The Checklist AI ภาษาไทย

Privacy Policy

Last updated: 26 September 2026

This policy explains how The Checklist Co., Ltd. collects, uses and protects personal data when a shop and its customers use The Checklist AI, and when anyone visits thechecklist.ai. If you have any question about this policy, email us at privacy@thechecklist.ai.

Who this policy covers

This policy covers two different groups of people. The first group is a shop's staff, who sign in and use the app. The second group is a shop's customers, who chat with the shop.

In this policy, the word "you" means whichever of these two groups the sentence is about.

Our role

For a shop's own staff accounts, we decide how that data is used. Under Thailand's Personal Data Protection Act (PDPA), this makes us the controller of that data.

For a shop's customers, the shop decides how their data is used and we only follow its instructions. This makes us a processor, and the shop is the controller of its own customers' data.

What we collect

Staff accounts: name, email address, password (stored as a hash, never in readable form), role, and language setting. If a staff member signs in with Google, we also receive the name and email address of that Google account.

Contact details: the name and profile picture shown on the chat platform, and anything staff add, such as a phone number, an email address, tags and notes.

Chat: the text of messages and the photos sent in chat, from LINE, Facebook Messenger, Instagram, WhatsApp and TikTok.

Activity records: who assigned, tagged, snoozed, closed or replied to each conversation, and who changed the shop's settings.

LINE profile information we keep for longer than 24 hours

We want to be completely clear about this. We keep your LINE display name, profile picture and status message for longer than 24 hours. We keep them for as long as the shop's workspace with The Checklist Co., Ltd. exists.

We do this so the shop's inbox can keep showing who is talking, even between messages sent days or weeks apart. Without this, the shop would see a blank name next to your messages.

This notice is what allows us to keep these three fields under the rules LINE sets for app developers.

How long we keep information

We keep information for as long as the shop's workspace with us exists. We do not delete anything automatically.

Closing or snoozing a conversation only changes its status. It does not delete anything.

When a person asks us to erase their data, we erase the text of their messages and the photos sent in their chat.

What we use your information for

We use your information to run the app: to show the inbox, to keep what staff write down about each customer, and to send and receive messages.

We do not use artificial intelligence (AI) on your information today. No part of a conversation, and nothing staff write down about a customer, is sent to any AI.

We may also use information to improve our services, to run automations, and to train our AI, for as long as the shop's workspace exists. This is a stated purpose for the future. We will update this policy before any of it starts.

An admin of the shop's workspace can opt out of these three uses at any time by emailing us at privacy@thechecklist.ai. One opt-out covers all three. Opting out does not delete anything by itself.

Who else receives your information

We share information with a small number of other companies who help us run the service. Each of them may only use your information to provide their service to us.

Where your information is kept, and leaving Thailand

Our servers and our database are outside Thailand, in Singapore. Photos are held by a global cloud storage provider.

Thailand's Personal Data Protection Committee (PDPC) has not published a list of countries it considers to have adequate data protection. Because no such list exists, we rely on contract terms with each of our providers to protect your information when it leaves Thailand.

How we protect your information

Passwords are hashed with a modern password-hashing method. We never store a password in readable form.

The connection between your device and our app is always encrypted.

Each shop's data is kept separate inside our database. The database itself enforces this, together with a check on every request, so one shop's queries cannot reach another shop's data.

Staff accounts have one of two roles, admin or agent. Only admins can connect channels, invite staff and change shop settings.

What we never do

We never sell personal data.

We never combine one shop's customers with another shop's customers.

This website

thechecklist.ai sets no cookies and runs no analytics or advertising tags. Cloudflare, which serves the website, processes your IP address to deliver the page and protect it from attacks.

Your rights

Thai law (the PDPA) gives you these rights over your personal data: access and a copy of it, correction, erasure, restriction of how it is used, objection to certain uses, portability (a copy in a machine-readable format), withdrawing consent where consent is the basis for use, and complaining to the Personal Data Protection Committee (PDPC).

To use any of these rights, email us at privacy@thechecklist.ai. To ask for deletion, see our Data Deletion Instructions.

If something goes wrong

If we discover a personal-data breach, we tell the affected shop within 72 hours of discovering it, so the shop can make its own report if it needs to.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

How to contact us

For any question about this policy, or to use any of the rights above, email The Checklist Co., Ltd. at privacy@thechecklist.ai.