Privacy Policy
Last updated July 2026. How AI Buddy collects, processes, and safeguards data for businesses and their customers under Thailand's Personal Data Protection Act.
1. Two Kinds of Data, Two Roles
AI Buddy handles two distinct categories of personal data with specific roles for each:
Your account data: For your business name, email, credentials, and billing information, AI Buddy acts as the data controller.
Customer conversation data: For messages your AI agents exchange with customers on LINE or other channels, your business is the data controller, and AI Buddy acts strictly as a data processor.
2. What We Collect
- Account data: Name, business email, encrypted credentials, business profile, and billing reference codes.
- Knowledge base content: Product catalogs, treatment menus, pricing, FAQs, and business guidelines uploaded to brief your agents.
- Channel messaging: Inbound and outbound conversations routed through connected platforms (LINE OA, Instagram, Messenger).
- System diagnostics: Performance telemetry and access logs strictly required to maintain uptime and system integrity.
3. Purpose of Processing
Data is processed solely to operate your autonomous AI agents, execute scheduled follow-ups, sync bookings with your calendar, deliver analytics, and provide customer support. We never sell your data or use your customer conversations to train public models.
4. Infrastructure and Sub-Processors
To provide high availability and secure operations, we utilize verified enterprise infrastructure partners:
Application Hosting
Vercel (Global Edge Network)
Database & Encryption
Turso / libSQL (AES-256 encrypted)
AI Inference Engine
Google Cloud (Gemini API Enterprise)
Channel Delivery
LINE Official Account Messaging API
5. Your Privacy Rights (PDPA, CCPA/CPRA, and GDPR)
Depending on your location, you have statutory rights concerning your personal information:
Right to Know and Access: You may request disclosure of what personal data we collect, use, and process.
Right to Deletion: You may request complete deletion of your account and workspace records at any time.
Zero Sale of Personal Data: We do not sell, rent, or share personal data with third-party advertisers.
Non-Discrimination: We will never discriminate against you for exercising any of your privacy rights.
6. Cookieless Telemetry & Analytics
Our platform uses self-hosted, privacy-preserving web analytics powered by the open-source Umami engine. We do not place tracking cookies, store persistent device fingerprints, or monitor users across external websites. All metrics are aggregated and processed without profiling.
7. Children's Privacy (COPPA Compliance)
AI Buddy is strictly a commercial business operating platform intended for individuals aged 18 and older. We do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that a child under 13 has provided personal data, we will immediately delete that information from our records.
8. Data Requests & Contact
To submit a verified data export or deletion request under CCPA, GDPR, or PDPA, please contact our privacy compliance team via our contact form.