Introduction

This privacy policy ("Privacy Policy") outlines the rules for using data collected when you ("you" or "your") use our services, visit our websites including https://www.nti.co.th ("Website"), use our APIs ("APIs"), and other services (collectively referred to as the "Services") provided by New Information Technology Co., Ltd. ("Company", "we", "our", and "us").

This policy describes the types of information we may collect from you or that you may provide when you use our Services, and our practices for collecting, using, maintaining, protecting, and disclosing that information. All capitalized terms in this Privacy Policy are defined in the Terms of Service found on our Website.

By accessing or using our Services, you agree to this Privacy Policy. We will notify you when we update this Privacy Policy.

Data Handling During Inference

Data submitted to and returned by our inference Service

We understand that the inputs you provide to our API and the outputs it generates may contain your Personal Information. We will not store, sell, or train using this data unless we have your explicit consent. We might sometimes store, for a limited period of time, the inputs and outputs to API calls for debugging purposes.

We have created this Docs article containing further information about how we process and treat the data supplied to or returned by our Services: https://modelharbor.com/docs/data

Data Privacy During Inference

ModelHarbor offers simple, scalable and cost-effective inference APIs. The goal of this document is to explain how we handle data during inference when you use the ModelHarbor APIs. When we mention a third party model, this means when you access that model through the ModelHarbor APIs.

Data Privacy

When using ModelHarbor inference APIs, you can be sure that your data is safe. We do not store on disk the data you submit to our APIs. We only store it in memory during the inference process. Once the inference is done the data is deleted from memory.

We also don't store the output of the inference process. Once the inference is done the output is sent back to you and then deleted from memory.

Exceptions to these rules are outputs of Image Generation models which are stored for easy access for a short period of time.

If you opt to use certain third-party models (e.g., Google model, Anthropic model, Microsoft Azure AI models), their respective privacy notices will govern the storage and use of data by those third parties. For example, if you use a Google model, Google will store the output as outlined in their Privacy Notice. If you opt to use an Anthropic model, Anthropic will store the output as outlined in their Trust Center. If you use Microsoft Azure AI models (including GPT 4.1 and o4-mini), Microsoft may temporarily store your data for debugging purposes but does not use your data to train their models, as outlined in Microsoft's privacy policies.

Bulk Inference APIs

When using our bulk inference APIs, you can submit multiple requests in a single API call. This is useful when you have a large number of requests to make. In this case we need to store the data for longer period of time, and we might store it on disk in encrypted form. Once the inference is done and the output is returned to you, the data is deleted from disk and memory after a short period of time.

No Training

Except for when you use specific third-party models (e.g., Google, Anthropic, or Microsoft Azure AI models), we do not use data for training our models. We do not store it on disk or use it for any other purpose than the inference process.

When using certain third-party models (e.g., Google or Anthropic models), the data you submit is subject to the receiving company's training policy. Microsoft Azure AI models (including GPT 4.1 and o4-mini) do not use your data for training purposes, but Microsoft may temporarily store your data for debugging and service improvement purposes.

No Sharing

Except for when you use specific third-party models (e.g., Google, Anthropic, or Microsoft Azure AI models), we do not share the data you submit to our APIs with any third party.

When using certain third-party models (e.g., Google, Anthropic, or Microsoft Azure AI models), we are required to transfer the data you submit to the company's endpoints to facilitate the request. For Microsoft Azure AI models, your data is processed through Microsoft's Azure AI services in accordance with Microsoft's privacy policies.

Logs

We generally don't log the data you submit to our APIs. We only log the metadata that might be useful for debugging purposes, like the request ID, the cost of the inference, the sampling parameters. We reserve the right to look at and log a small portions of requests when necessary for debugging or security purposes.

When using certain third-party models (e.g., Google model), the third party may log prompts and responses for a limited period of time, solely for the purpose of detecting violations of their Prohibited Use Policy. Microsoft Azure AI models may temporarily store your data for debugging purposes but do not use it for training, as governed by Microsoft's privacy policies.

Personal information and data you provide when using certain models through our API may be shared with the relevant API endpoints, as specified at the time of use.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Services, including:

Personal Information:

• Account information. When you create an account with us we will collect personal information such as your name and email address ("Personal Information").
• Communication information. We may also collect other information that you provide through your interactions with us, for example, if you request information about our services, Interact with our sales team or contact customer support, complete a survey, provide feedback, or post comments, or register for an event or participate in marketing activities ("Communication Information"). We may keep a record of your communications with us and other information you share during these communications.

Other Information you provide that does not identify you and is collected automatically:

• Device information. Data that does not identify you, such as your internet connection, the device you use to access our Services, and usage details ("Other Information"). We collect this information for the improvement of the Services.
• Usage data. We collect information to track user behavior on the Services, including how long you have been on a page, browsing actions, and patterns.
• Log Data: Information automatically sent by your browser or device when you use our Services. Log data includes your Internet Protocol (IP) address, the date and time of your request, and how you interact with our Services.

This information helps us to improve our Services and to deliver a better and more personalized service.

We use both cookies and web beacons for automatic data collection.

We collect this information:

• Directly from you when you provide it to us.
• Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies or other tracking technologies.
• From third parties, for example, our business partners.

Information You Provide to Us

The information we collect on or through our Services may include:

• Information that you provide when using the Services and submit Submissions.
• Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Services, subscribing to our service, requesting further Services, or when you report a problem with our Services.
• Information that you provide when you contact us.
• Details of transactions you carry out through our Services and of the fulfillment of your orders are processed using Stripe. You may be required to provide financial information before placing an order through our Services.

Information We Collect Through Automatic Data Collection Technologies

We do not collect personal information automatically, but we may tie non-personal information collected automatically to personal information about you that we collect from other sources or that you provide to us. We do not use automated decision-making such as profiling. Your data may be transferred, stored, and processed outside of your jurisdiction. However, we strive to adhere to appropriate data protection standards regardless of location.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Services and contents to you.
• To provide you with information, products, or Services you request from us.
• To provide you with notices about your account, including expiration and renewal notices.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Services or any products or Services we offer or provide through it.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.
• To provide personalized recommendations to you based on your browsing behavior.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We only disclose Personal Information that we collect or you provide as described in this privacy policy for the fulfillment of the service and do not store this data.

Personal Information and data you provide when using certain models through our API will be shared with the relevant API endpoints, as specified at the time of use.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

• Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
• Promotional Offers from the Company. We may periodically send you marketing communications that promote our Services consistent with your choices. You may opt out from receiving such communications, either by following the unsubscribe instructions in the communication you receive or by contacting us directly. Please note that we may still send you important service-related communications regarding our products or Services, such as communications about your subscription or account, service announcements or security information.

Accessing and Correcting Your Information

You can review, correct, update, or delete your personal information by logging into the Services and visiting your account profile page.

You may also send us an email at our email address to request access to, correct, restrict, transfer or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If you are a resident of the European Union, you may have additional rights under the General Data Protection Regulation (GDPR) concerning your personal data. To exercise these rights, please contact us at our email address [email protected].

Data Retention

We retain the personal information described in this Privacy Notice for as long as you use our services, as required by law (for example, to comply with legal tax or accounting requirements), or as otherwise communicated to you. After an account is deleted, your personal information is removed after 30 days, as specified in our terms.

Data Security

Our security measures comply with relevant industry standards and include technical and organizational measures to protect your personal information from accidental loss and unauthorized access, use, alteration, and disclosure. All information you provide is stored on our secure servers behind firewalls. Any payment transactions will be encrypted. However, no security measures are perfect or impenetrable. Therefore, we cannot guarantee the security of your information.

The safety and security of your information also depend on you. If we have given you (or you have chosen) a password to access certain parts of our Services, it is your responsibility to keep this password confidential. Please do not share your password with anyone.

Children Under the Age of 18

Our website is not intended for children under 18, and we do not knowingly collect their personal information. If you are under 18, do not use or provide any information on our services. If we discover personal information from a child under 18 without parental consent, we will delete it. If you believe we have information from or about a child under 18, please contact us via email.

Changes to Our Privacy Policy

If we make significant changes to how we handle your personal information, we will notify you via email to the address listed in your account or through a notice on the Services home page. The date the privacy policy was last updated is at the top of the page. You are responsible for ensuring we have your current, active, and deliverable email address and for periodically visiting our Services and this privacy policy to check for updates.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at [email protected] or you may contact us by post to:

New Information Technology Co., Ltd.
110/42 Village No. 3 Rattanathibet Road, Sai Ma
Mueang Nonthaburi, Nonthaburi 11000
Thailand
Phone: +66 2594 3334 - 5