General Privacy Statement

Definitions

The following terms have specific meanings when used in this policy:

“Personal Data” refers to any information relating to an identified or identifiable natural person, such as name, email address, or IP address.

“Processing” means any operation performed on Personal Data, including collection, storage, adaptation, disclosure, or destruction.

“User” means any individual who accesses or uses the services provided by nexflorapexru.digital.

“Service” refers to the features and functionalities offered by nexflorapexru.digital, including AI model training and analytics.

“Cookies” are small data files placed on a user’s device to help the website recognize returning visitors and track usage patterns.

Purposes of Processing

We process personal data for the following legitimate purposes:

• Provide and maintain the Service
• Personalize user experience and customize features
• Communicate updates, support, and informational messages
• Analyze and improve platform performance
• Comply with legal obligations and respond to legal requests
• Prevent fraud and enhance security measures
• Facilitate billing and payment processes
• Conduct research and development for new AI capabilities

Legal Basis for Processing

We rely on the following legal grounds to process your personal data:

• Performance of a contract with the user
• Legitimate interests pursued by our company
• Compliance with legal obligations
• Consent where required by applicable law

GDPR Compliance

For users in the European Economic Area (EEA), we adhere to GDPR requirements:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (‘right to be forgotten’)
• Right to restrict processing
• Right to data portability
• Right to object to processing

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience and analyze platform usage.

Types of cookies we use include session cookies, persistent cookies, and third-party cookies.

Cookies are categorized as strictly necessary, performance, functional, and advertising cookies.

You can manage cookie preferences through your browser settings or our cookie management tool.

View our detailed Cookie Policy

Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

• Service providers and subcontractors assisting with operations
• Third-party analytics and monitoring services
• Payment and billing processors
• Legal authorities when required by law
• Business partners for integration and collaboration
• Affiliates and subsidiaries within our corporate group

International Data Transfers

Your personal data may be transferred to and processed in countries outside Thailand and the EEA to support global service delivery.

We implement appropriate safeguards such as standard contractual clauses and data transfer agreements to protect your data.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy or as required by law.

Account information is retained for the duration of the user’s active subscription and for a period of five years thereafter for compliance purposes.

Support requests and correspondence are stored for three years to improve service quality and training.

System logs and technical data are kept for one year to monitor system health and security.

Upon request or expiration, we securely delete or anonymize personal data following industry best practices.

Security Measures

We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

• Encryption of data at rest and in transit
• Regular security assessments and penetration testing
• Access controls and employee privacy training

Your Privacy Rights

At nexflorapexru, we recognize your rights under Thailand’s data protection framework and international best practices. You have a range of data subject rights that enable you to control how your personal information is collected, used, stored, and disclosed by Nexflora AI Development. Below is a summary of those rights and the steps you can take to exercise them.

• Right of access – request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification – request correction of inaccurate or incomplete personal data we hold about you.
• Right to erasure – request deletion of your personal data when processing is no longer necessary or legally permitted.
• Right to restriction of processing – request limitation of processing activities in certain circumstances, such as when accuracy is contested.
• Right to data portability – receive a structured, commonly used, machine-readable copy of your personal data for use with another controller.
• Right to object – object to the processing of your personal data on grounds relating to your particular situation, including direct marketing.
• Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time without affecting processing carried out prior to withdrawal.
• Right to lodge a complaint – file a complaint with the Personal Data Protection Committee or another competent supervisory authority if you believe your rights have been infringed.

Exercising Your Data Subject Rights

To submit a request regarding any of the rights listed above, please send a detailed description of your request along with proof of identity to our Data Protection Officer. Include your full name, contact information, Business ID (0008795035281), and specify which right you wish to exercise.

[email protected]

We endeavor to respond to all valid data subject requests within 30 calendar days of receipt. If additional time is required, we will notify you and provide an expected timeline for completion.