Privacy notice

How this service processes personal data under Thailand's Personal Data Protection Act (PDPA).

Data Protection Officer

Each data set that holds personal data, why it is processed, on what legal basis and how long it is kept.

Legal basis: Consent (section 19), a legal obligation (section 24(3)) or a contract (section 24(4)), depending on the data

Data set	Retention	Personal data held
Your account, identity and access permissions
Users	While your account exists. Removed when you or an admin erase it	Email address, Name or identifier
Your conversations with agents, kept so you can pick them up again
Chat messages	180 days, then deleted	Conversation content, Name or identifier
Security audit trail and legally required logs
Audit logs	90 days, the minimum the Computer-Related Crime Act requires	Email of the person acting, IP address
Proof of the consents you have given or withdrawn
Consent records	While your account exists, then 5 more years as proof of consent	Link to your account, IP address, Device and browser
Data the service needs to run
18 data sets	While your account exists, or for a limited period	Link to your account, Name or identifier, Support request content

Encrypted in transit (TLS 1.3)
Encrypted at rest (AES-256)
Thai ID numbers and other personal details are masked before they reach a model, unless your organization turns this off
Masked details are restored only in the reply you see
Erasing your account locks it immediately, then removes your stored files
Every time an administrator views your activity, it is logged