Privacy policy

• Account details: name, e-mail address, password (kept hashed by our sign-in provider) and a profile photo if you add one.
• Business details you enter: business name, suppliers, ingredients, recipes and the team members you invite.
• Invoices: the photos or PDF files you upload, and the data read from them (supplier, date, products, quantities, prices).
• Sales data from your till, if you connect one (for example Loyverse). Your till access key is stored encrypted.
• Your daily takings, if you type them in or photograph your till's end-of-day receipt (the photo is read and not kept).
• Team attendance: clock-in and clock-out times and declared absences. If the owner switches on the workplace zone check, we also keep a result for each clock-in or clock-out: “in zone”, “out of zone” or “location not shared”. Your phone's position is used once, at that moment, to work out the result; the position itself is never stored. These results are erased after 3 months.
• Transfer photos: if the owner switches this on, team members can photograph the transfer receipts customers show as proof of payment. These photos can show a customer's name and account details. They are stored privately, visible only to the business owner (90 days) and managers (the last 30 days), never to employees, and automatically erased after 90 days. The owner can delete them earlier.
• Payroll details the owner enters about staff (name, salary, bonus), and, if you add one, your own Anthropic API key (stored encrypted).
• Technical data needed to run the service, such as your sign-in session in your browser and error reports.

The business owner decides which team features are used and is responsible for informing their team about them. SabaiBiz provides the notice shown on the clock-in screen when the zone check is on.

Invoices can contain the names and details of your suppliers and, sometimes, of other people. Upload only what you need.

To read your invoices, track prices, show your money in and out, manage your plan and scan allowance, and keep the service secure. We do not sell your data and we do not use it for advertising.

• Supabase: database, sign-in and file storage.
• Vercel: hosting of the website and application.
• Anthropic (Claude): when you scan an invoice, the image is sent to Anthropic's API so the text on it can be read. Under Anthropic's commercial terms, data sent through the API is not used to train its models.
• Your till provider, only if you connect it, to fetch your sales.
• An error-reporting service, only if we switch it on. Reports are set up not to include your invoices.
• A payment provider, once online payment opens. Card details go to the provider, not to us.

These providers may process data outside Thailand. We choose providers that commit by contract to protect it.

You and the team members you invite. Access is enforced in the database, so one business cannot read another business's data. Our own access is limited to what is needed to run and fix the service.

While your account is open. If you ask us to delete your account, we delete your business data, except what the law requires us to keep.

You can ask to access, correct, export or delete your personal data, to object to or restrict how it is used, and to withdraw your consent. Write to us at the contact below. You may also complain to Thailand's Personal Data Protection Committee.

If we change this page in a way that matters to you, we tell you in the app or by e-mail.

Questions about this page or your data: use the contact details in your SabaiBiz account.