Privacy Policy — opsdirecomo

Definitions

Key terms used in this policy to help you understand what we process and why. Clear definitions support transparency about personal data related to software and AI services.

Personal data means any information that identifies or can be used to identify an individual, such as name, email, phone number, business contact details, or technical identifiers tied to a person.

Processing covers any operation performed on personal data, including collection, storage, organization, modification, analysis, transfer, and deletion, whether automated or manual.

User refers to anyone who interacts with opsdirecomo.digital, engages our services, registers for consultations, or provides information during a client engagement.

Service refers to the range of offerings from opsdirecomo, including AI software development, model deployment, consulting, integration, and maintenance services.

Cookies are small text files placed on devices to recognize returning visitors and support site functionality, analytics, and user preferences.

Data We Collect

We collect only the data necessary to provide services, contact clients, and improve operational quality. Data categories below show typical information collected directly, automatically, and from third parties.

Data You Provide

When you contact us, register, or use our services, you may provide:

• Contact information: name, business email, phone number, company name, and job title
• Project details: requirements, datasets, technical environment, and integration needs
• Billing and contractual information: billing address, tax or business identification (Business ID: 2138150111145), and invoicing details
• Support communications: messages, feedback, and logs shared during troubleshooting
• Consent preferences and marketing opt-ins when you subscribe to updates
• Any other information you choose to send in attachments or forms related to a project

Data Collected Automatically

We automatically collect technical and usage data to operate the site and improve services:

• Device and browser information, IP address (for security and localization)
• Usage data such as pages visited, click paths, and session duration
• Performance and error logs from our services and APIs
• Cookies and similar tracking technologies for functionality and analytics
• Aggregated, anonymized metrics used to improve solutions
• Geolocation inferred at a country level to route support and comply with regional requirements

Third-Party Data Sources

We may receive data from trusted third parties to enrich client profiles and support integrations:

• Professional contact data from business directories when initiating outreach
• Payment processors and invoicing partners for billing records
• Cloud and platform providers who host or process technical logs and backups

Purposes of Processing

We process personal data for legitimate operational reasons to deliver and improve our AI development and integration services:

• To provide and manage contracts, projects, and related communications
• To set up, operate, and secure software, data pipelines, and hosted models
• To perform billing, invoicing, and tax compliance
• To respond to support requests, contribute incidents, and track troubleshooting history
• To send service updates, product notices, and information relevant to your engagements when you opt in
• To analyze anonymized usage patterns to enhance performance and user experience
• To comply with legal obligations and respond to lawful requests from authorities
• To manage partnerships and subcontractor relationships needed to deliver solutions

Legal Basis for Processing

We rely on appropriate legal bases under applicable law to process personal data for each purpose described:

• Contract performance: processing necessary to deliver agreed services
• Legitimate interests: running and improving our business, security, and fraud prevention
• Consent: where you have provided explicit consent for marketing communications
• Legal compliance: to meet regulatory, tax, or legal obligations

Rights for EU Data Subjects

If EU data protection rules apply, you may have rights in relation to your personal data. We provide mechanisms to exercise those rights promptly and transparently.

• Access: request a copy of personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion where retention is no longer necessary under law
• Restriction: request limitation on certain processing activities
• Data portability: request transfer of your data in a commonly used format
• Objection: object to processing based on legitimate interests or for direct marketing

Cookies and Tracking

We use cookies and similar technologies to provide site functionality, analyze usage, and support secure sessions. You can control cookie preferences through your browser and our cookie banner.

Cookies used include essential cookies (required for site operation), analytics cookies (to measure and improve performance), and functional cookies (to remember preferences).

Categories: Essential, Performance & Analytics, Functional, and Marketing (only with consent).

You can manage cookie settings via your browser or our cookie consent tool. Disabling non-essential cookies may affect some site features.

Cookie Policy

Sharing and Disclosure

We share personal data only when necessary to deliver services, comply with law, or work with trusted partners under confidentiality terms.

• Service providers and subcontractors who assist with hosting, analytics, billing, and deployments
• Legal and regulatory authorities where required by law or in response to lawful requests
• Professional advisors such as auditors and legal counsel on a need-to-know basis
• Partners or acquirers in connection with a business transaction, subject to confidentiality protections
• Aggregated or anonymized data that no longer identifies individuals may be shared freely
• Clients and vendors when necessary to coordinate integration and support services

International Data Transfers

Because we operate internationally and use cloud providers, personal data may be transferred outside your country. Transfers are managed with appropriate safeguards to maintain data protection standards.

We use standard contractual clauses, reliance on providers with adequate protections, and technical measures such as encryption to protect data during international transfers.

Data Retention

We retain personal data only for the time needed to fulfill the purpose it was collected and to meet legal and contractual requirements.

Account and client records are retained for the duration of the engagement and for a reasonable period thereafter to support billing, audits, and legal obligations.

Communications and support records are kept for a period necessary to resolve issues and improve services, typically up to 3 years unless otherwise required.

Operational logs and technical records are retained according to security and compliance needs, often in aggregated or pseudonymized form.

Upon request where applicable and subject to legal limits, we will delete or anonymize personal data that is no longer required.

Security

We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, and destruction. Security practices are reviewed regularly and scaled to the sensitivity of data processed.

• Encryption in transit and at rest for sensitive data
• Role-based access control, logging, and regular access reviews
• Periodic security assessments, backups, and incident response planning

Your Rights

You can contact us to exercise your rights regarding personal data. We respond to requests in line with applicable laws and verify identity as needed.

• Request access, correction, deletion, or portability of your data where permitted
• Withdraw consent for marketing communications at any time without affecting service delivery
• File a complaint with a supervisory authority if you believe your rights are not respected
• The right to data portability: request a copy of your personal data in a commonly used, machine-readable format to transfer to another service provider where technically feasible.
• The right to restrict processing: ask us to limit how we process your personal data while a dispute about accuracy or lawful processing is resolved.
• The right to withdraw consent: if you previously consented to processing, you can withdraw that consent at any time for future processing activities.
• The right to lodge a complaint: if you believe our handling of your personal data is incorrect, you may contact local supervisory authorities in Thailand or reach out to our privacy contact for resolution.
• The right to be informed: you have the right to clear, timely information about what personal data we collect, why we collect it, and how we use it.

How to exercise your privacy rights

To exercise any data subject rights—such as access, correction, deletion, portability, or objection—please submit a request to our privacy team. Include your full name, the email used with opsdirecomo.digital, and a clear description of your request. We may ask for reasonable identity verification to protect your account and other users.

[email protected]

We aim to acknowledge requests within five business days and to complete routine requests within 30 calendar days. Complex requests or those requiring third-party coordination may take longer; we will notify you if we need additional time.