Privacy Policy

Thai Town · operated by DekAus Community (ABN 35 531 148 793), Sydney, Australia · Last updated 19 September 2026

This policy explains what personal information we collect, why, and how we handle it when you use thaitown.app, a shop page or ordering page we host for a business, or one of our AI assistants that answer a business's phone line or chat channels (Facebook Messenger, Instagram, LINE, WhatsApp, SMS). We follow the Australian Privacy Act 1988 and the Australian Privacy Principles.

1. Who we are and who the "business" is

Thai Town builds tools for small businesses: websites, online ordering, loyalty, and AI receptionists ("Call Care"). When you contact a business through a tool we operate, that business decides what to do with your order or enquiry. We process the information on their behalf and under this policy.

2. What we collect

3. Why we use it

• To answer calls and messages on behalf of the business, take orders and bookings, and hand the conversation to a person when needed.
• To show the business what happened (call log, summaries, orders) so they can serve you.
• To send you transactional messages about your order or booking (for example "your order is ready" or a payment link). We do not send marketing messages to callers or chat users.
• To run, secure, bill and improve our services, including checking the quality of AI conversations.
• To meet legal obligations.

4. AI processing

Our assistants use large language models and speech services from OpenAI and Anthropic to understand and reply. The text or audio of your conversation is sent to those providers for processing under their business terms, which do not permit training on our data. Voice calls are carried by Twilio. We do not use your conversations to build advertising profiles.

5. Who we share it with

• The business you contacted (they see your order, booking, message and call summary).
• Service providers who help us run the platform: Google Cloud / Firebase (hosting and database, Australia region), Twilio (calls and SMS), OpenAI and Anthropic (AI), Stripe (payments), Meta and LINE (chat delivery), Resend (email notifications).
• Authorities when required by law.

We do not sell personal information.

6. Overseas disclosure

Our database and hosting are in Australia. Some providers above (Twilio, OpenAI, Anthropic, Stripe, Meta, LINE) process data in the United States, Singapore or Japan. We only use providers with contractual privacy and security commitments.

7. How long we keep it

• Call transcripts, summaries and chat messages: up to 12 months, then deleted or de-identified, unless the business needs them longer for a dispute or by law.
• Call audio (where recording is on): 90 days.
• Orders, bookings and invoices: 7 years for tax and accounting.
• Business accounts: for as long as the account is active, then deleted within 90 days of closure on request.

8. Security

Data is encrypted in transit and at rest, access is limited to staff who need it, and access tokens for connected channels are stored server-side only and never shown in the browser.

9. Your rights and how to delete your data

You can ask us to access, correct or delete personal information we hold about you. Instructions for deletion requests, including for Facebook, Instagram, LINE and WhatsApp users, are on our Data Deletion page. We respond within 30 days. If you are unhappy with our response you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Contact

11. Changes

We will post any changes on this page and update the date at the top.