Privacy Policy
Effective date: 24 September 2026
Data controller: KOOKAI PTE. LTD. (UEN 202420979W), 60 Paya Lebar Road, #07-54, Paya Lebar Square, Singapore 409051
Contact: admin@kookai.cc
KOOKAI PTE. LTD. ("KOOKAI", "we", "us") builds and operates AI-powered messaging agents on WhatsApp and LINE, private AI platforms, and workflow automation for businesses. This Privacy Policy explains what personal data we collect when you interact with a service we provide or operate on behalf of a business customer, how we use and share it, how long we keep it, and the rights you have. We comply with the Singapore Personal Data Protection Act 2012 (PDPA) and, where we process data obtained through Meta platforms, with the Meta Platform Terms and Developer Policies and the WhatsApp Business Terms.
1. Who this policy applies to
- End users who message a WhatsApp or LINE account operated by KOOKAI or by a business that uses our services.
- Business customers and their staff who use our platforms and dashboards.
- Visitors to this website.
Where we process end-user data on behalf of a business customer, that business is the primary controller of the data and we act as its data intermediary (processor). This policy describes our own practices; the business's own privacy notice also applies.
2. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name or display name, WhatsApp or LINE user ID, mobile phone number, email address | Provided by you when you message us, or shared by the messaging platform |
| Message content | Text, images, documents and voice notes you send to a WhatsApp or LINE account we operate, and the replies we send | Provided by you through the messaging platform |
| Transaction and service data | Orders, bookings, appointment or service requests, payment status (we do not store card or bank details), delivery or pickup preferences | Provided by you or by the business you are dealing with |
| Technical data | Message timestamps, delivery status, language preference, device or platform identifiers supplied by the messaging platform | Messaging platform (Meta, LINE) |
| Website data | Server logs (IP address, user agent, requested page). This website does not use tracking cookies or analytics. | Your browser |
3. How we use personal data
- To receive, understand and answer your messages, including generating replies with AI models.
- To carry out the service you requested: taking orders or bookings, sending confirmations, status updates and reminders, and routing your request to the business's staff.
- To operate, secure, troubleshoot and improve our services, including monitoring for abuse and measuring service quality.
- To comply with legal obligations and to establish, exercise or defend legal claims.
We do not sell personal data, and we do not use message content to train AI models for other customers.
4. Who we share personal data with
| Recipient | Purpose |
|---|---|
| Meta Platforms, Inc. and its affiliates (WhatsApp Business Platform) | Transmitting messages to and from WhatsApp users, in accordance with Meta's terms. |
| LINE Corporation (LINE Messaging API) | Transmitting messages to and from LINE users, in accordance with LINE's terms. |
| AI model providers (for example Anthropic, OpenAI, Google) | Processing message text to generate replies. Only the content needed to answer a message is sent, under data processing terms that prohibit training on it. |
| Cloud hosting and infrastructure providers (for example Cloudflare, Supabase, Vultr) | Hosting our services and storing data, in Singapore or other regions with appropriate safeguards. |
| The business customer you are communicating with | Fulfilling your request (the business sees your conversation and order details). |
| Authorities and professional advisers | Where required by law or to protect our rights. |
Some recipients are located outside Singapore. When we transfer personal data overseas we ensure the recipient is bound by legally enforceable obligations to protect it to a standard comparable to the PDPA.
5. How long we keep personal data
- Conversation content: retained for up to 12 months after the last message in the conversation, then deleted or anonymised, unless a longer period is required for an active order, dispute or legal obligation.
- Order and transaction records: retained for 5 years to meet accounting and tax requirements.
- Server logs: retained for up to 90 days.
6. Data deletion requests
You can ask us to delete the personal data we hold about you at any time. This applies to data collected through WhatsApp, LINE, our website or any other service we operate.
How to request deletion
- Send an email to admin@kookai.cc with the subject line
Data Deletion Request. - Include the phone number or LINE display name you used to contact us and, if you know it, the name of the business you were dealing with. This is only used to locate your records.
- We will acknowledge your request within 3 business days and complete the deletion within 30 days. We will confirm by email when it is done.
Alternatively, you can send the message DELETE MY DATA to the WhatsApp or LINE account you interacted with, and we will process it the same way.
Deletion removes your conversation content, contact details and profile from our systems and from those of our processors. We may retain a minimal record of the deletion request itself, and transaction records that we are legally required to keep, for the periods stated above.
7. Your rights
Under the PDPA you may request access to the personal data we hold about you and information about how it has been used or disclosed in the past year, and request that we correct any error or omission. You may also withdraw consent to our continued collection, use or disclosure of your personal data, subject to legal or contractual restrictions. To exercise these rights, contact admin@kookai.cc. We will respond within 30 days.
8. Security
We protect personal data with encryption in transit, access controls, audit logging and least-privilege service credentials. Messaging traffic with Meta and LINE uses their platform security; our own systems are hosted with reputable cloud providers.
9. Children
Our services are intended for use by adults and by businesses. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it was last revised. Material changes will be announced through the services affected.
11. Contact and Data Protection Officer
Questions, requests or complaints about personal data can be sent to our Data Protection Officer:
KOOKAI PTE. LTD. (UEN 202420979W)
60 Paya Lebar Road, #07-54, Paya Lebar Square, Singapore 409051
Email: admin@kookai.cc