Skip to contentseeneoSEENEO
Back to studio

Privacy Policy

seeneo.ai respects your privacy. This document explains how we collect, use and protect your data under the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

Last updated · October 7, 2026 (2026-10-07) — AI partners and transcription update

Enterprise contact-data addendum · 2026-10-01

When you submit an Enterprise enquiry, we collect your account’s verified company email, company name, team size, use case, submission time and request status so our team can review and follow up.

Enquiries are stored privately in Supabase and sent as plain-text email through Resend to [email protected] for review and follow-up. The form accepts no attachments and does not subscribe you to marketing.

To request deletion of your enquiry, contact [email protected]. This addendum describes Enterprise intake without changing the other data descriptions below.

Overview

seeneo.ai is a studio for creating vertical Chinese-style series with Thai dialogue and product videos from descriptions and dialogue supplied by users. Each work is a 15-second video with a private job history.

As the “Data Controller” under the Personal Data Protection Act B.E. 2562, we are responsible for handling your data transparently and responsibly. This policy covers the website and all related seeneo.ai services.

If you disagree with this policy, please refrain from using our services. Starting to use the service or registering an account acknowledges that you have read and understood this entire document.

Personal data we collect

To provide video generation and keep your work history, we collect several types of personal data, limited to what is necessary for the stated purposes (data minimization).

  • Account informationDisplay name, email, profile image and user identifier from supported sign-in providers, such as Google or email OTP.
  • Content you createScene descriptions, Thai dialogue, titles, character or product details and completed videos, including existing data and works you previously stored in the service.
  • Technical informationBrowser type, approximate operating system, language setting, IP address and usage logs needed for security and troubleshooting.
  • Usage informationVideo-generation request history, job status and access rights, access times, features used and errors encountered.
  • Payment informationSubscribed plan, membership status, Stripe transaction references, credit usage history, coupon codes or referral codes.

We do not directly store your credit card or bank account details. These are processed by a payment service provider certified to the international PCI-DSS standard.

Data sources

We receive your personal data through several channels, each of which is transparent and available for you to verify.

  • Directly from youWhen you register, complete a profile, provide scene descriptions, dialogue or product details, or make payments through the service.
  • Sign-in providers (social login)When you use Google or supported email sign-in, we receive your name, email, profile image and reference identifier to the extent the provider permits sharing.
  • Your files and projectsWhen you request video generation, the system records descriptions, dialogue, story or product details and output information such as duration, file size and job status.
  • Automated systemsTechnical data collected automatically when you use the website, such as usage logs, browser information and processing events.

If we receive your data from a third party, such as a friend through a referral system, we will notify you as soon as reasonably possible as required by the PDPA.

AI use and AI-generated content

Automatic editing uses your uploaded footage and instructions. H3 shot generation is optional and requires approval of each quote.

  • Automatic editingSelected footage frames, transcripts and editing instructions are sent to an external AI service to choose shots and plan your edit. Manual changes do not invoke this service.
  • Video-generation inputsApproved shot descriptions are sent to the H3 video-generation service to carry out your request.
  • Storing your worksAccount information and job history are stored in Supabase. Videos use private storage; viewing and downloading require expiring links.
  • Audio generationSpeech in the footage and audio you upload is processed by our AI partners to transcribe captions. H3 videos may include model-generated audio.

Important model-training notice: We will not use your videos, audio, transcripts or subtitles to train public AI models without your prior explicit consent.

AI-generated content may be inaccurate or imperfect. You must verify videos before publishing and remain responsible for the content you create and share.

Disclosure to third parties

We do not sell your personal data to anyone. To operate the service, we need to disclose some data to trusted providers under appropriate data-processing agreements.

  • Infrastructure providersSupabase for authentication, databases and file storage.
  • AI providersOur AI partners are hosted AI service providers that process prompts, uploaded footage and audio, and generated outputs to provide transcription, editing assistance and video generation.
  • Payment service providerStripe for checkout, the billing portal, subscriptions and related transaction information.
  • Sign-in providersSupabase Auth and supported sign-in providers such as Google or email OTP.
  • Analytics providersFor usage statistics, performance measurement and improvements to service stability.
  • Government or law-enforcement authoritiesOnly when required by court order or law.

We select providers with suitable data-protection standards and establish processing obligations according to each provider’s role, including applicable PDPA requirements.

International data transfers

Our infrastructure providers may process or store data outside Thailand. Some of your data may therefore be transferred abroad, such as to the United States, European Union, Singapore or other countries where our providers are located.

Under Section 28 of the PDPA, we transfer data across borders only when one of the following conditions applies:

  • The destination has adequate data-protection standards as determined by the Personal Data Protection Committee.
  • Appropriate safeguards and enforceable data-subject rights are in place, such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules.
  • You have consented after being informed that data-protection standards may be inadequate.
  • The transfer is necessary to perform the contract between you and us.

We aim to limit international transfers to what is necessary to provide the service and delete data sent for processing as soon as processing finishes, unless the provider must retain it under its own policy.

Data retention periods

We retain personal data only as needed for processing purposes or as required by law.

  • Account informationFor the life of your account and for 90 days after you cancel it.
  • Generated videos and contentKept in your library for the life of your account. Contact support to exercise your right to delete projects or related files.
  • Scripts and text sent to AIDescriptions and dialogue are kept with your account’s job history. Data processed by our AI partners is also subject to their own retention policies.
  • Usage logs and technical dataNo more than 12 months.
  • Transactions and receiptsAt least 5 years, as required by Thai tax law.
  • Data involved in disputes or litigationUntil proceedings end and the limitation period has expired.

After the retention period, we securely delete or anonymize your data.

Security measures

We use suitable technical and organizational measures to protect your data from unauthorized access, use, disclosure, destruction or alteration.

  • EncryptionData is sent over encrypted connections and stored in accordance with the infrastructure provider’s security standards.
  • Supabase Row-Level Security (RLS)Database-row permissions ensure that each user can access only their own data.
  • Access controlData access is limited by role and the need to maintain the service.
  • Monitoring and logsImportant system events are recorded as supported by our tools and infrastructure providers.
  • Staff trainingWe set guidelines for our team to follow PDPA and data-security principles.

No system is 100% secure, even with strict measures. If a data breach may significantly affect your rights and freedoms, we will notify you and the Personal Data Protection Committee within 72 hours as required by the PDPA.

Data-subject rights

Under Sections 30–37 of the Personal Data Protection Act B.E. 2562, you have several legal rights as a data subject. We respect these rights and will facilitate their exercise.

  • Access and copy (Section 30)Request access to personal data we hold about you.
  • Rectification (Sections 35–36)Request correction of inaccurate, outdated or incomplete data.
  • Erasure (Section 33)Request deletion when data is no longer needed or when you withdraw consent.
  • Restriction (Section 34)Request restricted use while the accuracy of data is being verified.
  • Objection (Section 32)Object to processing, especially for direct marketing.
  • Withdrawal of consentWithdraw consent at any time, without affecting prior processing.
  • Data portability (Section 31)Request your data in a machine-readable format.
  • Complaint (Section 73)Complain to the Personal Data Protection Committee (PDPC).

Send rights requests to [email protected], through support email or the account page provided. We will respond within 30 days of receiving your request, normally free of charge.

Cookies and tracking technologies

We use cookies and similar technologies to keep the service working smoothly and understand aggregate usage patterns.

  • Essential cookiesFor sign-in, session persistence and security; these cannot be disabled.
  • Analytics cookiesTo measure user counts, popular pages and feature performance.
  • Service logsTo maintain security, investigate errors and track video-generation jobs.

You can manage cookies in your browser settings. Disabling them may prevent some features from working fully.

Payments and payment providers

seeneo.ai uses Stripe for subscriptions, billing cycles and the billing portal so users can pay and manage their plans securely.

Transactions are processed by a PCI-DSS-certified payment service provider. We do not store credit card numbers, CVV codes or bank account numbers in our systems.

We retain only transaction references, amounts, dates, plan types and payment status for receipts, tax invoices and after-sales support.

For refunds or payment disputes, contact our team directly. We will work with the payment provider to resolve the issue as soon as possible.

Minors’ data

seeneo.ai requires users to be at least 18 years old to enter a service contract under the Civil and Commercial Code, consistent with the age requirement in our Terms of Service.

For processing that relies on consent under Section 20 of the PDPA, users aged 18–20 who have not reached legal majority may be asked for additional parental consent specifically for sensitive-data uses. For children under 10, the parent or guardian must provide all consent on their behalf.

If we discover that a minor’s data was collected without appropriate consent, we will delete it as soon as possible. Parents or guardians who learn that a child used the service without permission should contact [email protected].

Policy changes

We may update this Privacy Policy from time to time to reflect changes to the service, technology or applicable law.

For material changes, such as new processing purposes, a change to a major AI provider or changes to data-subject rights, we will give at least 30 days’ advance notice by email or on the website or service.

Please review this policy periodically. The latest revision date always appears at the top. Continuing to use the service after changes take effect means you accept the new terms.

Contact the data protection officer

If you have questions or wish to exercise PDPA rights, contact our data protection officer (DPO):

We will respond within the period required by law, normally within 30 days of receiving your request.

If you believe we have not complied with the PDPA or are dissatisfied with our response, you may complain to the PDPC under Section 73 at www.pdpc.or.th or another channel the PDPC announces.

Thank you for trusting seeneo.ai. We will take the best possible care of your data so you can create videos with subtitles confidently and safely.