1. Who we are
veli(Q Lab ("veli(Q Lab", "we", "us") designs, builds and operates AI agents and software products for businesses, including veli(Q CRM. We operate across Thailand, Singapore and India.
This policy covers personal data we process when you visit our websites, chat with our AI agent on LINE, WhatsApp or Telegram, contact us, or do business with us. When we process data on behalf of a client inside an agent we build for them, we act as a data processor under that client's instructions and our agreement with them, and the client's own privacy notice applies.
2. Data we collect
Information you give us
- Contact details such as your name, work email, phone number, company and job title.
- Conversation content you send to our AI agent or our team, including descriptions of your business needs.
- Business information shared during scoping, proposals and projects.
- Recruitment data if you apply to work with us, such as your CV and portfolio.
Information collected automatically
- Usage data such as pages viewed, referring pages, approximate location (derived from IP), device and browser type.
- Messaging metadata provided by the chat platform, such as your display name and user ID on LINE, WhatsApp or Telegram.
We do not intentionally collect sensitive personal data (such as health, biometric or religious data) through our website or sales channels. Please don't send it to us unless it is necessary for a project and agreed in writing.
3. How we use your data
- To respond to enquiries, scope your use case and arrange calls with our team.
- To deliver, support and improve our services and products.
- To send service-related messages, and, with your consent where required, marketing updates you can opt out of at any time.
- To keep our services secure, prevent fraud and abuse, and comply with legal obligations.
- To understand how our website is used so we can improve it.
4. Legal bases
Depending on your location and the activity, we rely on one or more of these bases: your consent; steps needed to enter into or perform a contract with you; our legitimate interests in running and growing our business, balanced against your rights; and legal obligations. Where consent is required, for example for marketing under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we ask for it separately, and you can withdraw it at any time.
5. AI processing
Our AI agent, and the agents we build, use large language models, including Claude by Anthropic, provided through commercial APIs. When you chat with our agent:
- Your messages are processed to generate replies and to summarise your enquiry for our team.
- We use model providers under commercial terms that do not permit them to train their models on our API data by default.
- Conversations may be reviewed by our team to follow up with you and to improve answer quality.
- The agent will tell you it is an AI, and you can ask to speak with a person at any time.
We do not use AI to make decisions that produce legal or similarly significant effects about you without human involvement.
6. Sharing
We do not sell personal data. We share it only with:
- Service providers who help us operate, such as cloud hosting, AI model providers, messaging platforms, email and analytics, under contracts that require them to protect it.
- Messaging platforms (LINE, WhatsApp, Telegram) you choose to contact us through. Their own privacy policies apply to how they handle your data.
- Professional advisers and authorities where required by law or to protect our rights.
- A successor in the event of a merger, acquisition or sale of assets, subject to this policy.
7. International transfers
Our team and providers operate in several countries, so your data may be transferred outside your country, including to Thailand, Singapore, India, the United States and the European Union. When we transfer data, we use appropriate safeguards required by applicable law, such as contractual protections, and we only work with providers that maintain adequate data protection standards.
8. Retention
We keep personal data only as long as needed for the purposes above. As a guide: sales enquiries and chat conversations for up to 24 months after our last interaction; client records for the duration of the contract plus the period required for legal, tax and accounting purposes; and recruitment data for up to 12 months unless you agree to longer. We then delete or anonymise it.
9. Security
We protect personal data with technical and organisational measures including encryption in transit, access controls based on least privilege, logging and monitoring, and staff confidentiality obligations. Read more on our Security page. If a data breach is likely to put your rights at risk, we will notify you and the relevant authority as required by law.
10. Your rights
Depending on where you live, including under Thailand's PDPA, Singapore's PDPA, India's Digital Personal Data Protection Act 2023 and the EU/UK GDPR, you may have the right to:
- Access the personal data we hold about you and get a copy.
- Correct inaccurate or incomplete data.
- Delete your data, or restrict or object to its processing.
- Withdraw consent at any time, without affecting processing done before.
- Receive your data in a portable format, where applicable.
- Lodge a complaint with your data protection authority, such as Thailand's Personal Data Protection Committee (PDPC) or Singapore's Personal Data Protection Commission.
To exercise a right, email . We may need to verify your identity, and we aim to respond within 30 days.
11. Cookies and similar technologies
Our website uses essential browser storage to make it work, for example to remember that you've seen the intro animation. If we add analytics or marketing cookies, we will ask for your consent where the law requires it, and you can change your choice at any time.
12. Changes to this policy
We may update this policy as our services and the law change. We'll post the new version here with an updated effective date, and notify you of significant changes where appropriate.