Who looks after your information

Mutory is run by Mutory Co (registration in progress) in Latphrao, Bangkok. We're the ones responsible for your personal information under Thailand's personal data protection law.

If you have a question about your privacy, email us at support@mutory.com.

What we collect

• Your name, profile photo, email and account ID, which we get when you sign in with LINE or Google.
• Your phone number. Everyone has to give one.
• Whether you're an owner, an agent or a tenant.
• Details about the room and the tenancy: the room's name or address, move-in and move-out dates, rent, deposit and anything taken off it.
• Room photos and when they were taken, signatures, whether you accepted or disputed something, rent records, repair records and PDF reports.
• How you use the app: when you sign in, your IP address, what kind of device you use, and any errors.

Please don't upload sensitive things like health or religious details.

What we use it for

• Setting up your account and signing you in.
• Recording the room's condition, making reports and working out the deposit refund.
• Letting the owner, tenant and agent of the same room see the same reports and call each other.
• Keeping things secure, stopping fraud and fixing problems.
• Doing what the law requires.

We don't use your information for ads. If we ever want to send you news or offers, we'll ask you first.

Who can see your information

• The owner, tenant and agent of the room you're part of. A new tenant never sees what the previous tenant left behind.
• The companies that run our systems, listed in the next section.
• Government offices or courts, if the law makes us share it.
• Anyone you choose to send a report to yourself, like a lawyer or the consumer protection office.

We never sell your information.

Where it's kept

We keep your information with the companies that run our systems: Supabase, whose servers are in Singapore, and Vercel, which hosts the website. Signing in goes through LINE and Google. So some of your information may be handled outside Thailand. We only use companies that look after data properly.

We only use what we get from Google to sign you in. We don't sell it, use it for ads or pass it to anyone else, and we follow Google's rules on user data, including its Limited Use rules.

How long we keep things, and deleting your account

You can delete your account yourself on the account page in the app. You can also email support@mutory.com from the account you sign in with.

As soon as you delete it, we remove your name, profile photo, phone number, email and your link to LINE or Google.

Locked tenancy records stay, though. That means condition reports, photos with the time they were taken, signatures, the deposit refund, rent records and repair records. These records:

• can be viewed but not changed,
• can only be seen by the people in that tenancy,
• are kept for 2 years after the tenancy ends, and then the system deletes them,
• are kept longer only if there's a dispute you've told us about that isn't settled yet, and only until it's settled.

We keep them so that if there's ever an argument about the deposit or damage, both sides have the same proof. We don't use them for anything else in the meantime. Once they're deleted, the other side can't see them either, so it's a good idea to download your PDF and keep your own copy.

We keep usage records for 90 days, and backups expire within 30 days.

Your rights

You can ask us to:

• show you your information and give you a copy. Tenants can ask for a PDF of their tenancy records.
• fix anything that's wrong.
• delete your information, except the tenancy records we keep as explained above.
• stop using your information for now, or object to how we use it.
• hand your information over so you can take it elsewhere.
• stop relying on any consent you gave us.

Email support@mutory.com and we'll get back to you within 30 days. If we can't do what you ask, we'll tell you why. If you're still not happy, you can complain to Thailand's Personal Data Protection Committee.

Keeping it safe

Everything you send and receive is encrypted. Each person only sees the rooms they belong to, and our team only looks when they have to. If there's ever a data leak, we'll tell the Personal Data Protection Committee within 72 hours, as the law requires, and we'll tell you too if it puts you at serious risk.

Cookies

We only use the cookies and browser storage needed to keep you signed in. We don't use cookies to track statistics, we don't show ads, and we don't follow you around other websites.

Age

You need to be 20 or older. If you're younger, a parent or guardian has to agree first.

If this policy changes

If we change anything important, we'll let you know in the app or by email before it starts.

Contact us

Mutory Co (registration in progress), Latphrao, Bangkok Email: support@mutory.com

This is a translation. If it says something different from the Thai version, the Thai version is the one that counts.