Last updated: 2026-08-01
Privacy Policy
This policy describes how SookLabs ("we", "us") handles information when you use sooklabs.com, join our Discord community, interact with our Discord bot or Discord applications, or use SookLabs products (including SEOS) that may connect to third-party platforms such as Reddit. It is practical guidance for visitors, community members, and workspace operators — not legal advice.
Who operates SookLabs
SookLabs operates this website and our community services from Thailand. For privacy questions, email sooklabs.th@gmail.com.
What this policy covers
- The public website at sooklabs.com (contact forms, audit requests, analytics).
- The SookLabs Community Discord server (join link).
- Interactions with SookLabs Bot and related Discord bots we operate in the server.
- Discord applications, activities, and integrations we build or host as part of our first community iteration (for example onboarding flows, pillar channels, or builder tools inside Discord).
- Product platform connections operated by SookLabs (for example SEOS outbound social / SEO workflows), including Reddit Data API access if and when Reddit grants approval under its Responsible Builder Policy.
Product surfaces such as sookly.co and seos.sooklabs.com may add product-specific notices, but Reddit and other platform data handled by SookLabs products is covered here unless a product page states otherwise. Internal HQ tools at hq.sooklabs.com are password-protected and excluded from public search indexing.
Information we collect
Website
- Contact and audit form data — name, email, optional website URL, message content, and form type when you submit through the site.
- Technical usage data — aggregated page views and performance data through Vercel Analytics where enabled (route, referrer, browser type, general device information). We do not run advertising trackers on this site.
- Server and delivery logs — Vercel and Resend may process IP addresses, timestamps, and request metadata needed to deliver the site and send form notifications.
Discord community, bot, and applications
When you join or use our Discord services, Discord processes data under Discord's Privacy Policy. Depending on how you participate, we may also receive or store:
- Discord account identifiers — user ID, username, display name, avatar, roles, and server membership status.
- Messages and interactions — content you send in channels where our bot is present, direct messages to the bot where enabled, slash-command inputs, button or menu selections, and reactions where logged for moderation or product development.
- Application activity data — data generated when you use SookLabs Discord apps or activities (for example onboarding answers, preferences, session state, or feature usage needed to run the experience).
- Moderation and safety records — reports, warnings, mutes, bans, or audit notes created by moderators or automated safety tools.
We do not ask for payment details through Discord in this first iteration. Do not share passwords, one-time codes, or sensitive financial or health information in public channels.
SEOS and third-party platforms (including Reddit)
SEOS is an outgoing visibility and content-operations product. Today, Reddit workflows are primarily Manual: operators draft briefings and paste content themselves. We do not present Reddit (or other social channels) as "Connected" until a real, verified server-side credential exchange exists.
If and when Reddit approves SookLabs / SEOS under the Responsible Builder Policy and related Data API Terms, connecting a Reddit account or using approved API access may involve:
- OAuth tokens and account identifiers — access/refresh tokens, Reddit username or account id, granted scopes, and connection verification timestamps, stored server-side and encrypted at rest where implemented.
- Public Reddit content and metadata — posts, comments, subreddit metadata, and related public fields needed for listening, briefing, drafting, eligibility checks, or (only if explicitly approved and enabled) publishing on behalf of a connected account.
- Operator actions — which workspace connected the account, subreddit targets, human rule checks, approvals, and dispatch / paste records needed for auditability.
We request the minimum scopes needed for the stated use case. We do not use Reddit data to infer sensitive characteristics about Redditors, re-identify users via off-platform matching, sell or license Reddit data, or train machine-learning / AI models on Reddit data without Reddit's express written approval.
How we use information
- Operate the public website and respond to contact or audit requests.
- Run, moderate, and improve the Discord community across our three pillars: Psychology, Investment, and Technology.
- Provide bot replies, routing, onboarding, and Discord application features.
- Develop and test community tooling and integrations inside Discord.
- Protect members, enforce community rules, and investigate abuse or spam.
- Operate SEOS workspace features: content refactor drafts, social briefing packs, eligibility gates, and — only after verified connections and platform approval — scheduled or assisted publishing.
- Understand aggregate usage to reduce repetition, interruptions, cognitive load, and waiting time.
We do not sell your personal information.
Legal bases and your rights (PDPA and international visitors)
SookLabs operates from Thailand. Where the Personal Data Protection Act (PDPA) B.E. 2562 (2019) applies, we process personal data based on one or more of: your consent (for example joining Discord or opting into bot features), contractual necessity (responding to a request you make), legitimate interests (security, moderation, product improvement), or legal obligation.
Depending on where you live and what data we hold, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion or restriction of processing where applicable.
- Withdraw consent where processing is consent-based (for example leaving the server or disabling bot features).
- Object to certain processing based on legitimate interests.
- Lodge a complaint with a relevant supervisory authority.
If you are in the European Economic Area, United Kingdom, or another region with similar data-protection laws, we aim to honour comparable requests even though our primary operations are in Thailand. Contact us at sooklabs.th@gmail.com to exercise these rights. We may need to verify your identity (for example by confirming your Discord user ID or the email used in a prior website inquiry).
How form submissions are delivered
Website form submissions are sent to our team by email through Resend, delivered to sooklabs.th@gmail.com. Your email address is used as the reply-to address so we can respond directly.
Third-party services
- Vercel — hosts sooklabs.com and may provide analytics and infrastructure logs.
- Resend — delivers email notifications for website form submissions.
- Discord — hosts the SookLabs Communityserver, bot platform, and application runtime. Discord processes and stores data on its infrastructure. Review Discord's privacy policy and settings in your Discord account.
- Reddit— if a workspace connects Reddit or we use approved Reddit Data API access, Reddit processes authentication and content under Reddit's policies, including the Responsible Builder Policy, Developer Terms, and Data API Terms. Review Reddit's Privacy Policy.
Each provider processes data under its own terms. When you follow links to other SookLabs properties or leave our Discord server for third-party sites, those services govern their own practices.
Cookies and similar technologies
The public website uses minimal cookies or local storage mainly for analytics and normal site operation. We do not use cookies for third-party advertising on this site. Discord may use its own cookies and local storage in the Discord app or web client under Discord's policies.
Retention
- Website form submissions are kept in our email inbox as long as needed to handle your request and maintain ordinary business records.
- Discord messages and bot logs are retained only as long as needed for community operation, moderation, debugging, and product development, unless Discord's platform retention or applicable law requires longer storage.
- Reddit connection tokens are retained while a workspace keeps the connection active. On disconnect or revocation we delete or cryptographically erase tokens and stop new API calls. Cached public Reddit content used for drafts or briefings is kept only as long as needed for the workspace task, debugging, or legal obligation, and we honour applicable Reddit deletion / retention requirements once live API access is in use.
- Aggregated analytics data is retained according to Vercel's analytics settings.
Security
We use reasonable technical and organisational measures appropriate to a small operator (access controls, moderation, least-privilege bot permissions, and careful handling of secrets). No online service is perfectly secure; please use strong Discord account security and report concerns promptly.
Children
Our Discord community and website are not directed at children under 13 (or the minimum age required by Discord in your region). If you believe a child has provided personal data to us, contact sooklabs.th@gmail.com and we will take reasonable steps to delete it.
International transfers
Your information may be processed in Thailand and in countries where Vercel, Resend, Discord, Reddit, or other connected providers operate infrastructure (including the United States). By using our website, Discord services, or connected product features, you understand that cross-border transfer may occur.
Changes
We may update this page when our website, Discord community, bot, application, or platform-integration practices change. Material updates may also be announced in Discord or in-product. The "Last updated" date at the top shows when this version was published.
Contact
Privacy questions or rights requests: sooklabs.th@gmail.com. Community conduct questions are covered in our Terms of Use.
