Last Updated: April 25, 2026

Privacy Policy

Content Shifu Co., Ltd. ("we," "us," or "our") operates antbase, an AI-powered project management platform. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use antbase at app.antbase.co. We are committed to protecting your privacy and complying with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

1. Data We Collect

We collect the following categories of personal data:

Identity and contact details: Name, email address, and organization name provided during registration.
Technical information: IP addresses, browser type and version, device identifiers, and usage logs generated when you access the platform.
Project and task content: Task descriptions, comments, attachments, and other content you create or upload within antbase.
AI feature inputs: Prompts, queries, and content you submit to AI features, including the antbot AI assistant.
Payment information: Billing details processed securely through our payment provider. We do not store raw card numbers.

2. How We Use Your Data

We process your personal data on the following legal bases:

Contract performance: To provide, maintain, and improve the antbase service you have subscribed to.
Legitimate interests: To ensure the security and stability of the platform, prevent fraud, improve our algorithms, and send you service-related communications.
Consent: For marketing communications or specific AI functionalities where we have obtained your explicit consent.

3. Data Storage and Location

Your data is stored on servers located in Singapore, maintained by hosting providers that hold high-level security certifications (e.g., ISO 27001, SOC 2). We maintain compliance with Sections 28 and 29 of the PDPA regarding cross-border data transfers.

4. Third-Party AI Services

When you use AI features within antbase, we may process your inputs through third-party AI sub-processors such as OpenAI or Google Cloud AI. In such cases:

We use enterprise-grade API connections that prevent your data from being used to train public AI models.
Data shared with AI sub-processors is anonymized or pseudonymized wherever technically feasible.
AI features that use your own API key transmit data directly between your browser and the AI provider under your own agreement with that provider.

5. Data Sharing

We do not sell your personal data to third parties. We may share data with:

Service providers: Hosting, analytics, payment processing, and customer support providers who process data on our behalf under strict data processing agreements.
Legal requirements: Where required by applicable law, regulation, or court order.
Business transfers: In connection with a merger, acquisition, or sale of assets, where the acquirer agrees to be bound by this Privacy Policy.

6. Data Retention and Deletion

We retain your personal data for as long as your account is active. Upon account termination, your data will be deleted or anonymized within ninety (90) days, except where we are legally required to retain certain records for a longer period (e.g., financial records under Thai accounting law).

You may request deletion of your account and associated data at any time by contacting us at privacy@antbase.co.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of your data in certain circumstances.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact our Data Protection Officer at privacy@antbase.co.

8. Cookies and Tracking

antbase uses essential cookies required for the platform to function. We do not use advertising cookies or cross-site tracking. Our analytics are privacy-first and cookieless where possible.

9. Security

We implement industry-standard technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

10. Contact and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Content Shifu Co., Ltd.
Email: privacy@antbase.co