1. Scope & Roles

This policy covers personal data processed by ACAMP Research Team in connection with ACAMP platform, websites, and related services. For enterprise workspaces, the organization admin acts as data controller for their end-users; ACAMP Research Team acts as processor under a Data Processing Agreement (DPA).

2. Data We Collect

• Account & Identity: name, email, organization, role, login history.
• Usage & Telemetry: pages visited, feature usage, device/browser info, error logs.
• Workspace Data: project structures, activity records, files you upload.
• Support: messages, attachments, feedback.
• Payment (if applicable): billing contact, transaction references (via payment gateway).

3. Purposes & Legal Bases

• Provide the service — create accounts, authenticate users, deliver ACAMP features. (Legal basis: Contract)
• Improve & secure — monitor performance, fix bugs, prevent abuse. (Legal basis: Legitimate interests)
• Communications — service notices, security alerts, product updates. (Legal basis: Legitimate interests / Consent)
• Compliance — audits, legal requests, regulatory obligations. (Legal basis: Legal obligation)

4. Retention

We retain personal data as long as necessary to provide services and meet legal obligations. When no longer required, data will be deleted or anonymized. You may request deletion of your data, subject to legal or backup exceptions.

5. Sharing & Processors

We share data only with trusted vendors (processors) for hosting, analytics, support, and payment processing. All processors act under written agreements and only on our instructions. We do not sell personal data.

6. Cross-Border Transfers

If data is transferred outside Thailand, safeguards such as contractual clauses are used to ensure protection consistent with PDPA.

7. Security

We implement administrative, technical, and physical measures such as access controls, encryption, backups, and monitoring. No method is 100% secure, but we continually improve safeguards.

8. Cookies

We use essential cookies for login sessions and optional analytics cookies to improve usability. You may manage cookies in your browser; some features may not work without essential cookies.

9. Your Rights (PDPA)

• Access and obtain a copy of your data
• Request rectification or deletion
• Object or restrict processing
• Request data portability
• Withdraw consent (if applicable)
• Lodge a complaint with the regulator

10. Contact

Decarbonization Technology and Innovation Research Team (DTI)
Intelligent Informatics and Automation Research Group (IIARG)
National Electronics and Computer Technology Center (NECTEC)

Email: iiarg-dti@nectec.or.th
LINE: @DTIRT
Tel.: (+66) 2-564-6900 ext. 2690

If this policy changes, updates will be posted here with a new "Last updated" date.