Privacy policy.

1.Information we collect

1.1  Things you give us

• Account details — your name, email address, and password when you create a free account. Passwords are stored only as a one-way hash; we can't read them.
• Chat messages — whatever you type to the site's AI assistant, plus a name and email if you choose to leave them so we can follow up.
• Order details — the item you buy, the price, and (for PromptPay) the transfer slip you upload so the payment can be verified.
• Email — anything you send to our address, including project enquiries.

1.2  Things collected automatically

• Basic technical data — your IP address (used for rate limiting and abuse protection), timestamps, and the page a chat started on.
• Download history — which member tools your account has downloaded, so your dashboard can show it back to you.
• Standard server logs kept by our hosting provider.

1.3  Things we deliberately don't collect

We never see or store card numbers — payments happen inside your own banking or crypto app. There are no advertising pixels, no third-party analytics scripts, and no fingerprinting on this site.

2.How we use it

• Running your account and unlocking what you've bought.
• Answering chat conversations and following up on enquiries you asked us to follow up on.
• Verifying PromptPay slips and confirming crypto payments so orders complete.
• Sending the emails the service needs: confirmations, receipts, password resets, and order updates.
• Keeping the site safe — rate limits, spam honeypots, and abuse prevention.
• Reading our own chat transcripts to make the assistant and the site better.

That's the full list. We don't run ad campaigns off your data and we don't send marketing blasts.

3.The AI assistant

The site chat is powered by Google's Gemini API. When you send a message, the conversation is relayed to Google to generate the reply, and the transcript is stored in our database where the site owner can read it (that's how a "talk to us" widget works — a person eventually reads it).

We never use your conversations to train AI models. Still, treat the chat like any contact form: please don't paste passwords, card numbers, or anything sensitive into it.

4.Who we share it with

We do not sell your data. Ever. A small set of processors help run the site, and each one gets only what its job needs:

• Google (Gemini API) — receives chat messages to generate assistant replies.
• SlipOK — receives your PromptPay transfer slip to verify the payment is real.
• NOWPayments — handles crypto checkout and tells us when a payment settles.
• Hostinger — hosts the site, its database, and delivers our email.

Beyond that, we'd only disclose information if the law genuinely required it.

5.Cookies & local storage

• One session cookie keeps you signed in to your account. That's the only cookie we set.
• sessionStorage keeps your chat history on your own device so the conversation survives a page change; it clears when the tab closes.
• localStorage remembers small interface preferences — like whether you collapsed the dashboard sidebar.

No advertising or cross-site tracking cookies. The small cookie notice on your first visit is how you accept this — your answer is remembered in localStorage on your own device, so we never ask twice.

6.Your rights & choices

Your data is yours. At any time you can ask to see what we hold about you, correct it, export it, or delete it — email gem.tra@ogtraplord.com from your account address and it'll be handled within a few days.

A couple of honest notes: records of completed purchases may be kept for bookkeeping even after an account is deleted, and you can browse most of the site without any account at all.

7.Security

Passwords are bcrypt-hashed, the whole site runs over TLS, admin access is limited to the studio owner, and we practise data minimalism — the least data collected is the least data at risk. No system is perfect; if a breach ever affects you, we'll tell you plainly and quickly.

8.How long we keep it

• Account data — for as long as your account exists.
• Chat transcripts & leads — for as long as they're useful for running the studio; deleted on request.
• Purchase records — kept for accounting.
• Rate-limit counters — hours, then they roll off automatically.

9.Children

The site isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has given us personal data, email us and it will be deleted.

10.Changes to this policy

When the site gains a feature that touches your data, this page gets updated and the date at the top changes. Meaningful changes get a visible note on the site — no silent rewrites.

11.Contact

Privacy questions, data requests, or anything else: gem.tra@ogtraplord.com — OGtraplord, Bangkok, Thailand. See also our Terms of Service.