Privacy Policy
In plain language first
This site collects your data only when you submit a contact form. We use that data solely to call or email you back. We never sell your data to anyone, this site carries no tracking ads, and our analytics tool does not collect personal data. If you'd like your data deleted, email us and we'll delete it within 30 days.
Data we collect, and for how long
Name, company, job title, phone number, email, and whatever you write in the form, plus technical server logs storing a hashed IP address (converted to a code that cannot practically be reversed back to the original IP) to prevent automated duplicate submissions, kept for only 1 hour per check.
Retention period is counted from the date we receive each piece of data.
| Data | Legal basis | Retention period |
|---|---|---|
| Contact details from the form | Your consent | 24 months |
| Documents from a project you hired us for | Contract performance | As specified in the contract |
| Contact-form spam prevention (hashed IP address) | Legitimate interest in security | 1 hour |
- Data
- Contact details from the form
- Legal basis
- Your consent
- Retention period
- 24 months
- Data
- Documents from a project you hired us for
- Legal basis
- Contract performance
- Retention period
- As specified in the contract
- Data
- Contact-form spam prevention (hashed IP address)
- Legal basis
- Legitimate interest in security
- Retention period
- 1 hour
Purpose and legal basis
We use your data for three purposes only, each with its own legal basis. We never use your data for advertising or to send newsletters you didn't ask for.
Contacting you back as requested
Basis: the consent you give when you submit the form. You can withdraw it at any time by emailing us.
Carrying out a contract you hired us for
Basis: contract performance. Covers documents and data necessary to install and maintain the system.
Preventing attacks and automated form submissions
Basis: legitimate interest. Uses only server logs with the IP address already truncated.
Disclosure to third parties
We never sell or trade your data with anyone. Only the two service providers below have any involvement with data on this site, and we will update this table before adding a new one, not after.
The complete list of every provider involved with data on this site — there are no others beyond this.
| Provider | What they do | Data location |
|---|---|---|
| Resend | Receives and sends email from the contact form | Being confirmed with the provider |
| Plausible Analytics (a third-party cloud service) | Counts visitors anonymously, uses no cookies | Plausible Analytics' own servers (a third-party provider, not our own server) |
| Upstash (Redis) — backs up contact-form submissions in case email delivery fails | Temporarily stores a copy of contact-form data (added 2026-09-03) | Being confirmed with the provider |
- Provider
- Resend
- What they do
- Receives and sends email from the contact form
- Data location
- Being confirmed with the provider
- Provider
- Plausible Analytics (a third-party cloud service)
- What they do
- Counts visitors anonymously, uses no cookies
- Data location
- Plausible Analytics' own servers (a third-party provider, not our own server)
- Provider
- Upstash (Redis) — backs up contact-form submissions in case email delivery fails
- What they do
- Temporarily stores a copy of contact-form data (added 2026-09-03)
- Data location
- Being confirmed with the provider
Data within a customer's own project is never disclosed to any third party under any circumstance, because the system runs on the customer's own hardware and we keep no copy.
Your 8 rights under Thailand's PDPA
- Right to be informed
- Right to access and request a copy
- Right to data portability
- Right to object to processing
- Right to erasure or destruction
- Right to restrict processing
- Right to rectification
- Right to lodge a complaint with the Committee
How to exercise your rights
Send your request to privacy@cerebratechai.com or call 085-662-1113 We acknowledge within 7 days, and complete the request within 30 days
Data Protection Officer The CerebraTech AI team · privacy@cerebratechai.com