Gita Privacy Notice

1. Who we are

Gita is an AI concierge service operated by Appointment Anywhere Co., Ltd. ("we", "us"), the company that also runs the AAppoint booking platform. We are the data controller for the personal data Gita collects. Gita helps you find restaurants, plan a trip and prepare a booking; the booking itself is made with the restaurant through AAppoint.

Address: No. 25 Alma Link Building, 17th Floor, Room 222, Soi Chidlom, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330, Thailand.

For any question or request about your personal data, email info@aappoint.me.

2. What Gita collects

What you give Gita, and a little about how you use the site:

• Chat messages: what you type to Gita, and Gita's replies.
• Uploads: travel documents and images (PDFs and photos) you attach to a travel plan, and the text you write with them.
• Location: your approximate location if you tap "Use my location" and allow it, or a pin you drop on the map, and the places you search for on the map. They are used to find venues nearby.
• Booking contact details: first name, last name, phone number and, if you give it, email — with the venue, service, day, time and number of guests.
• A session cookie (gita_session) that links your chat and your bookings to this browser. It lasts up to one year, or until you clear your cookies.
• On your device: this browser remembers your language, a booking you have not finished and the contact details you last entered, so you don't have to type them again. Clearing this site's data removes them.
• Technical data: like any website, our servers receive your IP address and log requests. Gita's service logs also record your messages (in full or in part) and Gita's replies. Logs are used for security, to fix problems and to track the cost of running Gita.
• This site uses no advertising or analytics trackers.

3. Why we use your data

We use your data only for these purposes, on these legal bases (PDPA / GDPR):

• Chat messages and uploads: to answer you and write the travel plans you ask for. Needed to give you the service you asked for (contract, s.24(3) / Art 6(1)(b)).
• Booking contact and booking details: to make and manage the booking you confirm (contract, s.24(3) / Art 6(1)(b)).
• Location: to find venues near you. Your device location is used only if you allow it in your browser (consent, s.19 / Art 6(1)(a)); you can turn it off in your browser settings at any time. A pin you drop or a place you search for is part of the service you asked for (contract).
• Session cookie and logs: to keep the service secure and working, fix problems and track its running costs (our legitimate interests, s.24(5) / Art 6(1)(f)).

If you do not give the contact details a booking needs, we cannot make the booking. Where we rely on legitimate interests, you can object (see section 8).

4. How Gita uses AI

Gita is an AI, not a person. Your messages and uploaded files are processed by an AI model, Google Gemini, to understand your request and to write replies and travel plans.

Replies are generated automatically and can be wrong. Nothing is booked until you check the details and confirm the booking yourself.

Please don't share ID or passport numbers, card details or health information with Gita, in chat or in uploads. Gita doesn't need them, so cover them before you upload a travel document.

5. Bookings: AAppoint and the restaurant

When you confirm a booking, your contact details and the booking details are sent to AAppoint and to the restaurant, so the reservation can be made and managed and, where the restaurant asks for one, a deposit can be paid.

From then on, your booking is also governed by AAppoint's privacy notice.

Deposits are paid on the payment provider's own page or app. This site does not collect card numbers.

6. Other services Gita uses

• Google Gemini (Google): reads your messages and uploads, and writes Gita's replies. Google may keep them for a limited time under its own terms, for example to detect misuse.
• Google Cloud: hosts this website and Gita's service, in Singapore.
• AAppoint and the restaurant: receive your booking, as described above.
• OpenStreetMap: map data © OpenStreetMap contributors. Map images are loaded from OpenStreetMap's servers, and the place names you type into the map search are sent to OpenStreetMap's search service (Nominatim). Both receive your IP address.
• Payment providers: receive what they need to take a deposit you choose to pay.

Some of these providers process data outside Thailand, for example in Singapore, the United States or the European Union. The transfer is needed to give you the service you asked for.

7. How long we keep it

• Chat history is kept so Gita can continue the conversation: only the most recent messages, for about 24 hours after your last message. You can delete it at any time with "Delete this chat" (🗑) in the chat window, or by emailing info@aappoint.me. Deleting removes the conversation Gita uses to carry on the chat, but not copies already written to our service logs, or kept by Google (see section 6).
• Gita's service keeps a record of the bookings made in this browser, with the contact details given for them, so "My bookings" can show them; ask info@aappoint.me to delete it. The bookings themselves are kept by AAppoint and the restaurant, as described in AAppoint's privacy notice.
• The session cookie lasts up to one year. What this browser remembers stays until you clear this site's data.
• Server and service logs, including the messages and replies they record, are deleted automatically after a limited period.

8. Your rights

Under the PDPA and, where it applies, the GDPR, you have the right to:

• See your data and get a copy, or have it sent to another organisation
• Have it corrected
• Have it deleted
• Restrict how it is used, or object to its use
• Withdraw any consent you have given, at any time

Email info@aappoint.me with the subject "Personal data request", and tell us the phone number or email you booked with, a booking number, or roughly when you chatted, so we can find your data. We reply within 30 days, free of charge, and may ask you to confirm who you are first.

You can also complain to Thailand's Office of the Personal Data Protection Committee (PDPC) at www.pdpc.or.th or, in the EU or EEA, to the data protection authority in your country.

9. Changes to this notice

When Gita changes, we update this page and show the new date at the top.