Privacy policy · Akon AI
Last updated 26 October 2026
Akon AI keeps the books of Thai businesses: receipts, expenses, income, bank statements and the monthly tax forms. It is run by iReadCustomer Co., Ltd. (บริษัท ไอรีดคัสตอมเมอร์ จำกัด), "we" below. A business signs up, and its members use Akon AI on the web, in LINE or Discord, or through an AI agent (Claude Code, Codex, ChatGPT or another MCP client) they connect. This policy says what we collect, why, who processes it and what you can ask of us, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
For the books themselves, the business is the data controller and we process them on its behalf. For your own account, we are the controller.
What we collect
- Your account: from Sign in with Google, your name, email address and profile picture (
openid email profile); from Sign in with LINE, if you link it, your LINE user ID, display name, picture and email (openid profile email). We use them to sign you in and to know which businesses you belong to, never for marketing. - The business: its name, tax ID, address and settings, its members and their roles.
- The books: what members upload or send: receipts, invoices, payment slips, bank statements, tax documents and signatures, and the records made from them. These name the people and companies the business pays or is paid by: names, tax IDs, addresses, bank account numbers and amounts.
- Chat: in a LINE group or Discord channel a business connects, the files and messages sent there to Akon AI, with the sender's LINE or Discord user ID and display name. In conversations with the Assistant, your questions and its answers.
- Agents: when you connect an AI agent, the sign-in you approve (an agent token, kept only as a hash), the agent's name, and what it asks and proposes.
- Billing: the business's package, its usage (how many documents were read) and its Stripe customer and subscription IDs. Card details go to Stripe and never reach us.
- Technical: server logs with the time, the action and who did it, used to run, secure and fix the service.
Connected services
- Gmail, read-only (
gmail.readonly): only for a mailbox a member connects on the Connections page. Akon AI asks Gmail only for messages from a fixed list of vendor billing senders (for example DigitalOcean, Google Cloud, OpenAI, Anthropic) and keeps the ones that are receipts, reading the vendor, amount, date and invoice number with fixed rules. It never opens any other message and never sends, changes or deletes email. - Google Drive (
drive.file): only files Akon AI itself creates, when the business connects a Drive folder to receive copies of its monthly bundles. - FlowAccount: when the business connects its own FlowAccount, records it approves are sent there, and its sales documents are read back.
How we use it
To keep the business's books: read documents into records, match them to payments, work out VAT and withholding, prepare the monthly forms and the accountant's pack, and answer members' questions. Every change an AI proposes waits for a member to approve it. We also use your account and billing data to run your package, and logs to keep the service secure. We never sell personal data, never share it with advertisers or data brokers, and never use it for advertising or credit decisions.
AI processing
Documents members send are read by an AI vision model to pre-fill their records, and the Assistant (in the app, LINE, Discord or a connected agent) uses an AI model to answer and propose Plans. When a member asks the Assistant about a document, it may read that document's text, including a receipt that came from Gmail. We reach these models through OpenRouter, set to use only providers that neither store nor train on what they are sent; today they are Google (Gemini), OpenAI, DeepSeek, Qwen (Alibaba) and TypeSafe. No business data and no Google user data is used to train AI models.
Who processes it for us
Vercel and DigitalOcean host the app, its database and its background worker; Google, LINE and Discord carry sign-in and chat; Stripe handles payments; OpenRouter routes the AI requests above. Each sees only what it needs for its part. Some of them process data outside Thailand, under their own safeguards for international transfers. Data is reached only over encrypted connections, and a connected mailbox's Google token is encrypted with AES-256-GCM.
Who sees it
A business's books are visible only to its signed-in members, by role, and to agents they connect, with the rights each sign-in was given. Our staff look at a business's data only to support it when asked, or when the law requires.
How long we keep it
- The books, for as long as the business uses Akon AI, and accounting and tax evidence for at least five years, as Thai accounting and tax law require.
- Assistant conversations are deleted 90 days after their last message.
- Agent sign-ins until you revoke them in Settings › AI › Agent tokens.
- Logs only as long as needed to run and secure the service.
Google API Services User Data Policy
Akon AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your rights and choices
Under the PDPA you may ask to see, correct, receive a copy of, or delete your personal data, to restrict or object to its use, and to withdraw consent, by writing to dev@ireadcustomer.com. For data in a business's books, we will work with that business, which decides about its own records; evidence the law requires may have to be kept for its period. You can revoke a Google connection at myaccount.google.com/permissions, and an agent's access in Settings › AI › Agent tokens. You may also complain to Thailand's Personal Data Protection Committee.
Changes and contact
We will post changes here with a new date. Questions: dev@ireadcustomer.com. iReadCustomer Co., Ltd. (บริษัท ไอรีดคัสตอมเมอร์ จำกัด), ireadcustomer.com. See also the terms of service.