Privacy Policy

1. Introduction

Spectrum Consultants Co., Ltd. ("Spectrum", "we", "us", or "our") operates as a Facebook API agency. We provide two Facebook-integrated services: (1) lead management and Conversions API (CAPI) services for our own clients, and (2) KanSpam (กันสแปม), a subscription service that screens and blocks spam messages sent to our customers' own Facebook Pages. This Privacy Policy covers both. Where a section applies to only one of them, it says so.

2. Information We Collect

When you interact with our clients' Facebook Pages, Lead Ads, or Messenger experiences, we may collect:

• Name, email address, and phone number (from Lead Ad forms)
• Facebook User ID and Page-scoped identifiers
• Messages and conversation content sent via Messenger
• Ad interaction data (click source, campaign, ad set)
• IP address and browser/device metadata (for CAPI matching)

KanSpam only. When a business subscribes to KanSpam and connects its own Facebook Page, we additionally collect and process:

• The Page access token that authorises us to act on that Page. Tokens are encrypted at rest and never stored in plain text.
• The subscribing business's account details: contact name, email, the Pages connected, and the product or service description the customer writes for each Page (used to tune spam classification to that Page's business).
• Page-scoped IDs (PSIDs) and the message text of people who send messages to a customer's Page. These people are not our customers; we process their messages solely to decide whether a message is spam.
• Block records: the PSID blocked or flagged, the rule that fired, and the time.
• Payment information for the prepaid credit balance: top-up amounts, timestamps, and any bank transfer slip image the customer uploads.

3. How We Use Your Information

We use collected information to:

• Qualify and grade leads using AI-assisted analysis
• Send conversion signals to Facebook via the Conversions API to improve ad delivery
• Route qualified leads to our clients' CRM systems
• Provide analytics and reporting to our clients
• KanSpam: classify messages sent to a customer's Page as spam or not spam, block or flag matching senders at Page level, and show the customer the resulting list with an unblock control
• KanSpam: maintain the prepaid credit balance and verify payments
• Comply with legal obligations

4. Facebook Platform Data

Data obtained through the Facebook Platform is used solely for the purpose disclosed to users and as permitted by Facebook's Platform Policy. We do not sell Facebook user data to third parties. We do not use Facebook data for advertising targeting outside the scope authorized by the user.

5. Conversions API (CAPI)

We use Meta's Conversions API to share conversion event data with Facebook on behalf of our clients. This data is hashed before transmission and used only to measure and optimize ad campaign performance. You may opt out by contacting us at the address below.

6. AI Processing and Third-Party Model Providers

Some classification steps are performed by AI models operated by third-party providers rather than by software running only on our own servers. Where that happens, the message text is transmitted to that provider.

Cross-border transfer. That processing may take place in other countries, including the United States. Those destination countries may not have been certified by Thailand's Personal Data Protection Committee as providing an adequate level of protection. We transfer personal data abroad only where there is a lawful basis under the Personal Data Protection Act B.E. 2562 (2019) and appropriate safeguards are in place.

What is sent is the message text only, as a numbered list of lines, together with the classification instructions. Page-scoped IDs, names, Page IDs, access tokens and account details are not included in the request. These providers process the text under their own terms of service in order to return a classification.

We choose which providers to use and may change them from time to time; the category of recipient and the limits on what is sent, described above, do not change when we do.

AI classification is optional and is controlled per Page. Where it is switched off for a Page, no message text from that Page leaves our servers.

7. Data Retention

• Lead data — maximum 90 days, unless a longer period is required by a client's service agreement or applicable law.
• CAPI event logs — 30 days, for debugging.
• KanSpam: message text used to reach a block decision — 90 days.
• KanSpam: block records — kept while the customer's account is active, because they are what makes unblocking possible.
• KanSpam: after an account is cancelled, the customer has at least 30 days to export their data, after which all of the above is deleted within 30 days.

8. Data Sharing

We share data only with:

• Our clients — the business that ran the Facebook ad you responded to
• Meta Platforms — via the Conversions API for ad optimization
• Service providers — hosting and infrastructure providers bound by data processing agreements
• AI model providers — as described in section 6, limited to message text

We do not sell personal data.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent at any time
• Lodge a complaint with the relevant data protection authority

To exercise these rights, visit our Data Deletion page or email us at toppoint@me.com.

10. Security

We implement industry-standard security measures including TLS encryption in transit, hashed PII for CAPI transmission, and access controls on all data stores.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services constitutes acceptance of the updated policy.

12. Contact Us

Spectrum Consultants Co., Ltd.
Email: toppoint@me.com
Website: spectrumapi.net