Privacy Policy
This Privacy Policy explains how Gramick House (“we”) collects, uses, discloses, and protects your personal data when you use AgenticOS, in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). It covers applicants, account users, and website visitors.
1.Data controller & scope
Gramick House is the data controller for account and service-usage data. For the end-customer data you bring into the system, you are the controller and we act as a data processor following your instructions.
2.Data we collect
(1) Account data such as name, email, organization name, tax ID; (2) payment data, processed via our payment provider (we do not store full card numbers); (3) usage data and conversations generated in the system; (4) technical data such as IP, device, access logs, and cookies.
3.Sources of data
We obtain data directly from you when you sign up and use the Service, from the system's automated operation, and from related providers such as the payment gateway and the chat/voice channels you connect.
4.Purposes & lawful basis
We use data to provide the Service and perform our contract (contractual basis); to bill, issue tax invoices, and prevent fraud (legal obligation / legitimate interest); to improve quality and contact you about the Service (legitimate interest); marketing is done only with your consent.
5.Cookies & tracking
We use essential cookies for login and security, and may use analytics cookies to improve the Service. You can manage cookies through your browser settings.
6.Disclosure & sharing
We do not sell your data. We disclose data only as necessary to processors that help us deliver the Service — such as the payment provider, AI model providers, cloud/file storage, and telephony — under confidentiality terms, or where required by law.
7.Cross-border transfers
Some providers (e.g. AI model or cloud providers) may process data outside Thailand. We will put appropriate safeguards required by the PDPA in place before such transfers.
8.Retention
We retain data for as long as necessary to provide the Service and as required by law (e.g. tax records for the period required by tax law). When no longer needed, we delete or anonymize it.
9.Security
We apply appropriate technical and organizational measures — access controls, encryption of sensitive data (e.g. API keys and secrets), and encrypted connections (HTTPS) — to protect data from unauthorized access.
10.Your rights under the PDPA
You may request access and copies, rectification, erasure or restriction, data portability, object to processing, and withdraw consent as permitted by law, and you may lodge a complaint with the Personal Data Protection Committee.
11.Your end-customers' data
For customer data you import or that arises from using the Service, you are responsible for notifying and obtaining consent from the data subjects as required by law. We process such data only as a processor on your instructions.
12.Children's data
The Service is intended for business use and does not target the collection of children's data. If children's data is collected inappropriately, please notify us for deletion.
13.Changes to this policy
We may update this policy from time to time, publishing the latest version on the website with an updated date. Material changes will be notified through appropriate channels.
14.Contact
For questions or to exercise your data rights, reach Gramick House through the console inside your account.