Schemy — Legal Documents

📄 LEGAL DOCUMENT

Last updated: March 2026

Schemy is operated by K&A Software House, Bangkok, Thailand. This Privacy Policy explains what data we collect, why we collect it, and how we protect it. By using Schemy you agree to this policy.

Data We Collect

Account data — your name and email address when you register
Usage data — tools used, AI queries sent, session activity
Payment data — billing info processed securely by Stripe. We never store raw card details
Card token — an encrypted customer/payment token stored by Stripe for auto-renewal and subscription billing (credit/debit card subscribers only). Raw card numbers never stored on our servers
Message data — AI prompts you send. Not retained after response is delivered
Image uploads — circuit images for analysis. Not stored after your session
Usage analytics — which tools you use, how often you return, session frequency. Stored in our database, never sold to third parties

How We Use Your Data

To provide Schemy's AI-powered learning tools and features
To manage your subscription and enforce daily usage limits
To process payments and auto-renew subscriptions via Stripe (supporting PromptPay, Credit/Debit cards, and PayPal)
To send account emails — receipts, renewal notices, password resets only
We do not sell your data to any third party
We do not use your data for advertising purposes

Third Party Services

By using Schemy you acknowledge your data may be processed by:

Service	Purpose	Data Shared
Ollama (private server)	AI responses (may be used in any tier)	Your AI messages
Google Gemini API	AI responses (may be used in any tier)	Your AI messages
DeepSeek API	AI responses (may be used in any tier)	Your AI messages
Stripe	Payment processing (PromptPay, Credit/Debit cards, PayPal) & subscriptions	Payment details, encrypted customer/card tokens

Data Storage and Security

We use bcrypt password hashing, JWT authentication with expiry, and HTTPS on all endpoints. Raw card data never touches Schemy's servers — handled entirely by Stripe. Payment records kept 7 years as required by Thai tax law.

Your Rights Under PDPA

Access your personal data held by Schemy
Request correction of inaccurate data
Request deletion of your data
Withdraw your consent at any time
Cancel auto-renewal at any time from account settings
Lodge a complaint with Thailand's PDPC

Contact: [email protected] — we respond within 7 days.

Schemy uses browser localStorage to store your authentication token only. We do not use tracking or advertising cookies.

Contact

K&A Software House
Bangkok, Thailand
Email: [email protected]
Website: schemy.net

📄 LEGAL DOCUMENT

Last updated: March 2026

By creating an account or using Schemy you agree to these Terms of Service. Please read Section 03 carefully regarding auto-renewal for credit/debit card payments.

Description of Service

Schemy is an AI-powered electronics learning platform. Educational tool only — not professional engineering advice.

Accounts

You must provide accurate information when registering
You are responsible for keeping your password secure
One account per person — account sharing is not permitted
You must be at least 13 years old to use Schemy
We reserve the right to suspend accounts that violate these terms

Subscriptions and Payments

Tier	Price	AI Queries	Image Uploads	AI Provider
Free	0 THB ($0 USD)	10/day	None	Ollama, Gemini, or DeepSeek
Pro	99 THB (≈ $2.99 USD)/month	100/day	20/week	Ollama, Gemini, or DeepSeek
Ultra	299 THB (≈ $8.99 USD)/month	1,000/day	500/month	Ollama, Gemini, or DeepSeek

Credit / Debit Card

AUTO-RENEWS

Automatically renews every 30 days via Stripe. Your card is charged on the same date each month until you cancel.

PromptPay

MANUAL RENEWAL

Scan PromptPay QR code via Stripe. Does not auto-renew. You must pay manually every 30 days. Account returns to Free tier if not renewed.

PayPal

AUTO-RENEWS / MANUAL

Pay securely using your PayPal account balance or linked payment methods via Stripe integration.

⚠ Auto-Renewal Notice: Credit and debit card subscribers will be charged automatically every 30 days via Stripe. You will receive an email reminder 3 days before each renewal. Cancel anytime from Account Settings → Subscription → Cancel Auto-Renewal.

Upgrades take effect immediately with proration — you pay the difference for remaining days
Downgrades take effect at the end of the current billing period
No refunds for unused days. Contact [email protected] within 7 days for technical issues

Cancelling Auto-Renewal

Go to Account Settings → Subscription → Cancel Auto-Renewal. Cancellation must be done at least 24 hours before the renewal date. You retain access until the end of the current billing period.

Acceptable Use

Do not share your account credentials with others
Do not attempt to bypass subscription tier limits
Do not use automated scripts to abuse the AI query system
Do not use Schemy to generate harmful or illegal content
Do not reverse engineer, copy, or redistribute Schemy's tools or UI

AI-Generated Content

AI responses may contain errors — verify critical information independently
Generated code should be reviewed before deployment
Exam questions are for practice only
We are not liable for decisions made based on AI output

Intellectual Property

Schemy's tools, UI, templates, and branding are owned by K&A Software House. Content you create using Schemy belongs to you.

Limitation of Liability

To the maximum extent permitted by Thai law, K&A Software House shall not be liable for indirect or consequential damages. Total liability shall not exceed the amount paid in the 30 days prior to the claim.

Governing Law

These terms are governed by the laws of the Kingdom of Thailand. Disputes shall be resolved in the courts of Bangkok, Thailand.

Contact

K&A Software House
Bangkok, Thailand
Email: [email protected]
Website: schemy.net

📄 LEGAL DOCUMENT

Data Handling

Last updated: March 2026

This document describes how Schemy collects, stores, processes, and protects user data.

Data We Collect and Why

Data Type	What	Why	Retention
Account	Name, email, hashed password	Authentication	Until deleted
Subscription	Tier, expiry date, Stripe customer ID	Access control	Until deleted
Card token	Encrypted customer/payment token (stored by Stripe)	Subscription billing & auto-renewal	Until cancelled
Usage	Query count, upload count, last active, tools used	Tier enforcement & analytics	Reset daily / logs 90d
Messages	AI prompts sent by user	Generate AI response	Not stored after use
Images	Uploaded circuit images	AI analysis	Not stored after session
Analytics	Tools used, session count, return frequency	Product improvement	While account is active
Payment	Stripe transaction ID, amount	Billing records	7 years (Thai law)

Auto-Renewal Data Flow

For credit/debit card and recurring subscribers, Stripe stores encrypted customer and payment tokens on their secure PCI-DSS Level 1 compliant servers. Schemy stores only the Stripe customer ID and subscription ID — never raw card numbers or CVV. PromptPay payments processed via Stripe do not store credit card data.

AI Data Flow

AI Provider	Infrastructure	Data Destination	External?
Ollama	K&A private server	Stays on K&A infrastructure	No
Google Gemini	Google's cloud	Google's servers	Yes — Google API
DeepSeek	DeepSeek cloud	DeepSeek servers	Yes — DeepSeek API

Security Measures

Passwords hashed with bcrypt (minimum cost factor 12)
JWT authentication tokens expire after 7 days
HTTPS enforced on all endpoints
API keys stored as environment variables, never in source code
Raw card data never touches Schemy servers — handled entirely by Stripe
Database access restricted to backend server only
No sensitive data logged in application logs

User Data Requests

Request Type	How to Request	Response Time
Data Export	Email [email protected]	Within 7 days
Data Deletion	Email or account settings	Within 30 days
Data Correction	Account settings or email	Within 7 days
Cancel Auto-Renewal	Account Settings → Subscription → Cancel	Immediate
Consent Withdrawal	Email [email protected]	Within 7 days

Data Breach Response

Identify and contain the breach within 24 hours of discovery
Notify affected users via email within 72 hours
Report to Thailand's PDPC if required under PDPA
Document the incident and implement preventive measures

Third Party Processors

Processor	Purpose	Privacy Policy
Ollama (K&A server)	AI responses (all tiers)	Private infrastructure
Google Gemini API	AI responses (all tiers)	google.com/privacy
DeepSeek API	AI responses (all tiers)	deepseek.com/privacy
Stripe	Payment processing (PromptPay, Credit/Debit cards, PayPal) & subscriptions	stripe.com/privacy

Contact

K&A Software House
Bangkok, Thailand
Email: [email protected]
Website: schemy.net