Privacy Policy
1. Overview
Gowajee Co., Ltd. ("Gowajee", "we", "us") operates as a data processor under the Thai Personal Data Protection Act (PDPA). This means your organization, as the data controller, retains ownership and responsibility for your customers' data. We handle that data strictly on your behalf and according to your instructions.
2. What Data We Process
Through your use of the Gowajee platform, we may process:
- Call recordings and transcripts
- Customer contact information used in voice campaigns
- Usage data and platform analytics
- Account and billing information
3. How We Use Your Data
We use your data solely to provide and improve our services to you. We do not use your data to train AI models. Your data is never shared with third parties for commercial purposes.
4. Data Storage & Security
Gowajee runs on Google Cloud Platform (GCP), certified under ISO 27001 and SOC 2 security standards. We have a Zero Data Retention (ZDR) agreement with OpenAI, meaning call data is never logged, stored, or used for training by any third-party AI provider.We implement role-based access controls, encryption in transit and at rest, and regular security reviews to protect your data.
5. Data Retention
Call recordings and related data are retained for the duration of your subscription. Upon termination, data is deleted or returned upon request within a reasonable timeframe.
6. Your Responsibilities
As the data controller, your organization is responsible for ensuring you have the legal basis to contact your customers — whether through consent or a valid contractual relationship — before using Gowajee to reach them.
7. Data Processing Agreement
A Data Processing Agreement (DPA) is included in all Gowajee service contracts, clearly defining both parties' obligations under PDPA.
8. Governing Law
This Privacy Policy is governed by the laws of the Kingdom of Thailand.
9. Contact
For privacy-related inquiries, contact us at: contact@gowajee.ai