1. Data controller
Pitak Tongkasem, operating under the name JukeCloud
293 Chonkasem Rd., Khuntale, Muang, Surat Thani Province 84100, Thailand
Privacy requests: jukecloud.contact@gmail.com
Privacy requests are accepted at the email above. There is no telephone channel for these requests.
2. Data we process
Data may include account email and role, tenant/location settings, audit history, music requests, guest session identifiers, Player/device state, playback status, and billing/subscription references where needed.
We may process LINE identifiers, YouTube video metadata, and allowlisted analytics events. We do not ask guests to submit sensitive information in display names or music requests and do not store full payment-card numbers.
- Accounts and venues: language, account status, roles, organisation, location, timezone, and necessary audit history.
- Guests: optional display name, requested track, time, and queue or moderation status. Guests are not asked to provide email addresses or phone numbers in requests.
- Players: device identifiers, pairing state, heartbeat, and playback position needed to operate the queue.
- Billing: plan, price, subscription status, and Stripe transaction references. We do not store card verification codes.
- Notifications and video: email or LINE identifiers, and YouTube video IDs, titles, channels, and durations for search and the YouTube IFrame Player. We do not download videos or extract audio.
- Analytics: event names, allowlisted dimensions, and daily aggregates. Analytics dimensions exclude email, IP addresses, User-Agent, and Guest/Player tokens. Hosting access/security logs are separate.
3. Why we process data
- Provide accounts, venue setup, music requests, queues, and Players
- Manage subscriptions and billing when enabled
- Protect the service and investigate incidents
- Measure reliability with data minimisation
- Send service and critical notifications
Depending on the purpose, processing relies on a contract or steps before entering one, legitimate interests, legal obligations, or consent where required.
4. Service providers
Necessary data may be shared with hosting/Plesk, Amazon Web Services, Google/YouTube, Google/Gmail, LINE, and Stripe when the related service is enabled, as well as advisers or authorities where contract or law requires.
- Hosting/Plesk: application and database hosting.
- Amazon Web Services: scheduled tasks, logs, encrypted backups, and security controls.
- Google/YouTube: video metadata search and Player display.
- Google/Gmail and LINE: verification or service notifications where enabled.
- Stripe: payments and subscriptions when the related service is used.
Some providers may process data abroad. We limit sharing to its purpose and apply relevant contractual and legal safeguards.
5. Retention
- Raw analytics and playback events: 90 days
- Device heartbeat and location events: 14 days
- Expired guest sessions: 30 days after expiry
- Tenant audit logs: 365 days
- Encrypted production backups: 35 days
- Hosting access/security logs: 90 days
Account, subscription, and billing records are kept for the service relationship and longer where legal, accounting, tax, audit, or dispute obligations require.
- Daily analytics aggregates: for the lifetime of the tenant; retention after service ends requires separate review.
- CloudWatch scheduler logs: 30 days.
- CloudTrail management logs: 365 days.
- Browser storage: until expiry, revocation, or browser-data removal, as applicable.
Records are subsequently deleted or anonymised when no longer required.
6. Browser storage and advertising measurement
The app uses sessionStorage and localStorage for necessary session/device tokens and Player state, separately from advertising measurement. Guests use temporary tab storage; Players use device storage. The server stores token hashes and can revoke or rotate tokens.
Meta Pixel on account signup
The marketing site jukecloudth.com has no Pixel. The signup page at app.jukecloudth.com/signup.php may use Meta Pixel only when enabled by the administrator and you voluntarily opt in, to measure PageView and successful new account creation (CompleteRegistration) and improve ad delivery. This choice is separate from accepting the service. Refusal does not prevent registration, and we do not load the Pixel before consent.
With consent, Meta Platforms may receive your IP address, browser/device details, URL and referrer, event name and time, a random event identifier, and cookie or ad-click identifiers (_fbp, _fbc, fbclid). Meta may combine these with its own information and process them internationally under its policies. This integration does not additionally send account names, email addresses, passwords or song lists to Meta and does not currently use Conversions API. Advertising data is separate from the internal analytics described in section 2.
Meta processes information under its Privacy Policy and Cookies Policy. This sharing relies on consent, unlike processing necessary to provide the service.
Retention and withdrawal
JukeCloud stores your choice, time and notice version in the session, not as permanent consent. We may ask again when the session or configuration changes. Session registration proof is single-use and valid for at most 10 minutes. Advertising cookies may last around three months depending on Meta settings and browser restrictions. Data received by Meta follows its retention policy, not the deletion schedule for internal JukeCloud analytics.
Visit account signup and choose “ไม่ยินยอม / ถอนความยินยอม” (Refuse / withdraw consent). Newly loaded pages will stop loading the Pixel and the system clears _fbp/_fbc cookies within the domains it manages. You can also clear browser cookies and manage your data directly with Meta. If the choice is absent, measurement is not enabled on that page. Withdrawal does not affect registration or the lawfulness of processing before withdrawal, and cannot recall data already sent. Contact us to exercise the rights in section 8.
7. Children
Guests, including minors, may submit music requests with an optional display name. Guest request is not designed for sensitive, payment, or contact information. Minors should use the service under appropriate venue or guardian guidance.
Parents or legal representatives may contact the email above to ask about, access, correct, or delete relevant data. We may request only the information needed to verify their authority and prevent unauthorised disclosure.
8. Your rights
Depending on applicable law and exceptions, you may request access, correction, deletion, restriction, objection, portability, or consent withdrawal. Email jukecloud.contact@gmail.com without passwords, raw tokens, card data, or sensitive information.
You may also request copies or anonymisation and complain to the relevant regulator, subject to applicable law. Describe the right you wish to exercise and details that help locate the data. We may request proportionate identity evidence and will communicate the outcome or reasons for an extension under applicable law.
9. Security
Controls include tenant scoping, token hashing, least privilege, HTTPS, security headers, encrypted backup, audit logs, and request-ID correlation. No system can guarantee absolute security.
Access is limited by role and tenant. Backups are encrypted before transfer to private storage, with separate recovery keys and operational records to support incident investigation.
10. Changes
We may update this notice when purpose, providers, law, or data flow changes. A new version and effective date will be shown and material changes communicated appropriately.
