Scope and data controller
This Policy applies when you access the Taida Nexus website (hereinafter "Taida Nexus" or "the Platform"), register an account, use the Playground or Dashboard, or invoke models via the API.
Personal information is controlled by TAIDA, which operates taidatech.ai and the Taida Nexus platform in Thailand. The contact address is Unit G101, Ground Floor, The Offices at Central World, 999/9 Rama I Road, Pathumwan, Bangkok 10330, Thailand, and the contact email is contact@taidatech.ai. Where a third-party model vendor independently determines the purpose and manner of its own processing, that vendor's privacy rules also apply.
Information we process
Username, display name, email address, user ID, user group, login status, two-factor authentication status
Registration and login, authentication, account security, and access control
API key name and trailing identifier, model scope, credits, validity period, IP limit
API access, quota and key management; the Platform never provides full keys in exported files
Prompts, conversations, uploaded images or files, generated images and videos, session titles
Running model requests, saving history, and resuming asynchronous generation tasks
Model, token count, request time, duration, status, cost, and request ID
Billing, reconciliation, troubleshooting, abuse prevention, and service statistics
IP address, browser or client information, cookies, logs, and administrative action records
Session security, attack prevention, security audits, and anomaly detection
Conversation retention period, data export and deletion events, cookie preferences
Applying your privacy settings and confirming that requests have been processed
Contact name, work email, business or team, role, project stage, and requirement description
Handling fine-tuning, Model Hosting, and pre-sales inquiries
Please do not include IDs unrelated to the task, financial account information, precise location, health information, biometrics, or other sensitive personal information in prompts, attachments, or API requests. Do not submit other people's personal information, trade secrets, or protected content without authorization.
Purpose of processing and legal basis
- Formation and performance of service agreements: creating your account, issuing API keys, running model calls, saving your preferences, showing usage, and processing your account.
- Your consent: processing information where consent is required by law. Where sensitive personal information, cross-border transfers, or non-essential cookies are involved, we will notify you separately and obtain valid consent where applicable.
- Fulfilling statutory obligations: complying with Thailand's applicable cybersecurity, accounting, tax, dispute resolution, and regulatory coordination obligations, and keeping relevant records in accordance with the law.
- Legitimate interests: without unduly impairing your rights, identifying abnormal calls, preventing fraud and abuse, troubleshooting, and protecting the Platform, users, and public safety.
If you decline to provide information necessary for a feature, we may not be able to provide that feature, but this will not affect other services that do not rely on that information.
Model vendors and cross-border processing
When you select a model, the Platform forwards the prompts, message context, parameters, and attachments necessary to complete the request to the corresponding model vendor. Available models vary with service capability; see the Models page for the current list.
Vendors may differ in server regions, log retention, and content security policies. Choose a model based on your data's sensitivity, and do not process classified government information, regulated data, unauthorized personal information, or core business secrets through public models.
Model, cloud computing, email, storage, and payment providers may process necessary data outside Thailand. TAIDA will assess the level of protection at the receiving location in accordance with Thailand's Personal Data Protection Law, and use supplier contracts, data processing terms, access controls, data minimization, and other appropriate safeguards. Where required by law, we will provide additional notice and obtain valid consent. Enterprise customers may agree on processing locations and additional safeguards through the enterprise agreement.
Apart from completing the model requests you select, the Platform will not proactively use your prompts, attachments, or generated results to train our own models. Each vendor's processing of data is governed by its contract with the Platform and its applicable policies.
Retention period and deletion
- Conversation history: retained for up to 180 days from creation or the last update, then deleted automatically. You may delete your history earlier in the Console.
- Generated media and attachments: images, video, and audio stored by the Platform are retained for up to 180 days and can be downloaded or deleted from the Media Library.
- Login sessions: kept until you log out, the session expires, or the cookie expires.
- Request, billing, and audit records: kept for the minimum period necessary for billing reconciliation, security audits, dispute resolution, and legal obligations, and stored separately from conversations.
- Business inquiries: kept until the inquiry is resolved, and retained as long as reasonably necessary to handle disputes, fulfill a service commitment, or meet a legal obligation, then deleted or anonymized.
- Backups: deleted data may remain in access-controlled backups until the end of the backup rotation cycle, used only for disaster recovery and recovery validation.
Data security measures
Based on data risk, we use HTTPS transmission, access control, permission isolation, API key masking, two-factor authentication for administrators, security audits, and measures such as database backup and recovery verification. Account, session, conversation, ledger, and export operations are segregated by user ID.
No internet service is absolutely secure. If a data security incident may affect your rights, we will take remedial action in accordance with the law and notify you through the website, email, or other appropriate means of the incident, its possible effects, the actions taken, and the precautions you can take.
Your data rights
To the extent required by Thailand's Personal Data Protection Law and other applicable laws, you can request access to your data, obtain a copy, or request portability; correct, delete, or restrict processing of your data; object to processing; withdraw consent-based processing; cancel your account; and lodge a complaint with Thailand's Personal Data Protection Commission.
In the Console's Data & Privacy page, you can export your account, conversations, attachment metadata, generation tasks, ledger, and privacy preferences, or delete conversation history. Other requests can be submitted through the contact method described in this Policy. To keep your account secure, we may verify your identity first. Where the law requires retention or deletion is temporarily technically unavailable, we will stop processing the data except for storage and security.
Protection of minors
This Platform is intended primarily for developers and enterprise users with contracting capacity, and is not directed at minors. Anyone below the age of contracting or consent required by applicable law must use the Services through, or with the valid consent of, a parent or other legal guardian. If we discover that the necessary authorization is missing, we will delete the relevant information or take other protective measures as soon as possible in accordance with the law.
Policy updates
We may update this Policy when features, services, model vendors, or the way data is processed change, or when required by law. Significant changes will be announced on this page, through on-site notifications, or by other prominent means. Where the law requires new consent, we will ask for additional consent before the change takes effect.
Contact us
Privacy requests, data security issues, or questions about this Policy can be sent to contact@taidatech.ai. Our mailing address is Unit G101, Ground Floor, The Offices at Central World, 999/9 Rama I Road, Pathumwan, Bangkok 10330, Thailand. We will handle your request in a timely manner after verifying your identity in accordance with the law. You also have the right to lodge a complaint with Thailand's Personal Data Protection Commission.