Privacy Policy

1. Introduction

2. Information we collect

• Information you provide: full name, work email, phone number, company name, job title, and the details of your inquiry, demo request or support ticket.
• Account information: when you sign in to the InterCloud App Portal or our products, your login credentials, profile and role information.
• Information collected automatically: IP address, browser type, operating system, device information, pages visited and usage data, collected through cookies and similar technologies (see our Cookie Policy).
• Communications: messages you send us by email, LINE, contact forms or the InterCloud AI Assistant, and questions you ask the AI Assistant or AI Avatar by text or voice (see “AI Assistant and AI Avatar”).
• Information from others: business contact details from partners, events or publicly available professional sources, where permitted by law.

3. How we use your information

• To respond to inquiries, provide consultations, demos and quotations.
• To provide, operate, maintain and support our products and services.
• To secure our systems, prevent fraud and investigate misuse.
• To analyze and improve our website, products and user experience.
• To send business updates and newsletters — only with your consent, which you can withdraw at any time.
• To comply with legal, tax and regulatory obligations.

4. Legal basis for processing

We process personal data only where we have a lawful basis to do so, including:

• Contract — to provide the products and services you request or have purchased.
• Legitimate interests — to operate, secure and improve our business, where these are not overridden by your rights.
• Consent — for optional cookies and marketing communications.
• Legal obligation — to comply with applicable laws and regulations.

5. Data sharing and disclosure

We do not sell your personal data. We share it only with service providers who help us operate our business (such as cloud hosting, email and analytics providers, and the AI providers listed in “AI Assistant and AI Avatar”) under contracts that require them to protect it, with professional advisers, or where required by law or to protect our rights.

6. AI Assistant and AI Avatar

The InterCloud AI Assistant (the chat on our website) and the AI Avatar (a talking video assistant in the InterCloud App Portal) answer your questions using third-party AI services. They are optional: use them only if you are comfortable with the processing described here.

What is processed, and by whom:

• Your questions and the recent messages of the same conversation are sent to our AI model provider in the United States to generate the answer. We use that provider’s commercial API, under which customer content is not used to train its models.
• For the AI Avatar, the answer text is converted to speech by Microsoft Azure AI Speech (data center in Singapore), and the talking video is generated and streamed to your browser by LiveAvatar, a HeyGen service (United States), from that speech. Your own voice and camera are not sent to LiveAvatar.
• If you ask by voice (in the website chat or the AI Avatar), your speech is sent to Microsoft Azure AI Speech (data center in Singapore), which detects whether you speak Thai or English and turns it into text; where that service is unavailable, your web browser’s own speech recognition is used instead (Google for Chrome, Apple for Safari, Microsoft for Edge) under that provider’s privacy terms. The microphone is used only while the mic button is active (shown in red).
• To prevent abuse and control costs, your IP address is used to limit how many questions can be asked per hour. It is held in memory only and is not stored.

We do not store the content of AI conversations on our servers. The website chat keeps the conversation in your browser tab’s session storage until you close the tab; the AI Avatar keeps it only while the page is open. Our servers record technical information about each request (such as time, response time and amount of text processed) for security and cost monitoring. The AI providers may keep inputs and outputs for a limited period under their own terms, for example to detect misuse.

Please note:

• Do not share passwords, payment details, health information or other sensitive personal data in the AI Assistant or AI Avatar.
• Answers are generated automatically and may be incomplete or inaccurate. They are not an offer, quotation or commitment by InterCloud — please confirm important details with our team.
• Our legal basis is our legitimate interest in answering your questions, or taking steps at your request before a contract; for voice questions, you choose to turn the microphone on.

7. International data transfers

Our service providers may process data outside Thailand — for example in Singapore (cloud and speech services) and the United States (the AI services described above). Where personal data is transferred internationally, we ensure appropriate safeguards are in place as required by the PDPA and, where applicable, the GDPR — such as standard contractual clauses or equivalent protections.

8. Data security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls based on least privilege, monitoring and regular security reviews. No method of transmission or storage is completely secure, but we work continuously to protect your information.

9. Your rights

Subject to applicable law, you have the right to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion, or restriction of processing.
• Object to processing, including for direct marketing.
• Request data portability.
• Withdraw consent at any time, without affecting earlier processing.
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand or your local supervisory authority.

To exercise these rights, contact us using the details below.

Make a personal data request online

10. Data retention

We keep personal data only for as long as needed for the purposes described in this policy, or as required by law (for example, accounting and tax records). When it is no longer needed, we delete or anonymize it securely.

11. Children’s privacy

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from minors without the consent required by law. If you believe a minor has provided us with personal data, please contact us and we will delete it.

12. Updates to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. Significant changes will be communicated on our website.

13. Contact us

For questions about this Privacy Policy or to exercise your rights, contact InterCloud Company Limited, 142 Two Pacific Place, 23rd Floor, Sukhumvit Rd., Khlong Toei, Bangkok 10110, Thailand.

Contact us at support@itcsuite.com — InterCloud Company Limited, 142 Two Pacific Place, 23rd Floor, Sukhumvit Rd., Khlong Toei, Khlong Toei, Bangkok 10110, Thailand.