Privacy policy

What this policy covers

Effective date: 20 October 2026

Tellfox is provided by Foxsoft Solutions Co., Ltd., company registration number 0105564127624, head office at 723 Charoen Nakhon Road, Khlong Ton Sai, Khlong San, Bangkok 10600, Thailand ("we"). This policy covers the website tellfox.app, the business account pages at app.tellfox.app, every business's booking pages on tellfox.app, and the Tellfox LINE Official Account.

Our role

Controller: for the data of business owners and their teams, people trying Tellfox before they sign up, and visitors to our website, Tellfox is the data controller.

Processor: for the customer data each business keeps in Tellfox (bookings, customer records, notes, stamp cards), that business is the data controller and Tellfox processes the data on its behalf under the data processing terms. If you are a customer of a business, please contact that business first about your data; we help the business act on your request.

Data about business owners and their teams

Account: you sign in with a foxworks account, the shared account service Foxsoft Solutions uses for all its products. We receive your foxworks account ID, name, email address, and your LINE user ID if you sign in with LINE. We never receive your LINE password or LINE chats.

Team: your role in the business (owner, manager, staff), your working hours and the services you provide.

Business details: name, address, contact details, opening hours, services, prices, photos, logo and settings, and an activity log (who did what, and when).

What you send the AI assistant in LINE: messages, photos and voice notes. Voice notes are turned into text and the audio is not kept. Drafts the AI prepares are deleted within a week.

Billing: your plan, payment history and Stripe customer ID. Card details are held by Stripe, not by us.

Usage and security: AI actions and LINE messages used per business, IP addresses to apply limits and prevent abuse, and technical logs that hold IDs and status only, never names or message text.

Trying Tellfox before signing up: when you send a photo of your price list, type your services or say them, to the Tellfox LINE account or in the "Try it now" box on the website, to see a booking page, we keep what was read and the photo. They are tied to your LINE user ID, or, for a try made on the website, to a short code until you send that code in LINE. A voice note is turned into text and the audio file is not kept. The photo is stored privately for at most 7 days, or until the try is turned into a business (then it is deleted); a try that isn't turned into a business is deleted with its photo after 7 days. On the website we use Cloudflare Turnstile and count tries per day per IP address to stop automated use: we keep only a keyed hash of the address, never the address itself, and delete it within about a day.

Data about customers who book through Tellfox

Each business keeps its own customers' data in Tellfox:

• Name, phone number, email address, language and birthday (if given)
• LINE user ID and LINE display name when you sign in with LINE (verified with LINE directly)
• Bookings, classes, packages and anything you write to the business when booking
• Stamp cards, points, coupons and rewards
• Tags and notes the business writes about you, such as preferences or allergies
• Your consent to offers per channel, with when it was given or withdrawn
• Messages sent to you and whether they were delivered

How customers sign in: in LINE, we receive your LINE user ID and name after checking them with LINE. In a browser, you sign in with your email and a 6-digit code, or with LINE; the email check uses Cloudflare Turnstile to stop automated use. The manage link in each confirmation is a long random link for that booking only.

If you book with two businesses, each keeps its own record of you, and neither sees what the other holds. "My bookings" and "My cards" bring your bookings and cards from every business together for you alone, using your verified LINE or email.

Why we use data, and on what basis

• To provide the service (contract): create and run accounts, show booking pages, take bookings, send confirmations, reminders, changes and cancellations, run stamp cards, and bill for plans
• Legitimate interests: keep Tellfox secure, prevent spam and abuse, hold services that may be prohibited, fix problems, and improve Tellfox using statistics and de-identified data
• Consent: send offers and promotions to customers, and keep sensitive data where needed
• Legal obligations: keep billing records and tax invoices, and answer lawful requests from authorities

Booking messages (confirmations, reminders, changes, cancellations) are part of the service you asked for, so they need no separate consent. Offers and promotions are sent only with your consent: see "Messages and offers for customers" below.

We don't sell personal data, and we never use one business's customer data for another business or for our own marketing.

The AI assistant

Messages, photos and voice notes that owners and their teams send the AI assistant go through Cloudflare AI Gateway to AI models that read the request and prepare a draft. The main models run on Cloudflare Workers AI; when needed we use Claude from Anthropic (United States). If a message mentions a customer, for example "Som is allergic to lavender", that text is sent too. We send only what the request needs.

The AI never decides on its own or messages customers by itself: everything takes effect only when a person confirms it.

Messages to the Tellfox bot

We save what people send the Tellfox bot and what the bot answers, to run and improve Tellfox. This covers only the Tellfox bot (the shared LINE account, email replies to reminders, and a business's own LINE account once it is connected to Tellfox), never a business's own chats in LINE, which Tellfox cannot read.

• Owners' and team members' messages to the bot are seen only by Tellfox staff, to improve the product. They are never shown to other businesses or other team members.
• Customers' messages to the bot are shown only to the business the customer talked to, on that customer's page. Tellfox staff see them as counts and labels, and read the text only to help with support or check failures.
• How long: the full text is kept for 90 days, then deleted. Labels (such as "move booking" and the result) are kept longer without anything that identifies the person, and are used in de-identified form to improve Tellfox.
• Clinics: what a patient writes can be health data, so for clinic businesses the text is not saved, only the labels.
• When a business deletes or anonymises a customer, that customer's saved messages are deleted too.

Who we share data with

We use these providers and give each only what its job needs:

• LINE (LY Corporation and its affiliates): sign-in with LINE and messages through the Tellfox LINE Official Account. Messages in LINE are also covered by LINE's own privacy policy.
• Stripe: payments from businesses for their plans
• Cloudflare, Inc.: the platform Tellfox runs on: database, file storage, email (Cloudflare Email Sending), bot checks (Turnstile) and AI (Workers AI and AI Gateway)
• Anthropic, PBC: the Claude AI model for the assistant when needed
• Google: the account pages load fonts from Google Fonts, so your browser sends your IP address to Google. We send Google nothing else.
• foxworks (Foxsoft Solutions): the account service used to sign in. It receives account details only, never bookings or customers.

We may disclose data when the law requires it or an authority lawfully asks. If Tellfox is transferred to another company, we tell business owners in advance where their data will go.

Where data is stored, and transfers abroad

Tellfox runs on Cloudflare. The main database (Cloudflare D1) is located in the Asia-Pacific region. Private files, such as photos sent to the AI, are kept in Cloudflare R2 with no public link. Cloudflare's network may handle requests in data centres near the user in different countries.

So data may be sent or transferred abroad: to countries in the Asia-Pacific region and others where Cloudflare processes it, the United States (Cloudflare, Anthropic), Japan and other countries where LINE processes it, and the countries where Stripe processes it. We transfer data abroad under sections 28 and 29 of the PDPA, relying on each provider's data protection agreement.

How long we keep data

• Owner and team accounts: while you use Tellfox, and 30 days after the account is closed
• Business data and its customers' data: while the business uses Tellfox, deleted within 30 days after the business is closed
• Customers who haven't visited for a long time: not deleted automatically; deleted when the business asks, or when the business is closed
• Full text of messages to the bot: 90 days; de-identified labels are kept longer
• AI assistant drafts: up to a week; voice audio is not kept
• Tries before sign-up: 7 days with the photo, or until sign-up
• LINE event IDs: 7 days, with no message text
• Billing records and tax invoices: as long as the law requires (5 years)
• Consent records: as long as needed to show consent was given or withdrawn

Security

Each business's data is kept apart, and every request is checked against the person's role. Sign-in uses signed cookies, private files open only through short-lived links, data is encrypted in transit, and technical logs hold no names or message text.

If a personal data breach puts people at risk, we notify the Personal Data Protection Committee office within 72 hours of becoming aware of it, and tell the affected businesses without delay.

Your rights

Under the PDPA you can ask to access and get a copy of your data, receive it or have it sent in a machine-readable format, object to its use, have it deleted or anonymised, restrict its use, and have it corrected. You can withdraw consent at any time; this doesn't affect what was done before.

Business owners and team members: send requests to hello@tellfox.app.

Customers of a business: ask the business you booked with for a copy, a correction or deletion. The business can download your data and delete or anonymise it in Tellfox (except while a confirmed booking is still coming up). You can also contact us at hello@tellfox.app, and we pass your request on and help the business act on it.

We answer within 30 days and may ask you to confirm who you are first. If you think we haven't followed the PDPA, you can complain to the Office of the Personal Data Protection Committee (PDPC).

Minors, changes and contact

Business accounts are for adults.

We may update this policy and will tell you about important changes by email or in your account before they apply. The effective date above shows the current version.

Questions about personal data: hello@tellfox.app, or Foxsoft Solutions Co., Ltd., 723 Charoen Nakhon Road, Khlong Ton Sai, Khlong San, Bangkok 10600, Thailand.

Privacy notice for customers who book through Tellfox

This part is a summary for customers who book on a booking page on tellfox.app or in LINE.

When you book, the business you book with looks after your data (it is the data controller), and Tellfox stores and processes it on that business's behalf. The business uses your name, phone, email or LINE to take your booking, send confirmations and reminders, run your stamp card, and note what helps it serve you better. Your data is kept per business; other businesses can't see it.

Data is stored on Cloudflare (database in the Asia-Pacific region), and LINE messages go through LINE. You can ask the business, or us at hello@tellfox.app, for a copy, a correction or deletion.

Messages and offers for customers

Booking messages: confirmations, reminders, changes and cancellations are sent because you booked, and need no separate consent. They go to the channel you booked with (LINE or email), and may go by email when LINE can't be used.

Offers and promotions: a business can send you offers only if you tick "Send me offers" when you book. Consent is per channel (LINE or email) and only for the business you booked with. The box is never ticked for you.

Stop offers: every offer has a "Stop offers" link. Once you confirm on that page, the business can no longer send you offers on that channel. Booking messages are not affected.

Messages to the Tellfox bot: the first time you write to the Tellfox bot in LINE, it tells you that messages are saved and seen by the business you are talking to. See "Messages to the Tellfox bot" above.