Privacy Policy
Last updated: March 13, 2026
GenLabs ("we", "us", "our") is committed to protecting your personal data in compliance with Thailand's Personal Data Protection Act (PDPA), B.E. 2562 (2019). This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform at genlabs.in.th.
1. Data We Collect
We collect the following categories of personal data:
- Account Information: Name, email address, and encrypted password when you register.
- Usage Data: Generation history, credit usage, feature interactions, and session logs.
- Uploaded Content: Product images you upload for AI processing.
- Technical Data: IP address, browser type, device information, and access timestamps.
- Payment Data: Billing information processed securely through third-party payment providers.
2. How We Use Your Data
- To provide and maintain the GenLabs AI visual generation service.
- To manage your account, credits, and subscription plan.
- To process your uploaded images through our AI pipeline.
- To send service-related communications (account verification, password reset, plan changes).
- To improve our AI models using anonymized, aggregated data.
- To detect and prevent fraud, abuse, and unauthorized access.
3. Legal Basis (PDPA)
Under the PDPA, we process your personal data based on: (a) your consent provided during registration, (b) contractual necessity to deliver the Service, (c) legitimate interests in improving and securing the Service, and (d) legal obligations we must comply with.
4. Data Storage & Security
- Your data is stored on secure cloud servers with encryption at rest and in transit.
- Passwords are hashed using industry-standard bcrypt algorithms.
- Uploaded images are stored temporarily for processing and may be retained in your generation history.
- We implement access controls, monitoring, and regular security reviews.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Generated images are retained in your account history. Upon account deletion request, we will delete your personal data within 30 days, except where retention is required by law.
6. Data Sharing
We do not sell your personal data. We may share data with:
- AI Service Providers: To process image generation requests (images are sent to AI APIs).
- Cloud Infrastructure: For secure data storage and content delivery.
- Payment Processors: To handle subscription billing securely.
- Legal Authorities: When required by Thai law or court order.
7. Your Rights Under PDPA
As a data subject under the PDPA, you have the right to:
- Access: Request a copy of your personal data we hold.
- Rectification: Correct inaccurate or incomplete personal data.
- Deletion: Request deletion of your personal data.
- Restriction: Restrict processing of your data in certain circumstances.
- Portability: Receive your data in a structured, machine-readable format.
- Withdrawal of Consent: Withdraw your consent at any time (this will not affect past processing).
- Objection: Object to data processing based on legitimate interests.
To exercise any of these rights, please contact us at support@genlabs.in.th. We will respond within 30 days.
8. Cookies & Tracking Technologies
We use the following types of cookies and tracking technologies:
- Essential Cookies: Session management and language preferences (aura_lang). These are strictly necessary for the Service to function.
- Analytics Cookies: We use Google Analytics (via Google Tag Manager) to understand how visitors use our platform, measure page views, and improve the user experience. These cookies collect anonymized usage data.
- Advertising Cookies: We use Facebook (Meta) Pixel and TikTok Pixel to measure the effectiveness of our advertising campaigns, build audiences for ad targeting, and track conversions. These cookies may collect data about your browsing activity across websites.
- Cookie Consent: We store your cookie consent preference in your browser's local storage. You can withdraw your consent at any time by clearing your browser data or contacting us.
You can control cookies through your browser settings. Disabling analytics and advertising cookies will not affect your ability to use the Service, but may limit our ability to improve your experience.
9. Children's Privacy
GenLabs is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will promptly delete it.
10. International Data Transfers
Your data may be processed by AI service providers and cloud infrastructure located outside Thailand. We ensure that appropriate safeguards are in place to protect your data during any international transfer, as required by the PDPA.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The updated policy will be effective upon posting.
12. Contact & Data Protection Officer
For privacy-related questions or to exercise your PDPA rights, contact us at:
- Email: support@genlabs.in.th
- Website: genlabs.in.th