This Notice explains how DOMALYST handles account, portfolio, analyzer, contact and security information and how you can exercise privacy rights.
DOMALYST is operated from Thailand by Phacharawat Bunpiphatkun, operating DOMALYST (the “Operator”). For personal data processed to provide DOMALYST, the Operator acts as the data controller unless a different role is clearly stated for a specific feature.
Depending on how you use DOMALYST, we may process account identifiers and email, domains in your watchlist or portfolio, acquisition and renewal information you provide, decision history, Analyzer inputs, optional outcome or buyer-intent information, contact requests, and technical security information needed to operate the service.
We process information to provide requested features, create and secure accounts, calculate portfolio views, maintain decision history, answer requests, prevent abuse, troubleshoot reliability, comply with law and improve evidence quality. We do not use missing evidence as a reason to fabricate a value.
Where the Thai Personal Data Protection Act or similar law applies, processing may rely on performance of a contract or steps requested before a contract, legitimate interests such as service security and reliability, compliance with legal obligations, establishment or defense of legal claims, and consent where a feature is genuinely optional and consent is the appropriate basis. Optional aggregate outcome or buyer-intent contribution is not enabled merely because you create an account.
When you use the public Analyzer, DOMALYST processes the domain you submit and limited technical request information needed to return the result, manage abuse and maintain service reliability. Analyzer results rely on technical sources and do not create a public profile of your private portfolio.
Portfolio composition, acquisition price, renewal cost, notes, decision history, inquiries, offers, negotiation state and buyer intent are private by default. They are not made public merely because you use DOMALYST.
Where aggregate outcome or buyer-intent research is offered, contribution must be explicit. Aggregate permission does not authorize public disclosure of your identified raw record. Privacy thresholds and aggregation rules must be satisfied before cross-user research is published.
The Contact page collects the request category, your email, subject and message so we can receive and respond to privacy, legal, account, security or general requests. Contact submissions are private and are not available for public browsing.
We use service providers for hosting, database, authentication, networking and security. They process information only as needed to provide those services under their applicable terms and safeguards. We do not sell private portfolio data to advertisers.
DOMALYST's primary application data is hosted in Singapore and public content may be delivered through globally distributed infrastructure. Information can therefore be processed outside your country. Where law requires safeguards for international transfers, we will use an available lawful mechanism appropriate to the transfer.
We retain information only as long as reasonably necessary for the purpose collected, account operation, security, dispute handling and legal obligations. Account and private workspace data can be deleted through the product. Contact requests may be retained while needed to resolve the request and maintain a reasonable record of the response. Short-lived provider logs or backups may expire according to operational retention cycles rather than disappearing instantly from every backup copy.
Subject to applicable law and exceptions, you may have rights to request access or a copy, correction, deletion, restriction, objection, data portability, and withdrawal of consent where processing relies on consent. You may also complain to the competent privacy authority. In Thailand, complaints may be made to the Personal Data Protection Committee where the law permits.
Use the Contact page and choose “Privacy / data rights.” We may need enough information to verify that the request relates to you before disclosing, changing or deleting personal data. We will respond within the period required by applicable law.
Signed-in users can export DOMALYST application data, clear the private workspace while keeping the login account, or permanently delete the account. Permanent deletion removes live private application data associated with the account and ends active sign-in access, subject to information we must retain by law or for narrowly scoped security or dispute purposes.
DOMALYST uses account-level data isolation, secure sign-in sessions, request-origin checks, rate limits, restrictive browser security settings and private-by-default data boundaries. Security measures reduce risk but cannot guarantee absolute security.
DOMALYST currently uses essential sign-in and security cookies needed to authenticate users and maintain sessions. We do not currently use advertising cookies. If optional analytics or advertising technologies are introduced later, this Notice and any consent controls will be updated as required.
DOMALYST is intended for adults and business/domain-investment use. Accounts are intended for users who are at least 18 years old or otherwise legally able to enter into the relevant agreement in their jurisdiction.
Material changes to this Notice will be dated and made available on this page. Where applicable law requires notice or consent for a material change, we will provide it.
The Operator is Phacharawat Bunpiphatkun, operating DOMALYST. Contact location: 18/145 Moo 3, Surasak Subdistrict, Si Racha District, Chon Buri 20110, Thailand. Privacy rights requests, legal notices and security concerns can be submitted through the DOMALYST Contact page.
See the Terms of Service for service boundaries, acceptable use, liability and dispute terms.