นโยบายความเป็นส่วนตัว

01Who we are and how to reach us

Wayu Research (“Wayu”, “we”) is a non-profit AI research initiative based in Bangkok, Thailand. For the purposes of Thailand’s Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”) and, where it applies, the EU and UK General Data Protection Regulation (“GDPR”), we are the data controller for this website (the “Site”). You can reach us at hello@wayuresearch.org.

02The short version

• The Site has no accounts, no forms, no newsletter and no comments.
• We use Google Analytics to count visits and a handful of clicks. It is the only third-party service that runs in your browser, and you can block it.
• We set one cookie of our own, and only if you ask us to remember your language. Google Analytics sets two more; see Cookies below.
• We show no advertising, and we never sell personal data or share it for marketing.

03What we process when you visit

Request logs. Like every website, the Site is served by a hosting provider whose servers see your IP address, your browser and device information, the address you requested, the page that referred you and the time of the request. The provider keeps these logs to deliver the Site and to protect it against abuse, for the period set out in its own policy. We do not run analytics over them.

Analytics. We use Google Analytics 4, a service of Google, to learn how many people read the Site, which pages and languages they read, and which of a few links they follow: the Hugging Face and Typhoon links, the language switch, the section links and the “Get in touch” button. Google’s script loads after the page has appeared and sends Google the page you are on, the event, the language the page is written in, and technical information about your browser and device, together with your IP address. Google uses the IP address to derive a coarse location and states that Google Analytics 4 does not log or store it. We use Google Analytics only to measure, never for advertising.

Language. When you arrive at the root address, we read the language your browser asks for (the Accept-Language header) to decide whether to show you Thai or English. We do not store it. If you pick a language with the switch in the masthead, we set the wayu.locale cookie described below so that the root address remembers your choice.

Links you follow. If you reach the Site through a link that carries tracking parameters (such as utm_source), those parameters may appear in the hosting provider’s logs and in Google Analytics. We add none of our own.

Fonts. The typefaces on the Site are served from our own address. Your browser does not contact Google or any other font provider to display them.

Apart from Google Analytics, the Site runs no third-party scripts, and it has no login, no forms, no newsletter, no embedded content and no local storage. There is nothing else to collect.

04When you write to us

If you email us at hello@wayuresearch.org, we keep your address and your message for as long as we need them to answer you and to keep a record of the exchange. We delete them when they are no longer needed.

05Personal data in research datasets

We publish datasets on Hugging Face. They are built from publicly available sources and may incidentally include personal data: a person’s name inside a web address in our Common Crawl index, for example, or a speaker’s voice in a speech benchmark. We process such data for scientific research in the public interest, under the PDPA’s provisions for research and statistics and our legitimate interest in doing that research, and we minimise it where we practically can. Each dataset’s card on Hugging Face describes what that dataset contains and the licence it carries.

Asking us to remove your data. If you believe one of our datasets contains personal data about you and you would like it removed, write to hello@wayuresearch.org with the name of the dataset and enough detail to locate the records. We will review the request and, where it is warranted, remove or filter the data in the next release of the dataset. Please understand what we cannot do: we cannot remove data from copies that others have already downloaded, and we cannot remove pages from upstream sources such as Common Crawl, which has its own process for that.

06Cookies

The Site sets one cookie of its own, and Google Analytics sets two. All three are first-party cookies — they are set under our address, not Google’s — and none of them is used for advertising.

Our cookie is strictly necessary to honour the choice you made, and the Site works without it. The Google Analytics cookies are not necessary: you can refuse or delete them in your browser settings, block them with a content blocker or with Google’s own browser add-on, and the Site works exactly the same.

07Third parties

Hosting provider. The Site is served by a hosting provider that processes request logs on our behalf, as described above, under its own terms and privacy policy.

Google Analytics. Google processes the analytics data described above on our behalf, under Google’s data processing terms and its privacy policy. Google may process it on servers in the United States and elsewhere.

Hugging Face and GitHub. Our artifacts are published on Hugging Face and GitHub. When you follow a link there, or download, discuss or contribute to our work on those platforms, their privacy policies apply, not this one.

08Why we are allowed to process this data

Under the PDPA — and, for visitors in the EU or UK, the GDPR — we rely on:

• legitimate interests, for keeping the Site running and secure, for understanding how it is read, and for answering people who write to us — or, for analytics cookies, your consent where the law where you live requires it;
• necessity for the service you asked for, for remembering the language you chose;
• scientific research, for personal data that turns up in our datasets;
• consent, in any other case where we ask for it.

09Sharing and international transfers

We do not sell personal data. We share it only with the providers that work for us — the hosting provider that serves the Site and Google, which runs our analytics — acting on our instructions, and with authorities when the law requires us to. Both may process data on servers outside Thailand, including in the United States; we rely on the contractual safeguards in their terms of service and data processing terms.

10How long we keep data

• Request logs: for the period set by the hosting provider.
• Google Analytics: event data is kept by Google for the period set on our Analytics property, which is at most fourteen months. The two _ga cookies last two years unless you delete them first.
• The wayu.locale cookie: one year from when you last chose a language.
• Email correspondence: as long as it is needed to deal with the matter, then deleted.

11Your rights

Under the PDPA, and under the GDPR where it applies, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and to withdraw any consent you have given. You also have the right to complain to Thailand’s Personal Data Protection Committee (PDPC), or to the supervisory authority where you live.

To exercise any of these rights, write to hello@wayuresearch.org. We will respond within the period the law allows.

12Children

The Site is not directed at children and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, write to us and we will delete it.

13Security

The Site is served over HTTPS. We collect as little as we can, and what we do hold — essentially, email correspondence and aggregate analytics — is accessible only to the people who need it.

14Changes to this policy

We may update this policy from time to time. The date at the top of the page tells you when it last changed, and any material change will be noted here.

15Contact

Questions, requests and complaints about personal data go to hello@wayuresearch.org.