Privacy Policy
Draft — we're finalising the legal copy. The summary below reflects how OckOck actually handles data; questions in the meantime go to hello@muaythaipai.com.
What we collect
Account info — your name, email, gym name, and location, used to set up and secure your account. Gym data you put in — services, schedules, trainers, students, packages, certificates, courses, payment records. Your customers' data — the messages they send your gym (LINE, WhatsApp, Instagram, Facebook, web chat, email), their bookings, and any details you record about them. Usage & technical data — log data, device/ browser info, and basic analytics so we can run and improve the service.
How we use it
To provide OckOck — bookings, certifications, messaging, reporting — and to power OckOck's AI features (answering your customers in your gym's voice, drafting FAQs, lessons, and replies). To secure the service, prevent abuse, provide support, and send you service-related email. We don't sell your data or your customers' data, and we don't use it to train third-party AI models.
AI processing
OckOck's assistant works by sending relevant gym data and customer messages to an AI model provider to generate replies, drafts, and suggestions. That processing happens to provide the feature you're using; the provider acts on our behalf and isn't permitted to use your content to train its models. You can review and approve AI-drafted messages before they're sent.
Who we share it with
Service providers who help us run OckOck — hosting/infrastructure, our database provider, our AI model provider, and Stripe for payments — each under terms that limit them to processing data for us. The messaging platforms you connect (LINE, Meta, etc.) receive and send messages through their own APIs under their own terms. We may disclose data if required by law. If OckOck is ever acquired, data may transfer as part of that, subject to this policy.
Where data lives & how long we keep it
Data is hosted with our infrastructure provider; some processing (e.g. AI) may occur in other regions. We keep your data while your account is active and for a reasonable period afterwards, then delete or anonymise it — except where we need to retain records for legal, tax, or security reasons.
Your choices
You can view and edit most data from your dashboard. To access, correct, export, or delete data — yours or, where you're the controller, your customers' — email us and we'll help. For your customers' personal data, you're generally the controller and we're the processor; for your own account data, we're the controller.
Changes & contact
We'll update this policy as the product evolves and give reasonable notice of material changes. Questions, requests, or concerns: hello@muaythaipai.com.