Prakobd privacy policy

1. Personal data controller

ndssoft, Tak province, Thailand, the developer and operator of Prakobd (prakobd.com), is the personal data controller. For personal data matters, contact ndssoft@natdesign.cloud

2. Data we collect

• Account data: email, name, password (only a one-way bcrypt hash is stored, so nobody can read the real password). If you sign up with Google, we receive only your Google account ID, email and name
• Shop profile (optional): shop name, profile picture, logo, business type, phone, LINE, contact email, website, address, province and tax ID, printed on the header of your job documents
• Design data: saved designs and material or machine profiles. Exported production files (SVG, DXF, G-code, PDF, STL) are not stored in the system. We keep only the file's fingerprint so credits are not charged twice. Prakobd administrators can view saved designs only as needed to help you and maintain the service
• Payments: the pack bought, amount, payment method, Stripe reference number, coupon and credit history. Card details are entered directly on Stripe's system and never pass through our servers
• Reseller: referral link, who referred you, and the commission payout account you filled in (bank, account number, account name or PromptPay)
• Usage: key events in the account such as sign-up, payment, file downloads (template and machine types), using the AI assistant, and plugin sign-in (program name, version and operating system)
• Visit statistics: a random ID kept in the browser, the page opened, the source (e.g. Google or Facebook), the campaign code in the link you clicked to arrive (UTM), and the device type (mobile, tablet or computer), without saving IP addresses in the statistics database. When you sign up or sign in, we link this random ID to your account so we know which campaign brought the member.
• Technical data: the web server may log your IP and browser type in system logs for security and to limit abnormal use

3. Text and photos sent to the AI assistant

When you use the AI assistant, the messages and images you attach are sent to Anthropic (provider of the Claude model) for processing as

We keep the messages, images and designs the AI produced in our system so the team can check quality, help solve problems when you contact us, and improve how the system reads designs. Only Prakobd system administrators can view them. Images are deleted automatically after 180 days

The free photo-reading step on the "Design with AI" page also sends the photo to the AI. We keep the reading results, and keep photos only for jobs the system cannot do yet, to see which designs to add. Those photos are also deleted after 180 days

When you press "Send to the team to draw the design", we keep the contact details and information you enter together with that image, and use them only to follow up about this job

The assistant answers questions (the "Ask the assistant" button, bottom right): the question you type, the page you have open, and a summary of the design open in the designer are sent to Anthropic to generate the answer. If you are signed in, the assistant looks at your credits, credit history, orders and job list to answer questions about them. Attached screenshots are only read by the AI and are not stored in the system. When the assistant hands a case over to the shop, a summary of the problem (and your account e-mail, if signed in) is sent to the team's e-mail. We keep conversations for 90 days to help solve problems and improve answers, then delete them automatically.

Job examples on the "Design with AI" page: your job is shown publicly as an example only if you tick the consent box when creating it and the team chooses to feature it. It shows the source image and the 3D design, and lets others open that design to edit it further. It does not show your name, e-mail or the text you typed. The image of a featured job is kept until you withdraw consent, which you can do at any time in "My AI jobs", and the job disappears from the examples page immediately

4. What do we use your data for?

• Providing the service under the contract: creating accounts, saving jobs, creating files, charging credits, receiving payments and paying affiliate commissions
• To contact you: send password-reset e-mails, confirm credit top-ups and answer your questions
• Legitimate interests: preventing fraud and abnormal use, keeping the service secure, and analyzing usage to improve the service
• Legal compliance: keep payment records as required by accounting and tax law

We do not sell or rent your personal data, and we do not use your data to train AI models

5. Recipient of the information

• Stripe: processes payments; receives your email, amount and order number
• Google: Google sign-in (when you choose it) and Google Analytics for site visit statistics
• Anthropic: processes the text and photos sent to the AI assistant
• E-mail provider: sends password reset e-mails and credit top-up receipts
• Server provider (Hostinger) and backup storage (Google Drive): backups are encrypted with AES-256 before upload
• The reseller who referred you: you see only a partially masked e-mail (e.g. so•••@gmail.com) and the amount you paid
• Government agencies: when required by law or by a lawful order

6. Transfer of data abroad

Some of the service providers above are located or process data outside Thailand, such as in the United States. We choose providers with data protection measures that meet international standards, and send only the data necessary for each service.

7. Cookies and browser data

Prakobd itself does not set cookies, but stores some data in the browser's storage (localStorage) so the system can work:

• Sign-in token, valid for 30 days (180 days for the plugin)
• Random ID for counting visit statistics
• The affiliate link that brought you here, kept for 30 days
• The design you are working on and the screen settings, so your work is not lost when you refresh

Google Analytics, Google Sign-In and Stripe may set their own cookies under those providers' policies. You can delete this data or turn cookies off in your browser settings, but you may need to sign in again

8. Data retention period

• Account, profile and design data: for as long as the account is active, or until you ask for deletion
• Images sent to the AI assistant: deleted automatically after 180 days. The text and designs you get are kept for the life of the account.
• Proof of payment and credit history: for the period required by accounting and tax law
• Visit statistics: 400 days
• Conversations with the Q&A assistant: 90 days
• Password reset link: expires in 1 hour
• Database backups: rotated out on the server within 60 days and in cloud storage (encrypted) within 180 days

9. Your rights

Under personal data protection law you have the right to:

• Request access to and a copy of your data
• Request correction of inaccurate data (you can edit your name, shop profile and password yourself on the account page)
• Request deletion of your account and data, or have it anonymized
• Request to restrict or object to the use of data
• Request transfer of data to another provider
• Withdraw consent previously given

Send a request by e-mail to ndssoft@natdesign.cloud from the e-mail you signed up with. We will reply within 30 days. In some cases we may need to keep certain data as required by law, such as proof of payment

If you believe we are not complying with the law, you can file a complaint with the Personal Data Protection Committee Office (PDPC)

10. Security

Data is transmitted over HTTPS, passwords are stored with one-way encryption, backups are encrypted before uploading to the cloud, changing your password signs you out of every device, and sign-in attempts are rate-limited to prevent password guessing

If a data breach occurs that puts your rights at risk, we will notify the relevant authorities and affected persons as required by law

11. Minor

This service is designed for shops, business operators and adults. Minors should use it with parental consent

12. Changes to the policy

We may update this policy as our services or the law change, with the update date shown at the top. For significant changes we will notify you on the website or by email