Terms and Conditions update: commercial use of output, and personal data

On 17 October 2026 iApp Technology updated its Terms and Conditions. The update corrects clauses that did not reflect how our APIs are sold and used. Prices, credits and API contracts do not change.

What changed

Use of the output (Clauses 2 and 3). The previous text required written consent before any commercial use of the output. The new text states that you may use, copy, modify and distribute the output for any lawful purpose, including commercial purposes, without further consent from iApp. iApp claims no ownership of the output generated for you, and the rights in the data you submit stay with you.

Personal data in the output (Clause 2). The previous text said the output must not contain personal data. The identity card, driving licence, passport and face verification APIs return personal data by design, so the clause now says so. You need a lawful basis for the personal data you submit, including consent from and notice to the people concerned where the law requires them.

Roles under personal data law (Clause 10). For personal data in the data you submit, you are the data controller and iApp is the data processor. iApp processes that data only to provide the service, and keeps no copy of the images, documents, audio or text sent to its APIs after the response is returned. Two things are kept: a result that a service holds until you collect it, only for as long as that takes, and request records (time, endpoint, size, status and charge) for billing, security and support.

Products built on our APIs (Clause 2). The end users of your own products that incorporate our APIs may use the service through those products. You remain responsible for that use.

What you need to do

Nothing. Under Clause 5 the updated terms apply from 17 October 2026. If your legal team has questions about the update, or needs the previous version for its records, write to legal@iapp.co.th.