Privacy Policy

1. Introduction

Studio Foto AI ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI photo generation platform.

2. Information We Collect

2.1 Personal Information

• Name and email address when you create an account
• Payment information processed through Xendit (we don't store card details)
• Photos you upload for AI model training
• Generated photos and associated metadata

2.2 Technical Information

• IP address and device information
• Browser type and version
• Usage patterns and feature interactions
• Error logs and performance data

2.3 Cookies and Tracking

We use essential cookies for authentication and preferences. We don't use tracking cookies for advertising.

3. How We Use Your Information

• Provide and improve our AI photo generation services
• Train personalized AI models using your uploaded photos
• Process payments and manage subscriptions
• Send service-related communications and updates
• Analyze usage patterns to improve our platform
• Ensure platform security and prevent fraud
• Comply with legal obligations

4. How We Share Your Information

4.1 Third-Party Services

• Replicate: AI model training and photo generation (photos are processed but not stored)
• Xendit: Payment processing for Indonesian payment methods
• Cloud Storage: Secure storage of your photos and generated content

4.2 We Do Not Sell Your Data

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

4.3 Legal Requirements

We may disclose your information when required by law or to protect our rights and safety.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit and at rest
• Regular security audits and updates
• Limited access controls for staff
• Secure data centers and infrastructure
• Regular backups and disaster recovery plans

6. Data Retention

• Account Information: Retained while your account is active
• Uploaded Photos: Stored for AI model training, deleted upon account closure
• Generated Photos: Retained according to your storage preferences
• Payment Records: Kept for tax and legal compliance (typically 7 years)
• Usage Analytics: Anonymized data may be retained indefinitely

7. Your Rights and Choices

7.1 Access and Control

• Access and download your personal data
• Update or correct your information
• Delete your account and associated data
• Export your generated photos

7.2 Communication Preferences

• Opt out of marketing communications
• Control notification settings
• Manage email preferences

7.3 Data Portability

You can request a copy of your data in a machine-readable format.

8. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be processed in countries outside Indonesia. We ensure appropriate safeguards are in place to protect your information according to this Privacy Policy.

10. AI and Biometric Data

We use AI to analyze facial features in uploaded photos for model training. This biometric data is:

• Used solely for AI model creation and photo generation
• Not shared with third parties beyond our service providers
• Deleted when you delete your account
• Protected with additional security measures

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify you of significant changes via email or through our Service.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@studiofotoai.com

Address: Jakarta, Indonesia

For data protection concerns, you may also contact the Indonesian Data Protection Authority.

13. Indonesian Privacy Law Compliance

This Privacy Policy complies with Indonesian privacy laws, including but not limited to:

• Law No. 27 of 2022 on Personal Data Protection
• Government regulations on data protection
• Bank Indonesia regulations for payment data