Privacy Policy

• BT San Technology (Thailand) Co., Ltd. ("the Company", "we") is the data controller for personal data collected via our website, user accounts, contact channels, sales, marketing, and platform services.
• Personal-data contact: [email protected] (subject line: PDPA Request)
• Address: 9/40 หมู่ 13 ตำบลศิลา อำเภอเมืองขอนแก่น จังหวัดขอนแก่น 40000
• Our personal-data coordinator handles requests from data subjects, regulators, and internal teams.

• Information you provide — name, email, phone, company, title, and any message sent via our contact forms or email.
• Account data — name, email, company, team role, permissions, sign-in history.
• Data from external sign-in providers — if you sign in with Google or Facebook, we may receive basic profile data (name, email, avatar, provider account ID) according to the permissions you grant.
• Project data — project name, datasets, uploaded image/video files, labels and annotations, class names, training configuration, model versions, training logs, and evaluation results.
• Device and deployment data — device ID, serial number, IP address, device status, logs, error reports, uptime, webhook endpoints, and alert settings configured by the customer.
• Technical and usage data — IP address, browser, device, pages visited, and time spent. We use this in aggregate or with appropriate de-identification.
• Essential cookies — store theme/consent preferences. Never used for cross-site tracking.

We process your data for the purposes and on the lawful bases set out below, consistent with Thailand's Personal Data Protection Act (PDPA).

• Our platform is built for Computer Vision tasks — object detection, counting, quality inspection, and AI model training.
• In some cases, image or video files uploaded by customers may contain personal data — faces, employee name tags, license plates, or any other identifiable information.
• Customers are responsible for ensuring they have the appropriate rights and lawful basis to upload, use, and process such data on our platform, including notice to and consent from data subjects where required.
• We process such datasets only on the customer's instructions and to provide the service — storage, labeling, model training, evaluation, and deployment.
• For uploaded datasets, images, video, labels, models, and production data, the customer is the data controller (determines purpose and means), and the Company acts as the data processor on the customer's instructions, except where the law requires otherwise.
• If your use involves biometric data such as facial recognition for identification, you must rely on a stricter lawful basis as required under PDPA for sensitive data.

• Datasets, labels, models, training results, and project data belong to the respective customer.
• We will not use customer datasets or project data to train shared / global models, apply them to other customers, or publish them, except with consent or a separate written agreement.
• We may use aggregate statistical data that cannot identify any customer or individual to improve platform stability, security, and performance.

We use cookies and similar technologies as categorized below. You can change your Cookie Consent at any time via the "Cookie Settings" button on the site.

If you decline analytics, the site still works fully — your call.

• We retain personal data only as long as necessary for the purposes disclosed, or as required by law.
• Inquiries and quote requests — up to 2 years from the last contact, unless a contract is concluded or there is a legitimate business need.
• User accounts — retained while the account is active, plus a period after closure as necessary for security, audit, or legal requirements.
• Datasets, labels, models, training results — retained per customer settings, contract term, or until the customer deletes or terminates the service.
• System and security logs — retained as needed for security, incident investigation, and abuse prevention.
• Newsletter data — retained until you unsubscribe.
• Accounting, tax, and contract records — retained for the period required by applicable law.
• When no longer needed, we delete, destroy, or de-identify the data.

• We do not sell your personal data.
• We may share data only as needed with service providers that help us operate — cloud hosting, database/storage, email, analytics, authentication, CAPTCHA/security, payment/accounting, customer support, LINE, or webhook providers. See the current list at our subprocessors page.
• Such providers receive only the data they need, and must process it on our instructions and under appropriate security and contractual safeguards.
• We may disclose data where required by law, court order, government authority, or to protect the rights, safety, and security of our systems.

• Parts of our service may use cloud, authentication, security, analytics, or email providers with servers or processing outside Thailand.
• Where personal data is transferred internationally, we comply with applicable data-protection laws and apply appropriate safeguards — data processing agreements, security measures, and transfer mechanisms as required.

• You may have the following rights under personal-data protection law:
• Right to access and obtain a copy of your personal data
• Right to rectification — correct, update, or complete data so it is not misleading
• Right to erasure, destruction, or de-identification
• Right to restriction of processing
• Right to object to collection, use, or disclosure in certain cases
• Right to data portability in a machine-readable format where the law applies
• Right to withdraw consent where processing relies on consent
• Right to lodge a complaint with Thailand's Personal Data Protection Committee
• Send requests to [email protected] with subject line "PDPA Request". We may ask for additional information to verify your identity, and will respond within the period required by law (generally within 30 days).

• Data in transit through our website and platform is encrypted via HTTPS/TLS to reduce the risk of interception or tampering.
• We apply appropriate safeguards — access controls, role-based access control, audit logging, tenant/project data separation, backups, and anomaly monitoring.
• Staff and authorized service providers access data only as needed for service delivery, customer support, troubleshooting, or legal compliance.
• We review and update these safeguards periodically in response to changes in technology and threats.

• If an event occurs that may affect the security of personal data, we will investigate, contain its impact, and notify the relevant regulator or data subjects as required by law.
• Where such an event poses a high risk to the rights and freedoms of data subjects, we will notify affected individuals without undue delay, along with practical remediation or mitigation guidance.

• We may update this privacy policy from time to time to reflect changes in our service, technology, or applicable law.
• For material changes, we will notify you via the website, email, or another appropriate channel before or when the change takes effect.

• Email: [email protected] (subject: PDPA)
• Phone: 083-515-9824
• Address: 9/40 หมู่ 13 ตำบลศิลา อำเภอเมืองขอนแก่น จังหวัดขอนแก่น 40000