Cookies Policy

How the Lawdee Legal A.I. Platform uses cookies and similar technologies on lawdee.ai, the categories we set, your choices, and how to manage your consent under the PDPA.

1. What Are Cookies?

A cookie is a small text file that a website places on your device to remember preferences, keep you signed in, or measure how the site is used. We also use related technologies (local storage, session storage, pixels, and LINE LIFF storage) and treat them collectively as “cookies” in this Policy.

2. Legal Basis Under PDPA

Under the PDPA, the use of cookies that involve the collection of personal data is generally treated as the processing of personal data and requires either (a) consent from the data subject, or (b) another lawful basis such as contractual necessity or legitimate interest, with appropriate safeguards.

• Strictly Necessary cookies: set without consent under section 24(3) PDPA (necessary for the performance of the contract / to provide the requested service).
• Functional, Analytics, Advertising cookies: set only after you give explicit, opt-in consent under section 19 PDPA.
• Consent is freely given, specific, informed, unambiguous, and may be withdrawn at any time without consequence to the strictly-necessary parts of the Service.

Reminder. When you first visit lawdee.ai you will see a cookie banner letting you Accept All, Reject All non-essential, or open Preferences to choose category by category. The banner does not pre-tick non-essential categories.

3. Cookie Categories We Use

3.1 Strictly Necessary (always on)

Required for the platform to function: authentication, session, security tokens, LINE login state, and remembering your cookie choices. Without these, the Service cannot operate. PDPA basis: contractual necessity.

3.2 Functional (consent required)

Remember preferences such as language (Thai / English), theme, and recently viewed matters. PDPA basis: consent.

3.3 Analytics & Performance (consent required)

Help us understand how the Service is used so we can improve it. We use first-party, self-hosted, IP-anonymised analytics; analytics data never includes the content of your legal questions or matters. PDPA basis: consent.

3.4 Marketing & Advertising (consent required)

Used on our marketing site only (never inside the authenticated app or the LINE OA) to measure campaigns and show relevant ads on partner platforms. PDPA basis: consent.

4. Cookies We Use

A complete, machine-readable list is available in-app under Settings > Privacy > Cookie inventory and is updated as our subprocessors change.

5. Third-Party Cookies

Where third-party cookies are set, those providers act as our subprocessors and are bound by data-processing agreements. We do not authorise them to use the data for their own purposes. The current list of third-party providers is shown above and at lawdee.ai/subprocessors.

6. Cookie Duration

• Session cookies are deleted automatically when you close your browser.
• Persistent cookies remain on your device for the duration shown above, or until you delete them.

7. Your Consent

Consent for non-essential cookies is collected via our cookie banner when you first visit the site, and re-confirmed at least every 12 months or when categories change materially. Consent is recorded with the date, IP address (truncated), browser, and the categories you chose, so we can demonstrate compliance under section 19 PDPA.

8. How to Manage Your Preferences

• Cookie Preferences Centre: open from the “Cookie settings” link in the footer at any time, or from Settings > Privacy > Cookies inside the app.
• Browser controls: most browsers let you block, delete, or alert you to cookies. See aboutcookies.org for instructions per browser.
• Mobile device controls: iOS and Android each provide “Limit Ad Tracking” / “Reset Advertising ID” options.

Blocking strictly-necessary cookies will break parts of the Service (sign-in, session continuity, LINE login).

9. Do-Not-Track

We honour the Global Privacy Control (GPC) signal where the browser sends one: when present, non-essential cookies are not set and any prior consent is treated as withdrawn. We do not currently respond to legacy “Do-Not-Track” headers because there is no industry consensus on their interpretation.

10. Your Rights Under PDPA

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, withdraw consent, and lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand. See our Privacy Policy for full details and how to exercise these rights.

11. Changes to This Policy

We may update this Cookies Policy as our cookies, providers, or applicable law changes. The “Last updated” date at the top reflects the most recent change. Material changes that alter the categories of cookies set will trigger a fresh consent prompt.

12. Contact

For questions about this Cookies Policy or our cookie practices:

Lawdee Co., Ltd. Attn: Data Protection Officer. dpo@lawdee.ai / privacy@lawdee.ai. Chonburi, Thailand.

Supervisory authority: Personal Data Protection Committee (PDPC), Thailand (pdpc.or.th).