← welaa

Privacy Policy

Last updated: April 2026

Overview

Welaa is a platform that helps art and tattoo studios manage client conversations, bookings, commissions, and payments. When you interact with a studio through Welaa — by filling in a booking form or messaging the studio — your information is handled according to this policy.

The studio you are contacting is the data controller for your personal information. Welaa acts as a data processor on the studio's behalf and does not sell or share your data with third parties for marketing purposes.

Information We Collect

Depending on how you interact with a studio on this platform, we may collect:

  • Your name, phone number, and email address
  • Messaging channel identifiers (LINE ID, Facebook Messenger ID, WhatsApp number)
  • Shipping or delivery address (for commission artwork)
  • Conversation history with the studio
  • Design preferences, artwork references, and service details you share
  • Payment information — processed directly by Stripe; Welaa does not store card details
  • Preferred appointment dates or commission deadlines

How We Use Your Information

Your information is used to:

  • Respond to your service inquiry and manage your booking or commission
  • Process payments and issue confirmations
  • Send automated appointment reminders, follow-ups, and status updates on behalf of the studio
  • Provide AI-powered customer service on behalf of the studio (see AI Disclosure below)
  • Allow the studio to review and manage your inquiry through the Welaa dashboard

AI Disclosure

Messages sent to you through LINE, Facebook Messenger, or WhatsApp may be generated automatically by an AI assistant acting on the studio's behalf. The studio reviews and can approve, edit, or override any AI-generated reply before it is sent.

AI-generated content is intended to help the studio respond quickly and consistently. It does not replace the studio's judgment on pricing, safety, or service suitability.

Sub-processors

To deliver the platform, Welaa shares information with the following sub-processors. Each has its own privacy policy; hosting regions are indicative and may be updated by the provider.

  • Anthropic (United States) — AI language model. Receives your message text and conversation context to generate automated replies. Does not receive payment or identity data.
  • Supabase (Singapore, AP-SE) — database and file storage. Stores conversations, bookings, commissions, uploaded reference and commission files.
  • Stripe (United States / global) — payment processing and studio payouts. Receives billing and card information directly from you; Welaa does not store card details.
  • Google (United States) — Google Calendar synchronisation of appointments and deadlines (optional, enabled per studio). Receives only the event title, description, date, and the studio's calendar ID.
  • LINE Corporation (Japan) and Meta Platforms (United States) — Messenger and WhatsApp Business message delivery. Your messages on those channels are also subject to the platform's own terms and privacy policies.
  • Resend (United States) — transactional email delivery to studio staff for invites and notifications.

Welaa does not add sub-processors without updating this list. Your messages sent through LINE, Messenger, or WhatsApp are additionally subject to those platforms' own terms and privacy policies.

Cross-Border Data Transfer

Some of our service providers operate outside Thailand. Your data may be transferred to and processed in the United States or other countries where Stripe, Anthropic, Supabase, and Google maintain servers. These transfers are protected by each provider's data protection agreements and security measures. By using this service, you acknowledge and consent to these transfers in accordance with Section 28 of the PDPA.

Automated Decision-Making

The platform uses AI to assist studios with the following automated processes:

  • Automated replies — AI generates responses to client messages on behalf of the studio. These are reviewed by a confidence system and may be held for human review.
  • Pricing suggestions — AI may analyse uploaded images and client descriptions to suggest a price range. Final pricing is always confirmed by the studio.
  • Lead qualification — AI classifies incoming inquiries to help studios prioritise. This does not affect your ability to book or inquire.

No fully automated decision has a legal or significant effect on you without studio confirmation. You may contact the studio to request human review of any automated decision.

Data Retention

Your information is retained for as long as the studio's account is active and the business relationship with you is ongoing. If you have not had any interaction with a studio for 24 months, the studio may anonymise your lead record.

You can request deletion of your data at any time by contacting the studio directly or by emailing us at the address below.

Your Rights (PDPA)

Under the Personal Data Protection Act (Thailand) and applicable law, you have the right to:

  • Access — request a copy of the information held about you
  • Correct — ask us to fix inaccurate or incomplete data
  • Delete — request erasure of your personal data
  • Restrict — ask us to limit how your data is used
  • Portability — receive your data in a portable format
  • Withdraw consent — opt out of data processing at any time

To exercise any of these rights, contact the studio directly or email us at privacy@welaa.app. We will respond within 30 days.

Cookies

We use session cookies to keep studio staff authenticated while they use the Welaa dashboard. We do not use third-party tracking cookies or advertising cookies. Booking pages accessible to clients do not set any cookies.

Data Security

All data is transmitted over HTTPS and stored in encrypted databases hosted by Supabase. Access to the dashboard requires authentication. We apply access controls so that studio staff can only view data belonging to their own workspace.

Age Restriction

This platform is not intended for persons under 18 years of age. Tattoo and piercing services in particular require age confirmation at the time of booking. Studios are responsible for verifying client age in accordance with local law.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of the platform after changes are published constitutes your acceptance of the updated policy.

Contact

For privacy-related questions or requests, email privacy@welaa.app.