Last updated: 15 October 2026
TATC TECHNOLOGY CO., LTD.
TATC TECHNOLOGY CO., LTD. ("TATC", "Company", "we", "us", or "our") respects the privacy of individuals and is committed to protecting Personal Data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA"), its applicable regulations, and other applicable data protection laws.
This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process Personal Data when individuals visit our website, communicate with us, establish business relationships, or use our products and services.
TATC provides AI computing infrastructure, GPU computing services, cloud and server solutions, AI model access, Token API services, and AI-powered business applications.
This Privacy Policy applies to our corporate website at https://www.tatc.cloud, associated online platforms operated by TATC, and related business activities, unless a separate privacy notice applies.
By using our website or services, you acknowledge that you have been informed of the practices described in this Privacy Policy. Where consent is legally required, we will request it separately.
We may collect Personal Data directly from you, automatically through your interactions with our website and services, or from authorized third parties where permitted by law.
We may collect:
Where applicable to the services used, we may collect:
When you access our website or online platforms, we may automatically collect:
For commercial relationships, we may collect:
Depending on the services used, customers may submit data, documents, prompts, images, videos, or other content for processing through our AI infrastructure or applications.
Such content may include Personal Data.
The handling of customer-provided content is governed by the applicable service agreement, contractual instructions, and any relevant Data Processing Agreement.
TATC does not generally require Sensitive Personal Data for ordinary website inquiries or business communications.
Where processing of Sensitive Personal Data is necessary, we will establish an appropriate legal basis, including explicit consent where required by applicable law, and implement appropriate safeguards.
TATC may collect, use, and disclose Personal Data for the following purposes:
Where permitted by applicable law, we may use contact information to:
Where consent is required for marketing communications, we will obtain it before processing Personal Data for that purpose.
Individuals may opt out of direct marketing communications at any time.
We may process Personal Data to comply with applicable laws, lawful regulatory requirements, court orders, and other legally binding obligations.
TATC processes Personal Data only where an appropriate legal basis exists under the PDPA or other applicable laws.
Depending on the circumstances, these legal bases may include:
Contractual Necessity: Processing necessary to enter into or perform a contract with the Data Subject.
Legal Obligation: Processing necessary to comply with applicable legal or regulatory requirements.
Legitimate Interests: Processing necessary for our legitimate business interests or those of another party, provided such interests do not override the fundamental rights and freedoms of the Data Subject.
Consent: Processing based on freely given, specific, informed, and unambiguous consent where required by law.
Other Lawful Bases: Processing permitted under other applicable provisions of the PDPA.
Where consent is the legal basis, individuals may withdraw their consent in accordance with applicable law.
TATC provides AI infrastructure and computing services that may involve processing information submitted by customers.
The responsibilities of TATC depend on the nature of the relevant service and contractual relationship.
TATC generally acts as a Data Controller when determining the purposes and means of processing Personal Data for its own website operations, customer account administration, billing, and business communications.
When TATC processes Personal Data on behalf of a customer and according to that customer's documented instructions, TATC generally acts as a Data Processor.
The applicable contractual arrangements may further define the responsibilities of each party.
When customers use AI model inference or Token API services, information submitted through the relevant interfaces may be processed to generate the requested outputs.
TATC retains only necessary operational and usage-related information, such as request identifiers, timestamps, model identifiers, token consumption, billing records, and relevant technical metadata, for service delivery, usage management, billing, security, and troubleshooting.
Such information is processed in accordance with applicable laws and appropriate data protection measures.
Customers are responsible for determining whether the data they submit to TATC's services may lawfully be processed and for obtaining any necessary authorizations or consents.
Where TATC acts as a Data Processor, it will process Personal Data in accordance with applicable contractual instructions and legal obligations.
TATC will not use customer-provided Personal Data for unrelated purposes unless authorized by the customer or otherwise permitted by applicable law.
TATC does not use customer prompts, inputs, or model-generated outputs to train its own general-purpose foundation models as part of its ModelHub or Token API services.
Any separate use of customer data for model training, fine-tuning, or similar purposes shall require appropriate authorization and a valid legal basis, and shall be governed by applicable contractual arrangements.
TATC may disclose Personal Data to third parties where necessary for the purposes described in this Privacy Policy and where permitted by law.
Recipients may include:
TATC will take appropriate steps to ensure that recipients process Personal Data only for authorized purposes and are subject to appropriate confidentiality and data protection obligations.
We do not sell Personal Data to third parties for their independent marketing purposes.
TATC is based in Thailand. However, certain business operations, infrastructure services, technical support activities, or service integrations may involve transferring or making Personal Data accessible outside Thailand.
Where international transfers occur, TATC will comply with the applicable requirements of the PDPA.
Depending on the circumstances, transfers may be supported by:
The geographical location of data processing may depend on the selected service, infrastructure configuration, and contractual arrangements.
Unless expressly agreed in writing, TATC does not represent that all Personal Data will be processed or stored exclusively within Thailand.
TATC retains Personal Data only for as long as reasonably necessary to fulfill the purposes for which it was collected, or as required or permitted by applicable law.
Retention periods may depend on:
Website inquiries and customer communications may be retained for reasonable business follow-up and recordkeeping purposes.
Account, billing, and transaction records may be retained for the duration required by applicable contractual, accounting, tax, or legal obligations.
Service logs and technical records may be retained for periods reasonably necessary for security, service operations, troubleshooting, and billing verification.
Customer workload data will be handled according to the relevant service arrangements and contractual terms.
When Personal Data is no longer required, TATC will delete, destroy, or anonymize it as appropriate, subject to applicable legal requirements.
TATC recognizes the importance of protecting Personal Data against unauthorized access, loss, misuse, alteration, disclosure, and destruction.
We implement appropriate technical and organizational security measures proportionate to the nature of the information and the risks involved.
Such measures may include, as applicable:
TATC periodically reviews its security measures and seeks to improve them in response to technological developments and identified risks.
Although we take reasonable precautions, no electronic system or transmission method can be guaranteed to be completely secure.
Where a Personal Data breach occurs, TATC will investigate and respond in accordance with applicable law, including notification to relevant authorities and affected individuals where required.
Our website may use cookies and similar technologies to support essential website functionality, maintain security, remember preferences, and understand website usage.
Cookies may include:
Essential Cookies: Necessary for website operation, security, and basic functionality.
Functional Cookies: Used to remember user preferences and improve website usability.
Analytics Cookies: Used, where implemented, to understand website performance and visitor interactions.
Marketing Cookies: Used, where implemented and lawfully permitted, to support relevant marketing and advertising activities.
Where required by law, TATC will obtain consent before placing non-essential cookies.
Users may manage their cookie preferences through available website controls or browser settings.
Additional details may be provided in a separate Cookie Policy.
Subject to the conditions and limitations prescribed by the PDPA, individuals may have the following rights:
11.1 Right to Access: Request access to and obtain a copy of their Personal Data, including information about its source where applicable.
11.2 Right to Rectification: Request correction of inaccurate, outdated, incomplete, or misleading Personal Data.
11.3 Right to Erasure: Request deletion, destruction, or anonymization of Personal Data where legally applicable.
11.4 Right to Restrict Processing: Request suspension of the use of Personal Data in circumstances prescribed by law.
11.5 Right to Data Portability: Request receipt or transfer of Personal Data in a legally applicable, commonly used, machine-readable format.
11.6 Right to Object: Object to certain processing activities, including direct marketing and other processing activities where the law provides such a right.
11.7 Right to Withdraw Consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing conducted before withdrawal.
11.8 Right to Lodge a Complaint: Submit a complaint to the competent authority where the individual believes that Personal Data has been processed in violation of applicable law.
To exercise these rights, individuals may contact TATC using the contact details provided below.
We may request reasonable information to verify identity before responding.
Requests will be handled within the timeframes and subject to the conditions prescribed by applicable law.
Where TATC acts as a Data Processor, requests concerning customer-controlled Personal Data may need to be directed to the relevant customer acting as Data Controller.
Our website may contain links to third-party websites, applications, platforms, or services.
These third parties may operate under their own privacy policies and data processing practices.
TATC is not responsible for the privacy practices of independent third parties.
We encourage users to review the applicable privacy policies before providing Personal Data to external websites or services.
TATC's website and commercial services are primarily intended for businesses and professional users.
We do not knowingly seek to collect Personal Data from children through ordinary corporate website interactions.
Where Personal Data relating to minors must be processed, TATC will comply with the applicable requirements of the PDPA, including parental or guardian consent where legally required.
TATC may review and update this Privacy Policy from time to time to reflect changes in our business operations, services, technologies, or applicable legal requirements.
Updated versions will be published on our website.
Where material changes require additional notification or consent under applicable law, we will take appropriate steps to fulfill those requirements.
We encourage users to review this Privacy Policy periodically.
For questions, concerns, or requests relating to this Privacy Policy or the processing of Personal Data, please contact:
TATC TECHNOLOGY CO., LTD.
Company Registration / Tax ID: 0135567035437
Address: 9/11 Moo 12, Khlong Song, Khlong Luang District, Pathum Thani 12120, Thailand
Website: https://www.tatc.cloud
Email: info@tatc.cloud
Requests relating to Personal Data protection may be submitted through the above contact channel and will be directed to the responsible personnel.
Where a Data Protection Officer is appointed or legally required, the relevant contact information will be made available as required by applicable law.
This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Kingdom of Thailand, including the Personal Data Protection Act B.E. 2562 (2019) and its applicable subordinate regulations.
Nothing in this Privacy Policy is intended to limit or exclude any rights or protections granted to Data Subjects under mandatory applicable law.