---

The security and privacy of your data matter to us. At ThaiProMax we are committed to protecting your personal data in line with international standards and Thailand's Personal Data Protection Act (PDPA).

1. What we collect

We collect only what we need in order to provide the service:

• Account details: your name, email address, and profile picture, obtained through Single Sign-On (SSO).
• What you submit: prompts, images, audio, and any other content you send in so the service can generate a result.
• Your personal registries: the records you enter yourself under My Life, My Finance, and My Shop.
• Transactions: your credit top-ups, subscription history, and payment details, processed through a PCI-DSS compliant payment provider. We do not store your card number ourselves.
• Technical data: IP address, browser information, and cookies, used to keep the service secure and to remember your session.

2. Why we use it

We use your data only for the following purposes:

1. To process the requests you submit and return the results to you.
2. To handle payments and calculate the Points/Credits in your account.
3. To help you when you contact us for support.
4. To keep the system secure, prevent misuse, and improve how the service performs.

We do not sell your data to third parties, and we do not use your personal registry data for advertising.

3. Sharing data for processing

Generating AI results requires external providers. The text and files you submit are passed to AI processing providers only as far as needed to produce the result you asked for, and outputs are held with cloud storage providers. Payments are handled by payment providers that meet international standards.

We select providers that meet recognised security standards and configure those connections so your data is not used to train their models. We do not disclose your identity to these providers beyond what processing requires.

Cross-border transfers: some providers are located outside Thailand, so part of the processing and storage happens abroad. By using the service you acknowledge and consent to this transfer for the purposes described above.

Apart from the above, we disclose your data to outside parties only when required to do so by law.

4. How long we keep it

• Generated work in the temporary library: kept for 7 days, then deleted. To keep something, download it or move it to your permanent library before it expires.
• Chat messages: kept for 60 days.
• Account details and personal registries: kept for as long as your account is active, and deleted when you remove them yourself or ask us to close your account.
• Transaction and receipt records: kept for the period required by accounting and tax law, even after you close your account.

5. Your rights under the PDPA

You have the following rights over your own data:

• Request access to, and a copy of, the personal data we hold about you.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete your personal data.
• Ask us to suspend use of your data, or object to certain kinds of processing.
• Withdraw consent you previously gave (withdrawal does not affect processing already carried out lawfully).

When we receive a request we will act on it within the period the law allows, and we may ask you to verify your identity first to protect your own data.