Privacy Policy

1. Who We Are

TATC TECHNOLOGY CO., LTD. ("TATC", "we", "us") provides Token API and Bare Metal GPU services in Thailand. This policy explains how we handle personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA) and applicable regulations.

We act as a data controller for website inquiries, business contacts, account administration and billing. When processing personal data in customer workloads on a customer's instructions, we act as a data processor under the applicable service and data processing agreement.

2. Data We Collect and Why

We collect information you provide through inquiries, quotation requests, support tickets and service onboarding, including your name, company, email address, request details, attachments and relevant account or billing information. We may also collect IP addresses, device and browser information, access logs and service usage metadata necessary to operate and secure our services.

We use this information to:

Respond to inquiries, prepare quotations and provide services, on the basis of contractual necessity or steps requested before entering a contract. For corporate representatives, we rely on our legitimate interest in managing business relationships.

Administer accounts, provide support, measure billable usage and prevent misuse, based on contractual necessity or legitimate interests, balanced against your rights.

Meet applicable accounting, tax and other legal obligations.

Conduct optional marketing and use non-essential tracking technologies with your consent.

Required information is identified when requested. Without information needed to respond to you, fulfil a contract or meet a legal obligation, we may be unable to process your request or provide the relevant service. Optional information and marketing consent are not required to obtain our core services.

Please do not include unnecessary sensitive personal data in forms, tickets or attachments. Where sensitive data must be processed, an appropriate basis under the PDPA, including explicit consent where required, must be established.

3. Customer Workloads and Model Providers

Token API requests are processed to deliver the model response you request. TATC's gateway does not retain prompt or response content or use it for model training. Operational metadata, such as request identifiers, timestamps, token counts and error codes, may be retained for billing, security and support. Content you separately provide in support tickets is handled as support information.

Third-party model services may process requests outside Thailand and apply their own retention conditions. Any Thailand-only processing or end-to-end zero-retention arrangement must be expressly confirmed for the selected service. Our gateway's retention policy does not automatically extend to an upstream provider.

Bare Metal customers control their deployed applications and workload data. TATC processes such data only as necessary to provide the contracted service, on documented instructions, or as required by law.

4. Sharing and International Transfers

We disclose personal data only as necessary to authorized personnel, infrastructure and communications providers, support and billing providers, relevant model providers, professional advisers, or authorities where lawfully required. Service providers handling data on our behalf are subject to appropriate confidentiality and data protection obligations.

Transfers outside Thailand will use an applicable PDPA transfer mechanism, such as adequate protection, appropriate safeguards, or a legally permitted exception. Contact us for information about recipients and transfer arrangements relevant to your service.

5. Retention and Security

We retain inquiry and support records while needed to resolve the request and related follow-up; account and billing records for the service relationship and applicable legal retention periods; and operational logs for the period necessary for security, troubleshooting and billing verification. Records needed for a dispute are retained until it is resolved and relevant legal claim periods expire. We then delete or anonymize data, unless continued retention is legally required.

We apply appropriate technical and organizational safeguards and handle personal data breaches, including required notifications, in accordance with the PDPA.

6. Your Rights and Contact

Subject to applicable legal conditions, you may request access, a copy, information about the source of data collected without consent, correction, deletion, restriction or portability of your personal data. You may object to processing, withdraw consent at any time without affecting prior lawful processing, and lodge a complaint with Thailand's Personal Data Protection Committee through its Office (PDPC).

Contact us to exercise your rights. We may verify your identity and will respond within applicable legal time limits. Where we process data for a customer, we will assist the relevant controller with your request.

TATC TECHNOLOGY CO., LTD.
Tax ID: 0135567035437
Address: 9/11 Moo 12, Khlong Song, Khlong Luang District, Pathum Thani 12120, Thailand
Email: info@tatc.cloud

We will publish policy updates here and provide additional notice or obtain fresh consent where required. For website tracking choices, see our Cookie Policy.