Privacy Policy & Data Protection Notice

AgentBase Co., Ltd. ("AgentBase", "we", "us", or "our"), located at Empire Tower, 38th Floor, South Sathorn Rd, Bangkok 10120, Thailand, operates the AgentBase AI Real Estate platform. We act as the Data Controller under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when property agents, agencies, and buyers interact with our platform.

We collect data to deliver AI real estate generation, LINE OA auto-response, and multi-portal inventory management: - Account & Agent Profile: Name, company name, phone number, email address, property license number, and billing credentials. - Real Estate Listing Data: Property locations, photos, pricing, descriptions, square meters, Chanote/title details, and owner contact details uploaded by agents. - Client & Inquiry Data (via LINE OA / Web): Buyer inquiries, preferred property criteria, budget, BTS/MRT preferences, and chat interaction logs. - Technical & Usage Data: IP address, browser type, device identifiers, and platform activity logs.

AgentBase integrates third-party foundational AI models provided by OpenAI, LLC and Google LLC (Gemini API) to process real estate listings, generate bilingual descriptions, and power LINE OA chat responses. Key AI Data Handling Safeguards: - Enterprise Zero Data Retention: All API requests sent to OpenAI and Google Gemini use paid Enterprise API contracts. Data sent to these APIs is NOT used to train or improve foundational models. - Ephemeral Processing: Property listing data and buyer query prompts are processed strictly for real-time output generation and are not stored permanently on third-party AI provider servers. - Data Anonymization: PII (Personally Identifiable Information) such as seller personal phone numbers or ID card numbers are automatically redacted before prompts are submitted to LLM endpoints.

Under Thailand's PDPA, we process your personal data based on the following legal grounds: - Performance of Contract (Section 24(3)): To deliver AgentBase AI services, process LINE OA auto-responses, and sync listings to Thai property portals. - Legitimate Interests (Section 24(5)): To maintain platform security, prevent fraud, optimize AI generation quality, and improve user experience. - Legal Compliance (Section 24(6)): To comply with Thai tax law, accounting regulations, and statutory disclosure orders. - Consent (Section 19): For non-essential marketing communications and specialized AI feature analytics. You may withdraw consent at any time.

We may share data with trusted data processors under strict Data Processing Agreements (DPAs): - AI Infrastructure Providers: OpenAI, LLC (USA) and Google Cloud Platform / Gemini API (USA/Singapore). - Thailand Property Portals: Livinginsider, DDproperty, DotProperty, FazWaz, and Hipflat (only when explicitly requested by you via 1-Click Sync). - Messaging Platforms: LINE Corporation (LINE Official Account API). - Cloud & Database Hosting: AWS Singapore (Asia-Pacific Region) with ISO 27001 certification.

As a data subject in Thailand, you hold statutory rights under PDPA Sections 30–36: - Right to Access (Section 30): Request copies of your personal data stored by AgentBase. - Right to Rectification (Section 35): Correct inaccurate or out-of-date personal information. - Right to Erasure / Right to be Forgotten (Section 33): Request deletion of your account and inventory data. - Right to Data Portability (Section 31): Obtain your property inventory data in a structured, machine-readable format. - Right to Object & Restrict (Sections 32 & 34): Object to automated processing or restrict data usage. To exercise any right, contact our Data Protection Officer at dpo@agentbase.co.th.

We implement TLS 1.3 encryption in transit and AES-256 encryption at rest. We retain agent personal data for the duration of your active subscription plus 10 years to comply with Thai Revenue Code tax audit requirements. Client LINE OA chat logs are retained for 12 months or until deleted by the agent.