← Massageasy

Terms of Service

Last updated: 14 June 2026

These Terms of Service (“Terms”) govern your use of Massageasy — the tablet-based guest intake, payment-display, and session-tracking service (the “Service”) — operated by Noom Studio Co., Ltd. (Thailand), trading as Massageasy (“we”, “us”). By creating an account or using the Service you agree to these Terms on behalf of the venue you represent (the “Venue”).

1. The Service

Massageasy provides software that lets a Venue welcome guests on a shared tablet, collect massage preferences, display the Venue’s own payment QR code, and track sessions in an owner dashboard. Massageasy is not a booking system and does not process payments. All payments are made directly between the guest and the Venue using the Venue’s own payment methods.

2. Accounts

  • You must provide accurate account information and keep your credentials secure.
  • You are responsible for activity under your account, including staff and tablet users you authorise.
  • You must be at least 18 years old and authorised to act for the Venue.

3. Trials, subscriptions, and billing

  • New accounts start with a 30-day free trial of the plan chosen at signup. No card required to start.
  • When the trial ends, your subscription begins and bills automatically at the plan price shown at signup, unless you cancel before the trial ends.
  • Subscriptions renew automatically (monthly or annually, per your plan) until cancelled. You can cancel anytime; cancellation takes effect at the end of the current billing period.
  • Prices are in Thai Baht (฿) and may change with at least 30 days’ notice; changes apply from your next billing period.

4. Your data

The Venue owns the session data collected through the Service (intake preferences, session records, feedback, and settings). We process this data on the Venue’s behalf to provide the Service, as described in our Privacy Policy. You can export your session data as CSV from the dashboard at any time, subject to your plan’s export window.

4a. Data Processing terms (PDPA Section 40)

These data processing terms apply whenever personal data of guests is processed by us on the Venue’s behalf. They form a binding controller-processor agreement under the Thai Personal Data Protection Act (PDPA).

  • Roles. For guest session data the Venue is the data controller and Massageasy is the data processor. For Venue account, billing, and platform-usage data, Massageasy is the controller.
  • Scope and purpose. We process guest data only to deliver the Service to the Venue: running the intake flow, displaying the session brief to the therapist, recording the session, and providing the Venue’s dashboard, reports, and CSV exports. We do not sell or repurpose guest data.
  • Categories of data subjects and data. Data subjects are the Venue’s guests. Data categories include language, massage type, duration, body-map preferences, pressure, optional health flags and notes (sensitive personal data under PDPA Section 26), session timing, payment method (no card numbers), feedback, and tips. See the Privacy Policy for full detail.
  • Sub-processors. We use the providers listed at massageasy.com/subprocessors. We will give the Venue 30 days’ notice before adding a new sub-processor; the Venue may terminate the Service if it reasonably objects to a new sub-processor.
  • Security. We apply the technical and organisational measures described in the Privacy Policy (encryption in transit, encryption at rest for credentials, row-level database security, PIN-protected dashboard access, rate-limiting on authentication, audit logging).
  • Confidentiality. Personnel authorised to access guest data are bound by confidentiality obligations.
  • Assistance. We will reasonably assist the Venue to respond to data-subject rights requests (access, correction, erasure, portability, restriction, objection), to investigate any personal-data breach, and to demonstrate PDPA compliance.
  • Breach notification. We will notify the Venue without undue delay, and in any event within 72 hours, of becoming aware of a personal-data breach affecting the Venue’s guest data.
  • International transfers. Where guest data is transferred outside Thailand we rely on the receiving country’s PDPA adequacy or on standard contractual safeguards.
  • Return and deletion. On termination of the Service, we delete or return guest data within the timeline stated in thePrivacy Policy, subject to legal record-keeping requirements.
  • Audit. Once per year, on at least 30 days’ written notice, the Venue may request a summary of our security measures and processing activities. We are not required to disclose confidential customer data or trade secrets.

5. Acceptable use

  • Use the Service only for lawful venue operations.
  • Do not attempt to access other venues’ data, probe or disrupt the Service, or resell it without our written consent.
  • You are responsible for complying with laws that apply to your Venue, including consumer-protection and data-protection laws in your country.
  • Do not reverse-engineer, decompile, or disassemble the Service, or attempt to derive its source code, schema, or design from any deployed form.
  • Do not use the Service, its dashboard, exports, or any information obtained through it to build, operate, train, or assist a competing guest-intake, session-tracking, or venue-software product.
  • Do not use the Service to train machine-learning models or generative AI without our prior written consent.

5a. Intellectual property

Massageasy, the Massageasy name and logo, the tablet flow, dashboard, body-map interface, reports, and all underlying software, designs, and documentation are the exclusive property of Noom Studio Co., Ltd. and are protected by copyright, trademark, and other intellectual-property laws. No license, right, or interest in any of the foregoing is granted to the Venue except the limited, non-exclusive, non-transferable right to use the Service while your subscription is active and you are in compliance with these Terms. Feedback you provide about the Service may be used by us for any purpose without obligation to you.

6. Health information disclaimer

The intake flow lets guests volunteer health-related notes (for example, areas to avoid or conditions the therapist should know about). This information is collected for the Venue’s operational use only. Massageasy is not a medical service and does not provide medical advice. The Venue remains solely responsible for how its staff act on guest-provided information.

7. Availability and changes

We aim to keep the Service available at all times but do not guarantee uninterrupted operation. The tablet flow is designed to keep working through brief connectivity drops, but we are not liable for losses caused by outages, device failures, or internet issues at the Venue. We may improve or modify features; if we materially reduce a paid feature, you may cancel and receive a pro-rated refund of any prepaid, unused period.

8. Termination

You may close your account at any time. We may suspend or terminate accounts that breach these Terms. After termination you have 30 days to export your data, after which we may delete it.

9. Liability

To the maximum extent permitted by law, our total liability arising from the Service is limited to the amount you paid us in the 12 months before the claim. We are not liable for indirect or consequential losses, including lost revenue or lost data caused by factors outside our reasonable control.

10. Governing law

These Terms are governed by the laws of Thailand. Disputes will be resolved in the courts of Thailand.

11. Contact

Questions about these Terms: contact us via the “Talk to us” link on the homepage or at the contact details published there.

Terms of Service · Privacy Policy · Sub-processors