Platform Privacy Policy

This Privacy Policy describes how Qlendar.AI ("we", "us", "our") collects, uses, and shares personal data when you use our Platform as a business owner or tenant ("Tenant").

1. Information We Collect

• Account Information: When you register, we collect your name, email, and business details.
• Integration Data: We collect your LINE Channel access tokens, Stripe API keys, and other integration credentials to operate the Service.
• Customer Data: We store the LINE user IDs, names, and booking history of your Students to facilitate the AI assistant and booking process.
• AI Assistant: When a Student messages your LINE Official Account, their message text and the booking context needed to answer it are sent to our AI sub-processor to generate a reply. We do not store these conversations as transcripts.

2. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the Qlendar.AI service.
• Power the AI assistant using Large Language Models (LLMs) to respond to your Students.
• Process payments and waitlist queueing.

3. Sharing Your Information

We do not sell your data or your Students' data. We share information only with the service providers necessary to operate the platform, listed in full in our Data Processing Agreement:

• Neon (database, United States)
• Vercel (hosting, United States and global edge)
• Google LLC (Gemini API): Message text and the booking context needed to answer it are sent to Google in the United States to generate AI responses.
• Stripe (the studio's own subscription billing, United States and global)
• Omise (student payments, Thailand)
• EasySlip (bank-slip verification, Thailand)
• Sentry (error reporting, United States)
• Upstash (rate-limit counters, Singapore)
• LINE (login and message delivery, Japan and Singapore)

4. Your Responsibilities as a Tenant

You are the Data Controller of your Students' data. You are responsible for obtaining necessary consents from your Students under applicable privacy laws (e.g., PDPA in Thailand or GDPR) before allowing them to interact with the Qlendar.AI bot.

5. Data Retention & Deletion

We retain your data for as long as your account is active. On request we will archive and pseudonymise your Students' personal data; records we are required by law to keep, such as financial and tax records, are retained for at least five years. Retention periods are set out in Schedule 3 of the Data Processing Agreement.

6. Security

We use industry-standard encryption to protect your data in transit and at rest. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.