Privacy policy.

The short version

• We only collect what you send us, and we use it to reply to you and to do the work you ask for.
• No analytics, no advertising cookies, no tracking. Our fonts and scripts are served from this site.
• We never sell your data.
• Email [email protected] any time to see, correct or delete what we hold about you.

Who we are

The AI Workroom (“we”, “us”), Thailand, is responsible for the personal data described here. You can reach us at [email protected].

What we collect

• Enquiry and audit forms: your name, email, website, the kind of business you run, your message and timing. The audit form also asks for your store address and rough order volume.
• AI intake briefs: if you use our AI intake, your assistant sends us the summary you approved. We receive only that brief, not your conversation.
• Emails and calls: whatever you choose to share with us when we talk.
• Server logs: our hosting provider records basic technical data (IP address, browser, pages requested) to keep the site running and secure.
• Your day/night choice: if you switch modes, your browser remembers it until you close the tab. It never leaves your device and isn’t a tracking cookie.

Why we use it

We don’t use your data for automated decisions about you, and we don’t send marketing emails unless you ask for them.

Who we share it with

Only the service providers we need to run the business, each bound to protect your data:

• FormSubmit, which receives form submissions and forwards them to our inbox.
• Our email and website hosting providers.
• On a project, the tools you ask us to connect (for example Shopify or your helpdesk), under your own accounts.

When we use AI services on client work, we use business tiers that don’t train on your data, and we keep personal details out of prompts unless the task needs them. If you use your own AI assistant for our intake, that conversation is handled by your assistant’s provider under their terms.

We may disclose data if the law requires it. If the business is ever sold, your data would move with it under this policy.

International transfers

We’re based in Thailand, and some of our providers are in the United States and elsewhere. Where the law requires it, we rely on safeguards such as standard contractual clauses for these transfers.

How long we keep it

• Enquiries that don’t become projects: up to two years after we last spoke, then deleted.
• Client records: for the length of the project and as long as tax and accounting law requires afterwards.
• Server logs: kept for a short period by our host, typically under 30 days.

Your rights

Depending on where you live (including under the EU and UK GDPR, Thailand’s PDPA and California’s CCPA), you can ask us to:

• give you a copy of your data, or send it to someone else;
• correct it, or delete it;
• stop or limit how we use it, or object to it;
• withdraw consent where we relied on it.

Email [email protected] and we’ll reply within one month. We don’t sell or share personal data for cross-context behavioural advertising. You can also complain to your data protection authority, such as Thailand’s PDPC, the UK’s ICO or your EU supervisory authority.

Security

We use encrypted connections, access controls and the narrowest permissions a job needs. No system is perfectly secure, so if something goes wrong we’ll tell you and the authorities as the law requires.

Children

This site is for businesses and isn’t aimed at anyone under 16. We don’t knowingly collect their data.

Changes

If we change this policy we’ll update the date at the top. For significant changes affecting current clients, we’ll tell you directly.