MABIDO🇬🇧ENLOGINHelp Center1. Data controllerData controller: Asia Smart Tech Co., Ltd. ("MABIDO", "we"), 26/30 Moo 5, Viset Road, Rawai, Muang, Phuket 83130, Thailand. Tax ID: 0835565006239.Website: mabido.com · Privacy & GDPR requests: info@mabido.com · Security reports: info@mabido.comThis Policy applies to visitors, Global Business (GB) professionals, affiliates and anyone using MABIDO.com or related services. Local Business Client Accounts are discontinued (June 2026).2. Personal data we collectDepending on how you use MABIDO, we may process:• Account data: name, email, phone (optional), password hash, language, country, account type (GB/affiliate/admin).• Business profile: business name, address, city, website URL, sector, coordinates, logos and images you upload.• Subscription & billing: plan tier, Stripe customer/subscription IDs, payment status, invoices metadata — never full card numbers (handled by Stripe).• Content you publish: announcements, messages, support tickets, Charla chat transcripts when forwarded to us.• Technical data: IP address, browser/device type, session tokens, push notification tokens (FCM), cookie identifiers, audit logs.• Marketing & audit prospects: email and website submitted on /visibility-audit.• Automated footprint inputs: public pages scraped from your website to generate blogs, videos and FAQs (GB clients only, per your subscription).We do not knowingly collect data from children under 16.3. Purposes & legal bases (GDPR Art. 6 / PDPA)We process data only when a legal basis applies:• Contract (Art. 6(1)(b)): creating your account, delivering GB features, automated footprint, support.• Legitimate interests (Art. 6(1)(f)): platform security, fraud prevention, service improvement, aggregated analytics, B2B prospect follow-up after a free audit — balanced against your rights.• Legal obligation (Art. 6(1)(c)): tax, accounting and regulatory records where applicable.• Consent (Art. 6(1)(a)): optional marketing emails, non-essential cookies, push notifications where required — withdraw anytime.We never sell your personal data to third parties.4. Cookies & similar technologiesmabido.com uses:• Strictly necessary cookies: session authentication (Supabase Auth), security, load balancing — required for login and checkout.• Functional storage: language preference, display currency, PWA install state, affiliate referral cookie (/r/{slug}) — stored locally or in first-party cookies.• Analytics: we may use privacy-oriented analytics on aggregated traffic; no cross-site advertising profiles.You can block cookies in your browser; some features (login, checkout) may then not work. We do not deploy third-party advertising cookies on core product pages.5. Recipients & subprocessorsWe share data only with service providers that help us operate MABIDO, under data-processing agreements where required:• Supabase (EU/US) — database, authentication, file storage• Stripe (US/EU) — card payments, subscriptions (PCI DSS Level 1)• Cloudflare (global) — CDN, Pages hosting, DDoS protection• Resend — transactional emails• Google (Gemini API) — AI content generation for footprint, blogs and Charla FAQ segments• VPS-hosted Ollama — local LLM inference for thematic content and Charla segment generation• Firebase (Google) — push notifications (FCM)• Charla — live chat widget (when you use it; messages may webhook to MABIDO)GB clients may appear on public company hubs (/shop/{slug}), Charla knowledge bases (/charla-clients/) and /news articles they choose to publish.6. International transfersMABIDO is operated from Thailand. Subprocessors may process data in the United States, European Union or other countries. Where GDPR applies, we rely on appropriate safeguards (Standard Contractual Clauses, adequacy decisions or equivalent mechanisms offered by our providers) for transfers outside the EEA/UK.Thailand Personal Data Protection Act (PDPA) rights apply to users in Thailand.7. Retention• Active account data: kept while your account is active and as needed to provide the service.• Billing records: retained as required by tax and commercial law (typically up to 7 years where applicable).• Support tickets & email logs: up to 24 months unless longer retention is required for disputes.• Free audit prospects: until you object or 24 months of inactivity.• Server logs & security events: rolling retention (typically 30–90 days).You may request deletion at any time (see Section 8). Some data may be retained if law requires.8. Your rightsUnder GDPR and, where applicable, PDPA, you may:• Access a copy of your personal data• Rectify inaccurate data (also via account settings)• Erase data ("right to be forgotten") when no overriding legal basis remains• Restrict or object to certain processing• Data portability (structured, commonly used format where technically feasible)• Withdraw consent without affecting prior lawful processing• Lodge a complaint with a supervisory authority (EU: your local DPA; Thailand: PDPC)To exercise rights: /contact → subject "Legal / Privacy", or email info@mabido.com with your account email. We respond within 30 days (GDPR) or as required by applicable law.9. SecurityWe implement HTTPS/TLS, hardened security headers, role-based access, encrypted sessions and PCI-compliant payments via Stripe. See /security for details. No method is 100% secure; report concerns to info@mabido.com.10. Automated processing & AI contentGB footprint uses automated systems (including AI on Gemini and local VPS models) to generate blogs, videos, Charla GEO FAQs and visibility scores from your website and sector context. Charla chat may use this knowledge base plus live listings search. Outputs are assistive drafts — not automated decisions with legal or similarly significant effects on you as a consumer. You remain responsible for reviewing published content. Visibility scores and audit probes are estimates, not guarantees.11. Changes to this PolicyWe may update this Policy when our services or legal requirements change. The "Last updated" date will change; material changes will be communicated via the website or email where appropriate. Continued use after the effective date constitutes acceptance.12. Contact & supervisory authoritiesPrivacy contact: info@mabido.com · Asia Smart Tech Co., Ltd., 26/30 Moo 5, Viset Road, Rawai, Muang, Phuket 83130, Thailand.EU/EEA users may contact their local data protection authority. UK: ICO (ico.org.uk). Thailand: Personal Data Protection Committee (PDPC).We process personal data lawfully, transparently and only for stated purposes. You can exercise your rights at any time via /contact (subject: Legal / Privacy) or info@mabido.com.