1. Data Controller
AskLab (operated by AI Search Co., Ltd.) is the controller of your personal data under the Personal Data Protection Act B.E. 2562 (PDPA). You can reach us at support@aisearch.co.th.
2. Personal Data We Collect
We collect the following personal data when you use our website and services:
- Data you provide directly: name, email, company name, when signing up for Tracker Workspace.
- Usage data: queries analyzed, brands tracked, project settings.
- Technical data: IP address, browser type, operating system, pages visited, session duration.
- Cookie data: as detailed in section 6.
3. Purposes of Processing
- To provide AI Search analysis and Brand Visibility Tracking services.
- To manage user accounts and verify identity.
- To improve and develop our services.
- To analyze site usage and system performance.
- To communicate about the service, updates, and support.
- To comply with applicable laws and regulations.
4. Legal Basis for Processing
- Consent: for non-essential cookies and marketing.
- Contract: for delivering Tracker Workspace services.
- Legitimate Interest: for service improvement and security.
- Legal Obligation: for compliance with PDPA.
5. Disclosure of Personal Data
We may disclose your data to:
- Infrastructure providers: Supabase (database), Vercel (hosting).
- AI providers: OpenAI, Google, Anthropic, Perplexity (for analysis).
- Analytics providers: Google Analytics (if enabled).
- Government agencies: when required by law.
AI Processing
Our service integrates with several AI models to analyze data:
- Queries you submit are sent to ChatGPT (OpenAI), Gemini (Google), Claude (Anthropic), and Perplexity to analyze responses.
- We do NOT use your personal data to train any AI model.
- Analysis results are stored in our database so you can access them later.
- Data sent to AI models is processed under each provider’s privacy policy.
6. Cookie Policy
Our website uses cookies and similar technologies for the following purposes:
| Cookie Type | Purpose | Required |
|---|---|---|
| Essential Cookies | Authentication, sessions, language preference, CSRF security. | Yes |
| Functional Cookies | Remember your preferences, e.g. theme, brand, selected filters. | No |
| Analytics Cookies | Analyze site usage, visitor count, popular pages (Google Analytics). | No |
| Third-Party Cookies | Supabase Auth (authentication), Vercel Analytics (performance). | Partial |
Essential Cookies
Required for the website to function. Cannot be disabled. Without these, you cannot log in or use the workspace.
Functional Cookies
Functional cookies remember your preferences so the app feels consistent across sessions. You can disable these at the cost of repeating choices.
Analytics Cookies
If enabled, Google Analytics or Vercel Analytics collect anonymized usage data so we can improve the product. No personally identifying information is stored in these cookies.
Third-Party Cookies
Third-party services we use may set additional cookies governed by their own privacy policies.
Local Storage Usage
In addition to cookies, we use browser Local Storage to store certain data on your device, including language preference, UI state, and cached query results for performance. Local Storage is not sent to our servers automatically.
7. Managing Cookies
You can manage cookies through your browser settings, including blocking or deleting them. However, blocking essential cookies may affect how the website works.
- Chrome: Settings > Privacy and security > Cookies
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
8. Data Subject Rights (under PDPA)
You have the following rights under the Personal Data Protection Act B.E. 2562:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your personal data.
- Right to restrict processing: request that we pause processing of your data.
- Right to object: object to processing of your personal data.
- Right to data portability: receive your data in a machine-readable format.
- Right to withdraw consent: withdraw previously given consent at any time.
- Right to lodge a complaint: complain to the Personal Data Protection Committee.
9. Data Retention
- Account data: for as long as you hold an account with us, and 90 days after deletion.
- Analysis data: 12 months from the date of analysis.
- Tracker data: for as long as the Workspace remains active.
- Cookies: per the lifetime of each cookie type (session or up to 1 year).
- Usage logs: 30 days.
10. Security Measures
- SSL/TLS encryption for data in transit.
- Database encryption with AES-256 via Supabase.
- Authentication with Row Level Security (RLS).
- Access control following the Least Privilege principle.
11. International Data Transfers
Your data may be transferred to servers outside Thailand (e.g. Supabase hosted on AWS ap-southeast-2). We ensure recipients apply data protection measures sufficient under the PDPA.
Children’s Privacy
Our service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact us and we will delete it.
12. Contact
If you have questions about this policy or wish to exercise your rights under the PDPA, please contact:
AI Search Co., Ltd.
Email: support@aisearch.co.th
Website: https://asklab.ai
13. Policy Updates
We may update this policy from time to time. Changes take effect when published on this website. We recommend reviewing this policy periodically. This policy is effective from 5 April 2026.