General privacy information

Key terms used in this policy are described below to help you understand how we handle personal data in our AI projects and services.

We collect only the data necessary to provide contracted services, improve our offerings, and comply with legal obligations. Collection methods include direct inputs from users, automated logs, and third-party integrations used with consent.

We process personal data for specific, limited purposes necessary to operate our services and support client relationships.

• To deliver AI development and integration services requested by clients
• To communicate about projects, support and billing
• To manage accounts and perform administrative tasks
• To analyze usage patterns and improve our products responsibly
• To protect systems, detect and prevent fraud or abuse
• To comply with legal obligations and respond to lawful requests
• To maintain security and operational integrity of deployed models
• To provide training and documentation to client teams

We rely on appropriate legal bases to process personal data depending on context and jurisdiction, such as performance of a contract, legitimate interests, or consent where required.

• Performance of a contract with the client for service delivery
• Legitimate interests such as security, fraud prevention and service improvement
• Consent, when required for marketing or optional features
• Compliance with legal or regulatory obligations

For individuals covered by GDPR or similar regional laws, we respect rights including access, correction, restriction, portability and objection where applicable.

• Right to access the personal data we hold about you
• Right to request correction of inaccurate data
• Right to request deletion in certain circumstances
• Right to restrict or object to processing where applicable
• Right to data portability for personal data you provided
• Right to withdraw consent where processing is based on consent

We use cookies for site functionality, analytics and preference management. You can manage cookie settings through your browser or provided consent controls.

Types include essential cookies for site operation, analytics cookies for usage insights, and preference cookies to remember choices.

Categories: necessary, analytics, performance and functional. Marketing cookies are not used without explicit consent.

You may adjust cookie preferences in your browser or via consent tools on the website. Disabling certain cookies may affect site features.

View our cookie policy

We share personal data only with necessary service providers or as required by law, under contracts that limit use and require security safeguards.

• Service providers who host or process data on our behalf
• Professional advisers and auditors under confidentiality obligations
• Authorities when required by law or for legal process
• Partners engaged to deliver parts of client projects under contract
• Aggregated, non-identifying data that does not reveal individuals
• Entities involved in a merger, acquisition or asset transfer with appropriate safeguards

Data may be transferred to service providers or operations outside Thailand. We take steps to ensure appropriate safeguards are in place in accordance with applicable law.

Safeguards include standard contractual clauses, contractual commitments, and technical controls such as encryption in transit and at rest.

We retain personal data only as long as necessary for the purposes described, or as required by law and contractual obligations.

Account and contractual records are retained for the duration of the client relationship and for a limited period after termination for legal and billing purposes.

Support and project correspondence is retained while relevant to active projects and for a reasonable period thereafter to address follow-up matters.

System logs and telemetry are retained for operational, security and troubleshooting needs and then deleted or anonymized according to retention schedules.

When personal data is no longer required, we securely delete or anonymize it, unless retention is necessary for legal or legitimate business reasons.

aiplusmo implements organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure or destruction. Measures are reviewed periodically and updated as needed.

• Access controls, role-based permissions and secure authentication
• Encryption in transit and at rest, secure backups and regular security assessments
• Regular access reviews and role-based permissions to limit data exposure to only necessary personnel.

You have the right to access, correct, restrict or delete your personal data that we process. Below are the ways you can exercise those rights and what to expect when you contact aiplusmo.

• Access: Request a copy of the personal data we hold about you and a summary of processing activities.
• Correction: Ask us to update inaccurate or incomplete personal information so our AI services operate on current data.
• Deletion: Request removal of your personal data where retention is no longer necessary for the purposes it was collected.
• Restriction: Request temporary suspension of processing while accuracy or lawfulness of processing is verified.
• Portability: Request a machine-readable copy of personal data you provided for transfer to another provider where technically feasible.
• Objection: Object to direct marketing processing and to processing based on legitimate interests where you can demonstrate compelling reasons.
• Withdraw consent: If processing is based on consent, you may withdraw consent at any time without affecting prior processing.
• Right to lodge a complaint: If you are not satisfied with our response, you may lodge a complaint with the competent supervisory authority in Thailand.

To exercise any of the rights above, contact our Data Protection Team at [email protected] or use postal correspondence to our address: Soi Pibulsongkram 22 Yaek 6/1, Bang Khen Sub District, Amphoe Mueang Nonthaburi District, Nonthaburi Province 11000, Thailand. Please include sufficient details to help us locate your information and a copy of an ID where required to verify identity.

[email protected]

We typically acknowledge receipt of rights requests within 5 business days and aim to provide a substantive response within 30 calendar days. If more time is required due to complexity, we will inform you of the expected timeline and reasons.