PRIVACY POLICY

1. Who We Are

1.1 The developer and data controller for ThinkChat AI Agent is:

Think AI (M) Sdn Bhd
ThinkChat AI Agent
Puchong, Malaysia

Website https://thinkchat.tech

Privacy contact: Admin@thinkchat.tech

Phone +60 17-828 8329

1.2 Privacy inquiries, data-subject requests, and account deletion requests should be sent to Admin@thinkchat.tech.

2. Scope

2.1 This Privacy Policy covers personal and sensitive user data we handle when you:

• Visit thinkchat.tech or related ThinkChat websites.
• Create or use a ThinkChat account.
• Use the ThinkChat web app or mobile app.
• Connect messaging channels or third-party integrations.
• Submit a demo, support, or contact request.
• Interact with a ThinkChat-powered agent as an end customer of a ThinkChat subscriber.

2.2 ThinkChat is a business service. Our Customers (subscribers) may use ThinkChat to communicate with their own customers, leads, or users ("End Users"). In that case, the Customer is responsible for providing required notices and obtaining any required consents from End Users. We process End User data to provide the Services to the Customer.

3. Personal And Sensitive User Data We Collect

3.1 Depending on how you use the Services, we may access, collect, use, and store the following categories of personal and sensitive user data:

Account and identity data:

• Name
• Email address
• Phone number
• Company or business name
• Account credentials (passwords are stored in hashed form)
• User role and account identifiers

Customer content and communications:

• Messages, chats, and conversation transcripts across connected channels
• Uploaded files, knowledge-base documents, training materials, and business information
• Lead details captured through the Services
• Support tickets and demo-request details

Channel and integration data:

• Channel connection identifiers, page or number IDs, and webhook metadata
• WhatsApp, Messenger, Instagram, Telegram, website live chat, WeChat, and other connected-channel message metadata
• Calendar event details when you connect Google Calendar or similar booking tools

Payment and billing data:

• Billing email, plan, invoices, and transaction status
• Payment is processed by Stripe. We do not store full payment card numbers on ThinkChat servers.

Device, app, and technical data:

• IP address
• Browser type, device type, operating system, and app version
• Date and time of access, pages or screens viewed, and diagnostic or crash logs
• Session identifiers and essential cookies, including a demo visitor token where used
• Push notification tokens if you enable notifications in a mobile app

We do not collect IMEI, IMSI, or SIM serial numbers, and we do not link persistent device identifiers such as IMEI to personal or sensitive user data.

3.2 We do not require access to your device phonebook, precise GPS location, microphone, or camera unless a specific optional feature you enable needs it, in which case the app will request the relevant permission and explain the purpose.

4. How We Collect Data

4.1 We collect data:

• Directly from you when you register, subscribe, submit forms, upload content, or contact us.
• Automatically when you use the websites, web app, or mobile app (for example IP address, logs, and essential cookies).
• From connected third-party platforms that you choose to integrate, such as Meta/WhatsApp, Telegram, Google, or payment providers.
• From End Users when they message a channel connected to a Customer account.

5. How We Use Data

5.1 We use personal and sensitive user data only to operate, provide, secure, and improve features that users reasonably expect from ThinkChat, including to:

• Create and manage accounts, authentication, and access control.
• Provide AI-assisted customer service, automated replies, lead capture, and knowledge-base answers.
• Deliver messages across channels the Customer has connected.
• Process subscriptions, billing, renewals, and receipts.
• Provide customer support, onboarding, and demo assistance.
• Maintain security, prevent fraud, abuse, spam, and unauthorized access.
• Comply with law, enforce our terms, and protect our rights.
• Send service notices such as billing, security, or product changes.

5.2 We do not use personal and sensitive user data for third-party advertising. We do not sell personal and sensitive user data.

5.3 We limit collection and use to what is needed for the Services and related legitimate business purposes described in this Privacy Policy.

6. How We Share Data

6.1 We share personal and sensitive user data only as needed to provide the Services, with service providers who assist us, or where required by law. Categories of parties include:

• AI processing providers (including OpenAI, Anthropic, and Google) to generate replies and operate AI features.
• Messaging and social platforms you connect, including Meta Platforms, WhatsApp Business Platform, Instagram, Facebook Messenger, Telegram, and other channel providers.
• Payment processors, including Stripe, to collect subscription fees.
• Google, when you connect Google Calendar or other Google services you enable.
• SMS, telephony, hosting, email, and infrastructure providers that host or transmit Service data.
• Professional advisers or authorities where required for legal, security, or regulatory reasons.
• A successor organization if we are involved in a merger, acquisition, or sale of assets, with notice where legally required.

6.2 Service providers are permitted to process data only to perform services for us or the Customer, and not to sell that data.

6.3 We do not sell personal and sensitive user data, including data obtained from End Users or from Google APIs.

7. Google User Data And Limited Use

7.1 If you connect a Google account (for example Google Calendar for appointment booking), ThinkChat may access Google user data that you authorize, such as calendar availability and event details needed to create or update bookings.

7.2 ThinkChat's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7.3 Google user data is used only to provide or improve user-facing features that are prominent in ThinkChat, such as appointment booking. We do not:

• Sell Google user data.
• Use Google user data for serving advertisements.
• Use Google user data for creditworthiness or lending decisions.
• Allow humans to read Google user data unless you give us explicit permission for a specific support case, the data is aggregated and anonymized for internal operations, it is necessary for security or abuse investigation, or it is required to comply with law.

7.4 We do not use Google user data to train generalized artificial intelligence or machine-learning models.

8. AI Processing

8.1 To generate replies and operate the agent, conversation content, knowledge-base content, and related instructions may be processed by third-party AI providers.

8.2 That processing is performed to provide the Service feature you are using. We do not sell this content. We do not use it for third-party advertising.

8.3 AI outputs can be inaccurate. Customers remain responsible for reviewing AI-generated responses before relying on them, as described in our Terms.

9. Cookies And Similar Technologies

9.1 We use essential cookies and similar technologies to operate the Services, keep you signed in where applicable, remember a demo-chat visitor session, and apply basic rate limiting or security controls.

9.2 We do not use advertising cookies to sell or broker personal data. You can control cookies in your browser. Disabling essential cookies may prevent parts of the Services from working.

10. Data Security

10.1 We handle personal and sensitive user data using reasonable administrative, technical, and organizational measures appropriate to the nature of the data. These measures include:

• Transmitting data over the internet using modern cryptography (HTTPS/TLS).
• Access controls and authentication for account and administrative access.
• Restricting staff access to data needed to operate and support the Services.
• Monitoring for abuse, fraud, and unauthorized access where practicable.

10.2 No method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential.

11. Data Retention

11.1 We retain personal and sensitive user data only as long as needed to provide the Services, maintain your account, meet legal, tax, security, or accounting requirements, and resolve disputes.

11.2 Typical retention:

• Active account and Service data: for the life of the account and a reasonable period after.
• Conversation, knowledge-base, and channel data: while the account is active and until deleted by the Customer or following account deletion.
• Billing and invoice records: as required for tax and accounting compliance.
• Security logs: for a limited period needed for fraud prevention and security.
• Backups: for a limited backup cycle after deletion, after which they are overwritten.

11.3 When data is no longer needed, we delete or anonymize it, except where a longer period is required by law.

12. Account And Data Deletion

12.1 If you have a ThinkChat account, you may request deletion of your app account and associated user data. Account freezing, deactivation, or suspension is not treated as deletion.

12.2 Web deletion request (this is the public web resource for account and data deletion):

Email Admin@thinkchat.tech from your registered account email with the subject line "Account Deletion Request". Include:

• The email address of the account to delete.
• Confirmation that you want the account and associated data deleted, not merely deactivated.

We will acknowledge the request and complete deletion of the account and associated user data within thirty (30) days, unless a shorter period is required by law.

12.3 In-app deletion: if you use the ThinkChat mobile app, you may also start an account deletion request from the in-app account or settings area where that option is provided.

12.4 When we delete an account at your request, we delete associated personal and sensitive user data, including profile data, conversation records, uploaded knowledge-base content, and channel connection data held in ThinkChat for that account.

12.5 We may retain limited information after deletion only where we have a legitimate reason, including:

• Invoices and transaction records required for tax, accounting, or audit.
• Records needed for security, fraud prevention, or to demonstrate compliance with law.
• Information we are legally required to keep.

Any such retained data will be limited to what is necessary for that purpose and will not be used to provide the Service to you.

12.6 End User messages stored for a Customer are deleted with that Customer's account, subject to the backup and legal-retention limits above. End Users who want a specific business to stop using their data should contact that business directly.

13. Your Privacy Rights

13.1 Subject to applicable law, you may request to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete personal data or your account, as described in Section 12.
• Withdraw consent where processing is based on consent.
• Restrict or object to certain processing, where applicable.
• Ask how your data is used and with whom it is shared.

13.2 To make a request, email Admin@thinkchat.tech. We may need to verify your identity. We will respond within the time required by applicable law.

13.3 If you are an End User of a ThinkChat Customer, please contact that business first. We may redirect the request to the Customer where they are the data controller for your conversation data.

14. Children's Privacy

14.1 ThinkChat is a business product. It is not directed to children, and we do not knowingly collect personal data from children under 13 (or under 18 where a higher age is required).

14.2 Do not create an account or submit personal data to the Services if you are under the applicable age. If we learn that we have collected personal data from a child, we will delete it.

14.3 The Services are not intended to be used as a child-directed app under Google Play Families Policy.

15. International Data Transfers

15.1 We are based in Malaysia. Your data may be processed in Malaysia and in other countries where our service providers operate, including locations where AI, hosting, messaging, or payment providers process data.

15.2 Those countries may have different data-protection laws. We take reasonable steps to protect personal data when it is transferred, including using reputable providers and contractual protections where appropriate.

16. We Do Not Sell Personal Data

16.1 We do not sell personal and sensitive user data.

16.2 "Sale" means the exchange or transfer of personal and sensitive user data to a third party for monetary consideration. Sending data to a service provider so we can operate a feature you requested (for example delivering a WhatsApp message or generating an AI reply) is not a sale.

17. Changes To This Privacy Policy

17.1 We may update this Privacy Policy from time to time. The "Effective Date" at the top shows when it was last updated.

17.2 Material changes will be posted on this page and may also be notified by email or in-product notice. Continued use of the Services after an update means you acknowledge the updated Privacy Policy.

17.3 If we start using Google user data in a new way not described here, we will update this Privacy Policy and obtain any consent required before doing so.

18. Contact

Think AI (M) Sdn Bhd
ThinkChat AI Agent

Privacy and deletion requests Admin@thinkchat.tech

Phone +60 17-828 8329

Website https://thinkchat.tech

Privacy Policy https://thinkchat.tech/privacy

Terms & Conditions https://thinkchat.tech/terms