Legal document

PDPA & Data-Subject Requests

Last updated: 2026-06-05

Prepared in accordance with the Personal Data Protection Act B.E. 2562 (PDPA).

This summary is provided for transparency and is not specific legal or tax advice. Questions? Contact support@billsos.com.

Under Thailand's Personal Data Protection Act B.E. 2562, you have several rights over the personal data BillsOS holds about you. This page summarises those rights and how to exercise them.

1. Data Protection Contact

Cavastir (operator of BillsOS) is the controller of your personal data. For any question or request relating to your personal data and your PDPA rights, please contact our data-protection point of contact.

Data Protection Contact: dpo@billsos.com

2. Your rights at a glance

Access — request a copy of your data
Rectification — correct inaccurate data
Erasure — request deletion in certain cases
Portability — receive a machine-readable export
Object / restrict — object to or restrict processing
Withdraw consent — at any time

The full description of each right is in our Privacy Policy (section 7).

3. How to submit a request

You can exercise your rights in three ways:

Use the form below
Email dpo@billsos.com
Self-serve export or deletion from the in-app Settings page

Data-subject request form

We will reply to the email you provide. We may ask you to verify your identity to protect your data.

4. Response time

We will respond to your request within 30 days of receipt.

5. Complaint to the PDPC

If you believe our processing of your data is unlawful, you have the right to lodge a complaint with the Office of the Personal Data Protection Commission (PDPC) of Thailand.