Where the data comes from

Company registration data comes from the open dataset published by Thailand's Department of Business Development (opendata.dbd.go.th), under its Open Data Common licence.

What is covered: The department publishes monthly files going back only to January 2022, and does not publish a full register. This database therefore covers only legal entities registered from January 2022 onward, in Bangkok, Nonthaburi, Pathum Thani and Samut Prakan. Companies registered before that do not appear in search results.

Contact details: The department's open dataset contains no phone numbers, email addresses or websites, so we have none to give, and we do not scrape them from company websites. Every row gets a Google Maps search link instead, assembled from the name and province in the register itself — nothing is requested from Google to build it.

Google Maps: On a company profile, the "open in Google Maps" button calls the Places API once per company to resolve a place ID so the link can point at the exact pin. Pressing it stores three things: the place ID returned, the name-similarity score used to judge whether the match is the right company (a number from 0 to 1, not content that can be reversed back into Google's data), and a hash of the caller's IP with the time of the press, used to cap how many lookups one caller can trigger per hour. The first two are stored once per company; the IP hash is one row per press. We do not keep Google's names, websites, review scores or coordinates.

Personal data: The lists you search and export here hold company data only — no director names, no shareholder names, and no one's phone number or email address. The opt-out form collects a reply-to email and an optional reason written by the business owner, used only to answer that request, plus a hash of the sender's IP to cap requests per hour so a script cannot walk registration numbers and pull companies out of search results in bulk. The Google Maps button stores a hash of the caller's IP and the time for the same reason: capping lookups per hour per caller. Sign-in, sign-up and password-reset pages likewise store a hash of the IP or of the submitted email address to rate-limit attempts. Your own account holds an email address and a hashed password in the auth system, ordinary usage records, and — on a paid plan — a customer ID from the payment provider, as with any service. Whatever outreach you do next remains subject to the laws that apply to it and is your responsibility. We are not legal advisers and we make no representation about the lawfulness of your outreach.

A business owner who wants their data removed can request it at the opt-out page, free of charge.