Privacy Policy

1. Who we are

Yamada Research Company Limited is the data controller and operator responsible for the Sabaidi application, website, surveys, points programme, non-cash rewards and related services unless a survey-specific notice identifies another controller.

We process personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019), applicable subordinate regulations and other applicable laws.

2. Scope of this Policy

This Policy applies to personal data processed through the Sabaidi mobile application and website, account registration and verification, survey invitations and participation, points and non-cash rewards, customer support, communications, security, quality control and fraud-prevention activities.

A particular survey may provide an additional privacy notice where the sponsor, subject matter, data use, retention period, recipients or international transfers differ from this general Policy.

3. Personal data we collect

Account and identity data

• Full name, birth year and, where required for age verification, full date of birth.
• Email address, telephone number, account identifier, username, preferred language and general area of residence.
• Password-related authentication records, one-time-password and verification status. We do not store your password in readable form.
• Policy acceptance records and, where applicable, details required to record consent from a parent or legal representative.

Profile and demographic data

To match you with relevant surveys, we may collect age, gender, region, education, occupation, employment status, household information, approximate income range, consumer interests, product ownership and usage, purchasing habits and other demographic or lifestyle characteristics. Some questions may be optional.

Survey data

• Screening answers, opinions, preferences, attitudes, experiences, product and brand usage, purchasing behaviour and open-text responses.
• Completion status, timestamps, quality-control results and participation history.
• Audio, photographs, video or files only where a survey expressly requests them.

Survey answers may be associated with a participant code or pseudonymous identifier rather than direct contact information.

Sensitive personal data

Some projects may ask about sensitive personal data. We will provide an appropriate additional notice and obtain explicit consent or rely on another lawful basis permitted by law. Declining may prevent participation in that survey but will not prevent use of unrelated parts of Sabaidi.

Points and reward data

• Points offered, earned and current Pending and Approved balances.
• Approval, redemption, return, reversal, adjustment and expiry history.
• Reward requests, selected coupons or vouchers, issue and delivery status, reward identifiers and required delivery details.
• Account-verification and fraud-review outcomes.

Sabaidi does not collect bank-account or e-wallet details for cash payments because Sabaidi does not offer cash rewards.

Device, technical and usage data

• IP address, device type and model, operating system, app version, browser type and device or application identifiers.
• Language, time zone, approximate location derived from IP address, login dates and times, screens and features accessed.
• Crash reports, diagnostics, network information, push token, security logs, session information and web cookies or similar technologies.

Precise location will be requested only where reasonably necessary for a feature or survey and after obtaining required device permission.

Research-quality and support data

We may collect duplicate-account or device indicators, unusual response patterns, attention-check and consistency results, VPN or proxy indicators, redemption risk indicators, review notes and information you provide to support.

4. How we collect personal data

We collect personal data directly from you; automatically from your device; from research sponsors or survey platforms confirming survey status; from reward providers confirming fulfilment; from verification or fraud-prevention providers where legally permitted; and from referral or promotional partners where you use their link or promotion.

5. Why we use personal data

Account and survey services

We use data to register and authenticate you, maintain your profile, match you with surveys, conduct market research and provide support.

Points and non-cash rewards

We determine survey points, record balances, confirm completion and quality review, process redemption requests, return points where a request is rejected, deliver rewards and resolve disputes.

Quality, security and fraud prevention

We use account, device, survey and usage data to detect duplicate accounts, automated participation, false information, unauthorised access and reward manipulation.

Communications and improvement

We use contact details for verification, security alerts, survey notifications, points and redemption updates, policy notices and support. Optional promotional communications rely on consent or another lawful basis. We may analyse app performance and aggregated journeys to improve Sabaidi.

Legal and business purposes

We may process data to comply with law, maintain records, investigate complaints, protect users, obtain professional advice, conduct audits and manage a lawful corporate transaction.

6. When providing data is required

Some information is necessary to create and secure your account, match surveys, maintain points and deliver rewards. If required information is not provided, we may be unable to provide the relevant service. Optional data will be identified where reasonably practical.

7. Survey responses and research use

Survey responses may be analysed by Sabaidi, shared with the research sponsor and authorised research partners, combined with other participants’ answers, presented in aggregated, anonymised or pseudonymised form, or used to prepare research reports.

We generally seek to provide research sponsors with aggregated, anonymised or pseudonymised information rather than direct contact details. We do not sell your direct contact details to advertisers, and we do not permit independent marketing using your direct contact details unless clearly explained and legally permitted, with consent obtained where required.

8. Automated matching and fraud checks

Sabaidi may use automated rules to match profiles, apply screening criteria, identify duplicate participation, detect unusual activity, assign or validate points and flag accounts, attempts or redemptions for review. An automated flag does not necessarily mean wrongdoing.

Where an automated process produces a significant adverse result, you may contact us to request an explanation or human review, subject to applicable law and protection of confidential fraud-detection methods.

9. Who we share data with

Research sponsors and partners

We may share survey responses and participation information with the research client, agencies, analysts, moderators, recruiters or other authorised partners. Direct identifiers are removed or limited where reasonably possible.

Technology and service providers

Providers may support cloud hosting, databases, authentication, email and OTP delivery, push notifications, analytics, diagnostics, survey hosting, support, fraud prevention, verification, reward fulfilment and file storage. Providers may process data only for authorised purposes under appropriate safeguards.

Advisers, authorities and transactions

We may disclose data to professional advisers, courts, regulators, law-enforcement or government bodies where required or authorised, and to parties involved in a corporate transaction under appropriate confidentiality and data-protection measures.

10. International transfers

Some providers, sponsors or partners may be outside Thailand. We use lawful transfer mechanisms and appropriate safeguards required by applicable law, which may include adequacy decisions, contractual safeguards, binding internal rules, explicit informed consent where appropriate or another permitted exception.

11. Data retention

• Account and profile data: while active and generally up to three years after closure, unless longer retention is needed.
• Survey participation and identifiable survey responses: generally up to five years after project completion, or as stated in a survey-specific notice.
• Anonymised research data: may be retained indefinitely because it no longer identifies an individual.
• Points and reward records: generally up to five years after the relevant event or account closure.
• Security and technical logs: generally up to 12 months unless longer is required for an incident, fraud matter or legal claim.
• Support communications: generally up to three years after closure of the matter.
• Consent and policy records: while related processing continues and for an appropriate period afterwards to demonstrate compliance.

When retention is no longer necessary, data will be securely deleted, destroyed or anonymised.

12. Data security and breaches

We use reasonable organisational, physical and technical safeguards, including access controls, authentication, encryption during transmission, secure password handling, role-based restrictions, monitoring, backups, logging, vendor assessment, staff confidentiality and incident-response procedures.

No internet-based system can be guaranteed completely secure. If a personal-data breach occurs, we will investigate, contain and remedy it, and notify authorities and affected individuals where required.

13. Your privacy rights

Subject to applicable conditions and exceptions, you may have rights to withdraw consent; request access or a copy; request eligible portability; object; request deletion, destruction or anonymisation; request restriction; correct inaccurate information; ask about the source of data; request review of certain automated decisions; and complain to Thailand’s Personal Data Protection Committee or another competent authority.

These rights are not absolute. We may limit a request where permitted or required by law, including for legal obligations, fraud prevention, research exemptions, legal claims or the rights of others.

14. Exercising your rights

Use our Privacy Choices page or email hello@sabaidi.app with the subject “Privacy Rights Request”. Provide enough information to identify your account and request. We may ask for additional verification to protect your data.

15. Account deletion

You may request deletion through the app where available or through our public Delete Account page. After verification, we will delete or anonymise data no longer required. Limited information may be retained for outstanding redemptions, fraud prevention, legal claims, dispute resolution, security, audit and other legal obligations.

Deletion may permanently remove access to survey history, points and unredeemed rewards, subject to applicable law and the Terms.

16. Marketing and notifications

Essential service communications may continue even if you opt out of marketing. Optional marketing may be controlled through app settings, an unsubscribe method or a request to us. Disabling push notifications may prevent survey reminders but does not close your account.

17. Users aged 18 or 19 and children

Sabaidi is available only to people aged 18 or older. In Thailand, legal majority is generally reached at age 20, and involvement from a parent or legal representative may be required for a user aged 18 or 19 depending on the activity and legal basis. Features may remain restricted until any required process is complete.

We do not knowingly permit anyone under 18 to register. A parent or representative who believes a person under 18 has created an account should contact us.

18. Third-party links

Sabaidi may link to third-party surveys, reward providers, websites or apps. A third party may process data under its own privacy policy where it independently decides how and why data is used. Review the relevant notice before submitting information.

19. Anonymised and aggregated information

We may create statistical, anonymised or aggregated information that no longer identifies you. It may be used for research, reporting, trend analysis, service improvement and other lawful purposes.

20. Changes, language and contact

We may update this Policy to reflect service, technology, provider or legal changes. The revised effective date will be displayed, and we will provide reasonable notice or obtain consent where required.

This Policy may be provided in English and Thai. We intend the versions to have the same meaning. If there is a material inconsistency, the version designated in the app or website applies to the extent permitted by law, without limiting mandatory rights.

You may also complain to Thailand’s Personal Data Protection Committee or another competent authority if you believe your data has been processed unlawfully.