Privacy Policy
Last updated: April 17, 2026
1. Information We Collect
To provide our service, we collect the following categories of information:
- Registration information: Email address (used for account creation and login).
- Usage data: Generation records, credit transaction history, and operation logs.
- Uploaded content: Product images and reference photos uploaded by the user.
- Device information: Browser type and IP address (used for security protection).
2. How We Process Image Data
Purpose: Images uploaded by users are used solely for AI model photo generation and will not be used to train AI models.
Third-party transmission: To fulfil the generation service, uploaded images are transmitted to the following third-party services:
- AI model services: Images are sent to AI model APIs for generating model showcase photos. All transmissions are encrypted via HTTPS. Images are not persistently stored on third-party servers after processing.
- Platform storage: Generated images and necessary reference photos are stored on our servers to support history and download features.
We require all third-party providers to comply with applicable data protection regulations and to implement appropriate security measures.
3. Data Storage & Security
- Data storage location: Your data is stored on servers located in Hong Kong SAR, China. By using our service, you acknowledge that your data is processed and stored in Hong Kong.
- All data transmissions use HTTPS/TLS encryption.
- User passwords are stored using salted one-way password hashing; plaintext passwords are not stored.
- Generated images are stored on our servers and are not publicly accessible.
- We implement access controls and audit logging to protect data.
4. Data Retention
- Active accounts: Generated images and operation records are retained for the duration of the account.
- After deletion: Upon account deletion, all personal data (including images and records) will be permanently removed within 30 days.
- Logs: Operation logs and security audit logs are retained for a minimum of 60 days.
- Legal requirements: Transaction records and other data required by applicable law are retained for the minimum legally required period.
5. Your Rights
Under applicable law (including the Hong Kong Personal Data (Privacy) Ordinance), you have the following rights:
- Access: View your personal profile and usage data.
- Correction: Request correction of inaccurate information.
- Deletion: Request deletion of your personal data (available via the account deletion feature).
- Data portability: Request an export of your personal data.
- Withdrawal of consent: Withdraw any previously given consent.
6. Cookies & Tracking
This service uses essential cookies and session mechanisms to maintain login state and security. We do not use third-party advertising trackers or user profiling cookies.
7. Cross-Border Data Transfer
In the course of providing our services, your data may be transferred to third-party AI service providers located outside of Hong Kong (including but not limited to AI model API providers in Mainland China and other regions). Such transfers are conducted in compliance with applicable data protection laws, including the Personal Information Protection Law (PIPL) of the People's Republic of China and the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486). We require all third-party providers to maintain appropriate data protection measures and to process data only for the specific purposes for which it was provided.
For cross-border transfers involving personal information of data subjects in Mainland China, we have entered into Standard Contractual Clauses (SCC) as required by PIPL. A copy of the SCC may be requested by contacting support@aipaint.ink.
8. Data Export
You have the right to request an export of all personal data we hold about you. To exercise this right:
- Log in to your account and use the data export feature in Account Settings.
- A JSON file containing your profile, credit records, order history, and project metadata will be generated for download.
- You may also contact us at support@aipaint.ink to request a data export.
- We will respond to your request within 30 days.
9. Changes to This Policy
This privacy policy may be updated from time to time. Material changes will be communicated via in-app notification. We encourage you to review this policy periodically.
10. Minors
This service is intended for users aged 18 and above. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected data from a user under 18, we will delete it promptly upon verification.
11. Contact Us
For any data-related enquiries or requests, please contact us at: