Privacy Policy

Last Updated: 29 April 2026
Company/Owner: The Tale Company Limited ("the Company," "we," "us," or "our")

The Tale Company Limited ("the Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the TALE platform and services (the "Services") in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

1. Data We Collect

We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Data"):

Account Data: Name, email address, password, and profile preferences.
Payment Data: Billing address and partial payment information (processed via our secure third-party payment processors).
User Content (Input): Any personal data contained within the text, files, or prompts you upload to the Services.
Technical Data: IP address, browser type, device information, and usage patterns (collected via cookies and similar technologies).

2. Legal Basis for Processing

Under the PDPA, we process your data based on the following legal grounds:

Contractual Necessity: To provide the Services you signed up for.
Legal Obligation: To comply with Thai laws (e.g., tax reporting or the Computer Crimes Act).
Legitimate Interests: To improve our AI models, ensure security, and prevent fraud.
Consent: Where you have explicitly opted-in to marketing or specific data uses.

3. How We Use Your Data

We use your Personal Data to:

Operate and maintain your account.
Process payments and provide customer support.
AI Training: Use anonymized and aggregated Input and Output to train and refine our machine learning models (as detailed in Section 4 of our TOS).
Send administrative updates and, with your consent, promotional materials.

4. Data Sharing and Disclosure

We do not sell your Personal Data. We may share data with:

Service Providers: Cloud hosting (e.g., AWS/Google Cloud), AI model providers, and payment processors.
Legal Authorities: When required by a court order or to comply with the Computer Crimes Act.
Business Transfers: In the event of a merger, acquisition, or sale of assets.

5. International Data Transfers

As an AI service, your data may be processed on servers located outside of Thailand (e.g., in the US or Singapore). We ensure that such transfers comply with PDPA requirements by implementing standard contractual clauses or ensuring the destination country has adequate data protection standards.

6. Data Retention

We retain your Personal Data only for as long as:

Your account remains active.
It is necessary to provide you with the Services.
It is required to comply with our legal and tax obligations in Thailand (typically 5–10 years for financial records).

7. Your Rights Under PDPA

As a data subject under Thailand's PDPA B.E. 2562, you have the following rights:

Right to be Informed (S.23): To receive this notice before or at the time we collect your data.
Right to Access (S.30): To request a copy of your data and disclosure of how we obtained it. We respond within 30 days.
Right to Data Portability (S.31): To receive your data in a machine-readable format or have it transferred to another controller where technically feasible.
Right to Erasure (S.33): To request deletion or anonymization of your data when it is no longer necessary, consent is withdrawn, or it was unlawfully processed — subject to our legal retention obligations (Section 6).
Right to Rectification (S.36): To request correction of inaccurate or incomplete data.
Right to Object (S.32): To object to processing based on legitimate interests. We will cease unless we have compelling grounds or legal claims require otherwise.
Right to Restrict Processing (S.34): To request suspension of processing while accuracy is verified, an objection is assessed, or data is needed for legal claims.
Right to Withdraw Consent (S.19(5)): To withdraw consent at any time via your account settings or by contacting us. Withdrawal does not affect prior lawful processing but may limit service delivery.
Right to File a Complaint (S.73): To lodge a complaint with the PDPC if you believe we have not complied with the PDPA.

To exercise these rights, contact our Data Protection Department through support@talestudio.ai.

8. Security

We implement technical and organizational measures (such as encryption and access controls) to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:
Data Protection Officer at The Tale Company Limited
Email: support@talestudio.ai
Address: 75/8 Grand Crystal, Pradit-Manutham road, Nuanchan, Buengkum, Bangkok 10230 Thailand