Your PDPA rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), you as the data subject hold legal rights over your personal data. MuCraft, as the data controller, is required to respect and facilitate those rights. This page summarizes each right and how to exercise it.

Everyone who signs up to MuCraft is a data subject under the PDPA — including free and paid users. You can exercise any of the rights below, at no charge for your first request in any 12-month period.

You may request a copy of all data we hold about you, including birth data, biometric scores, reading history, and payment records. Email hello@mucraft.app. We respond within 30 days.

If your data is inaccurate, incomplete, or out of date you may correct it yourself in Settings, or ask us to correct it on your behalf.

You may ask us to delete all your data at any time. Use "Delete all my data" in Settings. Deletion is completed within 30 days, except for data the law requires us to retain (for example tax invoices — 7 years).

You may instruct us to temporarily suspend processing, for example while the accuracy of your data is being verified. The data remains but is not acted upon until you permit.

You may request your data in a machine-readable format so you can take it elsewhere. We deliver a JSON export by email within 30 days.

You may object to any processing that isn't strictly necessary to fulfil our contract with you, including aggregated use of your data for research.

Anywhere you gave consent (for example, biometric processing) you may withdraw it at any time. Withdrawal is not retroactive — processing done lawfully before withdrawal remains lawful.

If you believe your rights have been infringed, contact our DPO first. If the resolution is unsatisfactory, lodge a complaint with the Personal Data Protection Committee (PDPC) at https://www.pdpc.or.th.

Email: hello@mucraft.app (subject line: "PDPA Request"). Company: TecTony Co., Ltd., Bangkok. We respond within the statutory 30 days. For complex requests we may extend by a further 30 days, notifying you of the reason.