Privacy Policy

1. Overview & Scope

This Privacy Policy explains how Local Revenue Management (LRM) (referred to as "the Application", "we", "us", or "our") collects, uses, stores, discloses, and protects personal and operational data when authorized staff and personnel access the system via the mobile application and associated web interfaces.

LRM is designed to support revenue collection operations for utility services, including water supply, electricity, and waste management fees—covering customer and meter registration, on-site meter readings, invoicing, payment collection, and on-site receipt issuance.

2. Information We Collect

To enable the system to facilitate revenue collection and manage utility data accurately and transparently, the Application processes the following categories of information:

A. User Account & Staff Information

• Authentication Details: Email address, hashed passwords, access tokens, or sign-in credentials via Google OAuth.
• Staff Profile: First name, last name, and assigned system role (e.g., Super Admin super_admin, Organization Admin org_admin, Field Staff staff).

B. Utility Customer & Meter Data

• Customer Records: Full name, telephone number, service address/meter location, and customer account identifier.
• Meter Information: Meter serial number (Meter ID), initial baseline units, recorded consumption units per cycle, and service category (water, electricity, waste).
• Financial & Billing Records: Billing cycles, tariff charges calculated according to organization rates, payment status (paid / overdue), payment methods (cash or PromptPay QR transfer), and receipt history.

C. Photos & Digital Media

• Meter Photos: Photographs of meter dials captured during field inspections as evidence of recorded units and for AI reading verification.
• Payment Transfer Slips: Captured images of bank transfer payment slips (PromptPay) attached as proof of payment settlement for organizational accounting audits.

3. Device Permissions & Hardware Usage

The Application requests specific device permissions strictly necessary to perform operational field duties. You can grant or revoke these permissions at any time through your device operating system settings:

4. How We Use Information

The information collected is used exclusively for operational purposes, including:

• Calculation & Invoicing: Calculating amounts based on configured utility rate formulas and generating monthly invoices.
• On-Site Receipt Issuance: Printing official payment receipts in real time using portable Bluetooth thermal printers for customers.
• AI Meter Reading Assistance (AI OCR): Employing artificial intelligence to assist field officers in analyzing meter photos and recognizing numbers on meter dials, reducing inspection time and minimizing manual data-entry errors.
• Audit Trails & Verification: Maintaining reliable photographic records, timestamps, and transaction histories for official accounting and financial compliance.
• Security & Access Control: Authenticating staff members and enforcing role-based access control to prevent unauthorized data tampering.

5. Data Storage & Security

We implement rigorous technical and organizational measures to safeguard data security:

• Encrypted Transmission: All data transmitted between the mobile application and servers is encrypted using industry-standard Transport Layer Security (TLS/HTTPS).
• High-Security Cloud Infrastructure: Backend data and media storage are hosted on secure enterprise-grade cloud infrastructure (Supabase PostgreSQL & Cloud Storage) featuring encrypted storage at rest.
• Role-Based Access Control (RBAC): Access to records is strictly limited to authorized personnel based on explicit roles (Super Admin, Organization Admin, Staff).
• Sandboxed Device Storage: Session tokens and temporary operational caches on the mobile device are isolated within the operating system's secure sandbox.

6. Third-Party Service Providers

The system connects with select third-party technology providers to support core functions. These providers adhere to rigorous privacy standards:

• Supabase: Provides backend authentication, real-time database management, and media storage. Governed by Supabase Privacy Policy.
• Google Identity & Cloud Services: Facilitates Google OAuth sign-in and AI models for automated OCR meter reading. Governed by Google Privacy Policy.

No Sale of Data: We never sell, rent, monetize, or trade any personal data or revenue collection records to advertising companies, commercial data brokers, or third parties under any circumstances.

7. Data Retention & Deletion

We retain personal data and transaction records only as long as necessary to fulfill the purposes of revenue collection:

• Financial & Billing Records: Invoicing and payment history are retained in accordance with applicable retention timeframes.
• Storage Management: Organization Administrators (Org Admin) can monitor storage utilization and utilize tools to delete historical monthly records (meter photos and payment slips) to reclaim storage space when no longer needed.
• Account Deactivation & Deletion: When staff members conclude their duties or transfer, administrators will set their account status to "inactive" to preserve a complete audit trail. If staff members wish to request deletion of personal data where retention is not legally required, they may submit a request via the contact details provided below.

8. Your Privacy Rights (PDPA)

Under the Personal Data Protection Act B.E. 2562 (PDPA), data subjects are entitled to the following legal rights:

• Right of Access & Portability: Request to review or obtain copies of your personal information stored in the system.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete data.
• Right to Erasure: Request the deletion, destruction, or anonymization of personal data when no longer necessary or upon withdrawal of consent.
• Right to Restriction: Request restriction of the processing of your personal data under conditions prescribed by law.
• Right to Withdraw Consent: Revoke permissions previously granted (such as Camera, Location, or Bluetooth) at any time through device operating system settings.

9. Children's Privacy

This Application does not intentionally collect or solicit personal information from children or minors under the age of 13.

10. Changes to this Privacy Policy

We may review and update this Privacy Policy from time to time to comply with legal guidelines or operational improvements. Any revisions will take effect immediately upon posting on this page with an updated "Effective Date".

11. Contact Information

If you have questions, suggestions, or wish to exercise your rights regarding this Privacy Policy, please contact: