ai.KMITL Privacy Policy
Your privacy and data security are our top priorities. Learn how we protect and handle your information.
Last Updated: 1 November 2025
1. Introduction
ai.KMITL ("Platform," "we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at ai.kmitl.ac.th.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Platform.
2. Information We Collect
A. Information You Provide Directly
- •KMITL Account Information: Your @kmitl email, name, and institutional affiliation
- •API Keys: If you use "Bring Your Own Key" (BYOK), we store encrypted API keys
- •Conversation Data: Your chat messages and interactions with AI models
- •Custom Configurations: MCP servers, Supermemory settings, and custom model endpoints
- •Usage Preferences: Theme selection, model preferences, and account settings
B. Information Collected Automatically
- •Usage Statistics: Number of messages sent, AI models used, timestamps
- •Device Information: Browser type, IP address, operating system
- •Access Logs: Login times, session duration, feature usage
3. How We Use Your Information
We use collected information for:
- Providing and maintaining the Platform
- Processing your requests and managing your account
- Tracking your weekly usage quota and usage limits
- Improving Platform functionality and user experience
- Ensuring platform security and preventing abuse
- Communicating important updates or policy changes
- Complying with legal obligations
We do NOT:
- Sell your personal data to third parties
- Use your conversations for AI model training without consent
- Share your API keys with unauthorized parties
- Use your data for marketing purposes without consent
4. Data Security
Your data security is our priority:
API Keys
Encrypted at rest and in transit using industry-standard encryption
Conversations
Stored securely with access controls
Institutional Protection
All data is housed on KMITL infrastructure
Regular Security Audits
We conduct periodic security assessments
Access Controls
Only authorized personnel access user data
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
5. Data Retention
- Active Accounts: Conversation data retained while your account is active
- Inactive Accounts: Data retained for 12 months after last login, then deleted
- Usage Quota Resets: Weekly usage quotas reset every Monday
- Deletion Requests: You may request data deletion at any time
6. Third-Party Services
ai.KMITL integrates with external AI providers:
When you interact with these services:
- •Your messages are sent to the respective AI provider
- •Each provider has its own privacy policy
- •We recommend reviewing their policies at their websites
- •API keys you provide are sent only to your designated provider
Data Retention on AI Provider Servers
For every AI model that supports requesting no data retention, we actively request that all API calls have zero data retention on cloud servers. This means:
- Your conversations are not stored by the AI provider for training purposes
- Your data is processed in real-time and not retained after the response is generated
- We configure all applicable models with the strictest no-retention policies available
Important: Despite these protections, you should never send sensitive, confidential, or private data through the platform. While we implement the strongest available safeguards, users remain responsible for the information they choose to share with AI models.
We are not responsible for third-party privacy practices.
7. Cookies & Tracking
We use cookies for:
Session management and authentication
User preferences (theme, language)
Security and fraud prevention
You can control cookies through your browser settings. Disabling cookies may limit Platform functionality.
8. Your Privacy Rights
KMITL Community Members have the right to:
Access
Request a copy of your personal data
Correction
Update or correct inaccurate information
Deletion
Request deletion of your account and data
Opt-Out
Disable certain data collection practices
Data Portability
Export your conversation history
To exercise these rights, contact: kdmc@kmitl.ac.th
9. Children's Privacy
ai.KMITL is intended for KMITL students and staff. We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete the information and notify parents/guardians.
10. International Users
ai.KMITL is hosted on KMITL servers in Thailand and complies with Thai data protection regulations. If you access from outside Thailand, you acknowledge data transfer to Thailand.
11. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Platform constitutes acceptance of changes.
12. Contact Us
For privacy concerns or requests, contact:
Address
1 Chalong Krung Road, Lat Krabang District, Bangkok 10520, Thailand
KMITL Privacy Officer
KMITL Data Management Center (KDMC)
13. Governing Law
This Privacy Policy is governed by the laws of Thailand and is subject to Thai data protection regulations.