Terms of Service

1. Acceptance of Terms

By creating an account, accessing, or using the ThaiBot platform ("Service"), you ("Customer") agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.

If you are accepting these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms.

2. Definitions

"Service" — the ThaiBot AI customer support chatbot platform, including the website at thaibot.ai, dashboard, APIs, embeddable chat widget, and related services.
"Customer" — a business or individual who creates an account to use the Service.
"End-User" — a consumer or visitor who interacts with a ThaiBot-powered chatbot deployed by a Customer.
"AI Services" — the artificial intelligence features of the Service, including AI-generated chat responses powered by third-party AI models.
"Customer Data" — all data uploaded, submitted, or generated by the Customer through the Service, including business information, training content, and End-User chat data.
"Output" — any content generated by the AI Services in response to inputs.

3. Service Description

ThaiBot provides an AI-powered customer support chatbot platform. Customers can deploy AI chatbots on their websites, LINE accounts, and other channels to handle customer inquiries, book appointments, and capture leads.

We target a monthly uptime of 99.5%, excluding scheduled maintenance, third-party service outages (AI providers, hosting infrastructure, payment processors), and force majeure events.

4. Account Registration

You must be a registered business or authorized individual to create an account.
You must provide accurate, current, and complete information during registration.
You are responsible for maintaining the confidentiality of your account credentials.
You are responsible for all activities that occur under your account.
You must notify us immediately of any unauthorized use of your account.

5. Subscription & Payment

Service plans and pricing are available at thaibot.ai/pricing.
Billing is processed monthly or annually via Stripe. Currency: THB or USD as applicable.
Subscriptions auto-renew at the end of each billing period. You may cancel at any time; cancellation takes effect at the end of the current billing period.
We will provide at least 30 days' advance notice before any price changes.
Customer is responsible for all applicable taxes, including Thai withholding tax (WHT) and VAT where applicable.
No refunds for partial billing periods. For annual plans, service continues until the end of the paid period.

6. License

Subject to these Terms, ThaiBot grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your internal business purposes during the term of your subscription.

7. Customer Obligations

As a Customer, you agree to:

Comply with the PDPA and all applicable laws regarding personal data you collect through the Service.
Obtain all necessary consents from End-Users before deploying the chat widget on your website or channels.
Inform End-Users that they are interacting with an AI chatbot, not a human. This is a mandatory requirement. You must not represent AI-generated responses as coming from a human agent.
Include a privacy notice in or near the chat widget that explains what data is collected and how it is processed.
Be responsible for the accuracy of any training content, knowledge base information, or business data you provide.
Not use the Service to process sensitive personal data (health, financial, biometric, religious, sexual orientation, criminal records) without implementing appropriate safeguards and obtaining explicit consent.

8. Acceptable Use Policy

You may not use the Service to:

Generate content that is illegal under Thai law or any other applicable law
Process sensitive personal data without proper safeguards and explicit consent
Impersonate real individuals
Provide regulated professional advice (medical, legal, financial) as authoritative without appropriate disclaimers
Claim that AI-generated output is produced by a human
Reverse-engineer, decompile, or extract AI models or algorithms
Use AI outputs to develop competing AI products or services
Send spam, phishing messages, or engage in deceptive marketing practices
Engage in any activity that degrades, disrupts, or interferes with the Service for other users

ThaiBot reserves the right to immediately suspend or terminate accounts that violate this Acceptable Use Policy, without refund for any unused subscription period.

9. AI Services Terms

9.1 How AI Responses Are Generated

AI responses are generated by third-party AI models (including Anthropic Claude and Google Gemini) accessed via OpenRouter. The specific models used may change over time to improve quality and performance.

9.2 No Warranty on AI Accuracy

AI-generated content may contain errors, inaccuracies, or inappropriate responses.ThaiBot does not guarantee the accuracy, completeness, or reliability of any AI-generated output. AI-generated content is provided "as is" without warranty of accuracy, completeness, or fitness for any purpose.

9.3 Customer Responsibility

Customer is solely responsible for reviewing, monitoring, and approving AI responses before they are relied upon by End-Users. ThaiBot shall not be liable for any decisions, actions, or outcomes based on AI-generated output.

9.4 No Professional Advice

The Service does not provide legal, medical, financial, or other professional advice. AI-generated responses should not be treated as professional counsel.

9.5 No AI Training on Customer Data

Customer Data is NOT used to train AI models. We have enabled Zero Data Retention (ZDR) on our AI routing service, which ensures that prompts and responses are not retained by AI providers for training or other purposes.

10. Intellectual Property

ThaiBot owns: the platform, software, branding, algorithms, user interface, and all related intellectual property.
Customer owns: all Customer Data, including business content, training materials, and chat history.
AI Outputs: Customer receives a license to use AI-generated outputs for their business purposes. ThaiBot makes no warranty of originality or non-infringement for AI outputs.

11. Data Ownership & Processing

Customer retains all rights to Customer Data. ThaiBot processes Customer Data solely to provide the Service, in accordance with our Privacy Policy and the Data Processing Agreement in Schedule A below.

Upon termination, Customer has 30 days to request export of their data. After this window, ThaiBot will delete Customer Data from active systems. Backups may be retained for up to 90 additional days before permanent deletion.

12. Confidentiality

Each party agrees to protect the other party's confidential information with at least the same degree of care it uses to protect its own confidential information. Confidential information excludes information that is publicly available, already known by the receiving party, or independently developed. This obligation survives termination for 2 years.

13. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. THAIBOT DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

ThaiBot does not warrant that the Service will be uninterrupted, error-free, or free of harmful components; that AI-generated output will be accurate, complete, or suitable for any particular purpose; or that the Service will meet your specific requirements.

14. Limitation of Liability

Liability Cap:ThaiBot's total aggregate liability for all claims arising from or related to these Terms shall not exceed the total fees paid by Customer to ThaiBot in the twelve (12) months preceding the claim.

Excluded Damages: In no event shall either party be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, revenue, data, business opportunities, or goodwill, regardless of the cause of action or the theory of liability.

AI-Specific Exclusions:ThaiBot shall not be liable for: (a) the accuracy or content of AI-generated outputs; (b) any End-User reliance on AI-generated responses; (c) damages arising from Customer's failure to review or monitor AI outputs; (d) third-party AI provider outages or changes.

Exceptions:The limitations above do not apply to: (a) gross negligence or willful misconduct; (b) data breaches caused by ThaiBot's negligence; (c) ThaiBot's IP infringement.

15. Indemnification

Customer indemnifies ThaiBotagainst claims arising from: Customer's content and data; Customer's use of AI outputs; violations of End-User rights; and Customer's violations of applicable law.

ThaiBot indemnifies Customeragainst claims arising from: infringement of third-party intellectual property by the platform itself; and data breaches caused solely by ThaiBot's negligence.

16. Termination

By Customer: You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period.
By ThaiBot for breach: We will provide 30 days' written notice and opportunity to cure. If the breach is not cured within 30 days, we may terminate your account.
By ThaiBot for AUP violations: We may immediately suspend or terminate accounts that violate the Acceptable Use Policy without prior notice.
Effect of termination: Upon termination, your license to use the Service ends. You have 30 days to export your data.

17. Governing Law & Disputes

These Terms are governed by the laws of the Kingdom of Thailand. Any dispute arising from or relating to these Terms shall first be subject to good-faith informal resolution for a period of 30 days. If unresolved, disputes shall be submitted to arbitration under the rules of the Thai Arbitration Institute, with proceedings conducted in Bangkok, Thailand, in English.

18. Modifications

We may modify these Terms from time to time. For material changes, we will provide at least 30 days' advance notice via email. Continued use of the Service after the effective date of changes constitutes acceptance. If you do not agree with the modified Terms, you must stop using the Service before the effective date.

19. General Provisions

Entire Agreement: These Terms (including the Privacy Policy and Schedule A) constitute the entire agreement between the parties.
Severability: If any provision is found unenforceable, the remaining provisions remain in full effect.
Force Majeure: Neither party is liable for delays or failures caused by events beyond reasonable control.
Assignment: Customer may not assign these Terms without ThaiBot's written consent. ThaiBot may assign in connection with a merger or acquisition.
Waiver: No waiver of any provision shall be effective unless in writing.

20. Contact

For questions about these Terms:

Email: legal@thaibot.ai
Privacy inquiries: privacy@thaibot.ai

Schedule A — Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the Terms of Service between the Customer ("Data Controller") and ThaiBot ("Data Processor") and governs the processing of personal data in connection with the Service.

This DPA is required by Section 40 of the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

A.1 Definitions

Terms used in this DPA have the same meaning as defined in the PDPA. "Personal Data," "Data Controller," "Data Processor," "Processing," "Data Subject," and "Sub-Processor" have the meanings given in the PDPA.

A.2 Scope & Purpose

ThaiBot processes the following personal data on behalf of the Customer:

Processing activities: AI-powered customer support chatbot services
Data types: Names, email addresses, phone numbers, chat messages, appointment details, conversation metadata
Data subjects: Customer's End-Users (consumers interacting with the chatbot)
Duration: For the term of the Service Agreement, plus the data retention periods specified in the Privacy Policy

A.3 Processor Obligations

ThaiBot shall:

Process Personal Data only in accordance with the Customer's documented instructions and these Terms
Ensure that persons authorized to process Personal Data are subject to confidentiality obligations
Implement and maintain the security measures described in Section A.7
Not engage any Sub-Processor without the Customer's general authorization as provided in Section A.4
Assist the Customer in fulfilling Data Subject rights requests (access, deletion, correction, portability)
Notify the Customer of data breaches without undue delay (see Section A.8)
Delete or return all Personal Data upon termination of the Service, per Section 11 of the Terms
Make available to the Customer all information necessary to demonstrate compliance with this DPA

A.4 Approved Sub-Processors

The Customer provides general authorization for ThaiBot to use the following Sub-Processors:

OpenRouter — AI routing (Zero Data Retention enabled)
Anthropic (Claude) — AI processing (United States)
Google (Gemini) — AI processing (United States)
Supabase — Database hosting (United States, SOC 2 Type 2)
Vercel — Application hosting (United States, SOC 2 Type 2)
Stripe — Payment processing (PCI DSS Level 1)

ThaiBot will notify the Customer of changes to Sub-Processors with at least 30 days' advance notice. If the Customer objects to a new Sub-Processor, the Customer may terminate the affected Service component within 30 days of notification.

A.5 Cross-Border Transfers

Personal Data is stored and processed on servers in the United States. The Customer authorizes these transfers by accepting these Terms. ThaiBot maintains Standard Contractual Clauses (SCCs) or equivalent safeguards with each Sub-Processor located outside Thailand where available.

A.6 Data Subject Rights

ThaiBot will assist the Customer with Data Subject requests (access, deletion, correction, portability) within 7 business days of receiving the request from the Customer. The Customer is responsible for responding to Data Subjects within the timeframes required by PDPA.

A.7 Security Measures

ThaiBot implements the following security measures:

Encryption in transit (TLS) and at rest (AES-256 via Supabase)
Row Level Security (RLS) on all database tables — data is isolated per business
Access controls with multi-factor authentication on administrative accounts
Rate limiting on all API endpoints
Input validation and prompt injection defenses
Regular security assessments

A.8 Breach Notification

ThaiBot will notify the Customer without undue delay, and within 48 hours where feasible, of discovering a Personal Data breach. The notification will include:

Nature of the breach
Categories and approximate number of Data Subjects affected
Categories and approximate volume of Personal Data involved
Likely consequences of the breach
Measures taken or proposed to address the breach

A.9 Term & Termination

This DPA is coterminous with the Terms of Service. Upon termination, ThaiBot will delete all Personal Data within 30 days and provide written certification of deletion upon request. The Customer may request data export within the 30-day window.

A.10 Liability

Each party is liable for its own obligations under this DPA. The PDPC may impose fines on both Data Controllers and Data Processors independently. The liability limitations in Section 14 of the Terms apply to this DPA.

A.11 Governing Law

This DPA is governed by the laws of the Kingdom of Thailand. Disputes are resolved per Section 17 of the Terms.