Privacy Notice

1. What SATI records

SATI is not connected to your telephone call and cannot read anything on the telephone. It listens to the room through the microphone of the device on which this page is open, which is a second device placed beside the telephone.

When the telephone is on speaker, the microphone captures both sides of the conversation — your voice and the voice of the other party — together with any other sound in the room, including the voices of other people present.

Stated plainly: the other party is being recorded. The other party has not agreed to this and is not aware of it. Audio of an identifiable person, and text made from that audio, are personal data under the PDPA.

SATI does not analyse voices to identify or authenticate any person. It does not create or store a voiceprint, and it does not attempt to match a voice against any person or database.

One related question is unsettled and is stated here rather than resolved. The PDPA treats biometric data as sensitive personal data, requiring explicit consent, and defines it by reference to technology that uses a person’s physical or behavioural characteristics to identify them. The statutory examples given are facial, iris and fingerprint data; speech is not among them, but the list is illustrative rather than exhaustive. Some Thai commentary reads the category as extending to the voice; other commentary distinguishes a voiceprint used to identify a person from a recording that is merely made, as SATI’s is. No published guidance or decision was found resolving the point either way, and this notice does not assert an answer.

2. Where the audio and the text go

The audio does not stay on your device. It is transmitted to two companies, each of which does something different with it.

• Paxa Labs receives the audio and converts it into Thai text.
• TypeSafe receives only that text, not the audio, and its model, Jev, assesses whether the conversation shows the characteristics of a scam call.

Neither company receives your name, telephone number or any account identifier, because SATI holds none. Speech, however, identifies people by itself. If a name, an account number or an identification number is spoken during the call, it is transmitted with everything else.

3. Paxa Labs retains the recordings and uses them to train its own models

This is the most consequential statement in this notice. Paxa Labs states on its speech-to-text service page:

Its privacy policy states how long that material is retained:

The consequences follow directly. The audio — which contains the voice of the other party — and the text made from it continue to exist after the call ends, in systems SATI does not control, for a period determined by Paxa Labs and not fixed in advance.

Training its own models is Paxa Labs’ own purpose. It is not something Paxa Labs does on SATI’s behalf or under SATI’s instructions, and SATI cannot stop it, retrieve the material or have it deleted. Any request about that material must be made to Paxa Labs directly, under its own policy. SATI cannot make such a request for you and gives no assurance that it would succeed.

If this is not acceptable to you, do not use SATI. That is a sufficient reason not to, and it is why this section appears where it does.

4. TypeSafe does not train on what it receives

TypeSafe’s documentation states:

Its privacy policy states:

These are TypeSafe’s own representations. SATI relies on them and is not able to verify them independently. They address training only. The text of your conversation still leaves your device and is processed by a company that is not SATI: not being used for training is not the same as not being transmitted.

5. Cross-border transfer

TypeSafe AI, Inc. states that its services are hosted in the United States. The text made from your conversation is therefore transferred outside Thailand.

Paxa Labs is a company registered in Thailand and states that the service providers it uses in turn may be located outside Thailand.

The PDPA imposes conditions on the transfer of personal data to recipients outside Thailand. SATI is a personal, non-commercial project. It uses both services on their standard published terms and has not negotiated separate transfer arrangements with either company. You should take that into account in deciding whether to use SATI.

6. What SATI retains

Nothing. SATI does not record the call to storage, does not save the text of the conversation, and keeps no history of use. There is no account, no registration and no sign-in, and no record of who called whom or when.

What appears on the screen is transient. When you end the call and close the tab, everything held by SATI is gone and cannot be recovered, including by us.

This section describes SATI only. It does not describe what Paxa Labs retains, which is set out in section 3.

7. The other party's consent is your responsibility

SATI has no relationship with the other party and no means of contacting them. It therefore does not obtain, and cannot obtain, that person’s consent to being recorded, to the transmission of their voice to Paxa Labs and TypeSafe, or to the retention of that recording by Paxa Labs.

You are the person who decides to record. Whether recording the other party, and transmitting their voice to these companies, is lawful and appropriate in your particular circumstances is a question about your situation, and it is yours to answer. SATI does not answer it for you and does not represent that any particular use is lawful.

Before you start, please consider:

• whether you genuinely suspect this call is a scam, rather than starting SATI as a precaution;
• that if the other party turns out to be acting honestly, their voice will nonetheless have been retained by Paxa Labs, and neither you nor SATI can delete it;
• telling the other party that you are recording, where you are able to do so;
• that publishing or circulating a recording of another person carries risks distinct from making it.

8. The assessment is automated, and it can be wrong

The level shown on screen is generated by an automated model reading a transcript of the conversation. It is not produced by a person, it is not drawn from any register of known offenders, and it is not a determination of fact. It is not a substitute for your own judgement.

It can be wrong in both directions. A genuine scam call may be shown as ordinary, because nothing recognisable has yet been said or because the speaker’s voice was not transcribed accurately. An honest caller — a nurse, a courier, a genuine official, an anxious relative — may be shown as dangerous, because the words used happen to resemble those of a scam. Transcription of Thai speech is imperfect, and the model that reads the transcript performs better in English than in Thai.

Do not act on the level alone, whether it is telling you to be alarmed or telling you that nothing is wrong. The public guidance in Thailand remains: ไม่เชื่อ ไม่รีบ ไม่โอน — do not believe, do not hurry, do not transfer.

If you are unsure, end the call and call back on a number you obtained yourself, from the back of your card or from an official website, never a number given to you by the caller. Thailand’s Anti-Online Scam Operation Center hotline, 1441, operates 24 hours a day. If money has already been transferred, call immediately: suspending an account is a race against time.

9. Microphone access

Your browser will ask for permission to use the microphone the first time you start listening. If you decline, SATI cannot function.

The microphone is active only while you have started a session. It is not active merely because this page or the application is open, and it cannot be active once the tab is closed. When you end the call, SATI stops listening and the device’s microphone indicator goes out. If the indicator does not go out, treat that as a fault and close the tab.

You may withdraw microphone permission at any time in your browser settings. SATI requests no other permission: not the camera, not location, not contacts.

10. How to stop

End the call using the control on screen; the microphone stops immediately. Then close the tab. Everything held by SATI is then gone. There is no form to complete and no deletion request to make, because nothing was retained.

Closing the tab does not affect the recordings and text already transmitted to and retained by Paxa Labs. See section 3.

11. Your rights, and their practical limits

The PDPA gives data subjects rights in relation to their personal data, including rights of access and to obtain a copy, to rectification, to erasure, to restriction of processing, to object to processing, and to withdraw consent previously given.

Against SATI these rights have almost nothing to operate on — not because they are refused, but because SATI holds no personal data about you: there is nothing to disclose, to correct or to erase. The material that does exist is held by Paxa Labs, and rights in respect of it must be exercised against Paxa Labs directly, through the channels set out in its own privacy policy. SATI cannot exercise them on your behalf.

A data subject who considers that their rights have been infringed may lodge a complaint with Thailand’s Personal Data Protection Committee (สคส.).

12. This notice is not legal advice

This page is information about how this software handles data. It is not legal advice, it is not a legal opinion, and it does not address your circumstances. It was written by the author of the software, who is not a lawyer. The PDPA is relatively recent, guidance and practice under it continue to develop, and a number of questions relevant to an application of this kind have no settled answer. If the matter is important to you — in particular if you intend to rely on a recording as evidence, or to disclose or publish one — obtain advice from a qualified lawyer before doing so.

13. No warranty

SATI is a personal, non-commercial project maintained by one individual. There is no company behind it, no support arrangement and no service contract with you. It is provided “as is”, without warranty of any kind, express or implied, including as to accuracy, availability or fitness for any particular purpose. It may fail, it may be withdrawn, and it may be wrong. To the fullest extent permitted by law, the author accepts no liability for any loss arising from its use or from any inability to use it.

This notice may be amended if the third-party services described in it change their terms, or if the software changes what it does with data.