Privacy Policy

When you register or use the service, we collect the following data:

• Account data: Name, email, phone number, business name
• Usage data: Login history, settings, commands used
• Payment data: Transaction history (card numbers not stored — processed via Beam, which is PCI-DSS compliant)
• Data you import: Customer messages, services, products, and AI settings
• Technical data: IP address, User Agent, Logs for security purposes

We use your data to:

• Provide and improve the platform
• Monitor and prevent abnormal usage
• Send necessary notifications, such as service renewal reminders
• Comply with legal requirements

We do not sell your personal data to third parties for marketing purposes.

We may share data with external service providers to the extent necessary, including:

• Cloudflare: Infrastructure (Workers, D1, Pages)
• Beam Payment: Payment processing
• Google AI (Gemini): AI Response processing (messages sent will not be used to train models)
• EasySlip: Payment proof verification (Add-on)

These third parties have their own privacy policies. We select only service providers with adequate security standards.

We use the following measures to protect your data:

• Multi-tenant data isolation — every query is filtered by tenant_id
• Session tokens with expiry dates; passwords are never stored in plain text
• All data transmission via HTTPS only
• HMAC signature verification for Webhooks

However, no system is 100% secure. If you notice any suspicious activity, please contact us immediately.

Under the Personal Data Protection Act B.E. 2562, you have the right to:

• Right of Access: Request to view the personal data we hold about you
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of personal data (except where legally required to retain)
• Right to Object: Object to data processing in certain cases
• Right to Data Portability: Request data in a machine-readable format

Submit rights requests to [email protected]. We will respond within 30 days. [email protected]

We retain data for as long as your account is active, or as necessary to provide the service. Upon account cancellation, we will delete personal data within 90 days, except data legally required to be retained (e.g., transaction records for 5 years under accounting law).

If you have questions about this policy or wish to exercise PDPA rights, please contact:

Data Protection Officer (DPO)
Email: [email protected]