Privacy Policy
Effective Date: December 19, 2024
GDPR Compliance: This Privacy Policy complies with the General Data Protection Regulation (GDPR) and provides you with information about your data protection rights.
At HanFuPhoto.com ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at hanfuphoto.com.
1. Information We Collect
1.1 Information You Provide
- Uploaded Images: When you upload photographs to generate AI portraits, we temporarily store and process these images on our servers. Images are processed for AI generation and are not used for any other purpose.
- Email Address: We may collect your email address when you make a purchase or contact us for support.
- Payment Information: Payment data is collected and processed securely by Paddle, our third-party payment processor. We do not store credit card numbers or sensitive payment information on our servers.
1.2 Automatically Collected Information
- Device Information: We collect information about your device, including device type, operating system, and browser type.
- IP Address: We collect your IP address for security purposes, analytics, and to prevent fraud.
- Usage Data: We collect information about how you interact with our service, including pages visited, features used, and time spent on the site.
- Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience, analyze usage patterns, and provide personalized content. You can control cookies through your browser settings.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To process your uploaded images, generate AI portraits, and deliver the services you request
- Payment Processing: To process payments, manage subscriptions, and handle refunds through Paddle
- Service Improvement: To analyze usage patterns, improve our AI algorithms, and enhance user experience
- Communication: To respond to your inquiries, provide customer support, and send service-related notifications
- Security: To detect and prevent fraud, abuse, and unauthorized access to our service
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
3. Information Sharing and Third Parties
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:
3.1 Service Providers
- Paddle: We share payment information with Paddle to process transactions. Paddle's privacy practices are governed by their own Privacy Policy.
- Cloudflare R2: We use Cloudflare R2 for secure image storage. Images are stored temporarily and deleted according to our data retention policy.
- OpenRouter: We use OpenRouter for AI image generation. Images are processed through their API but are not stored by OpenRouter.
3.2 Social Media Sharing
When you choose to share your generated portraits on social media platforms (Instagram, TikTok, Twitter), you are directly interacting with those platforms. We do not control how these platforms use your information. Please review their privacy policies.
3.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of our users.
4. Data Retention
We retain your information only for as long as necessary to provide our services and comply with legal obligations:
- Uploaded Images: Deleted immediately after AI processing is complete, or within 24 hours if not downloaded
- Generated Images: Stored until you download the HD version, then deleted within 7 days
- Payment Records: Retained according to Paddle's data retention policies and applicable financial regulations (typically 7 years)
- Analytics Data: Aggregated and anonymized data may be retained indefinitely for service improvement
5. Your Rights (GDPR and International Users)
If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, you have the following rights:
- Right to Access: You can request a copy of the personal information we hold about you
- Right to Rectification: You can request correction of inaccurate or incomplete information
- Right to Erasure: You can request deletion of your personal information ("right to be forgotten")
- Right to Restrict Processing: You can request that we limit how we use your information
- Right to Data Portability: You can request that we transfer your data to another service provider
- Right to Object: You can object to certain types of processing, such as direct marketing
- Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time
To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.
6. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit (HTTPS/TLS)
- Secure storage on Cloudflare R2 with access controls
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence, including the United States and China. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by the European Commission
- Compliance with applicable data protection frameworks
8. Children's Privacy
HanFuPhoto.com is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected information from a child under 13, we will delete such information promptly.
9. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential Cookies: Required for the service to function (e.g., session management)
- Analytics Cookies: To understand how users interact with our service
- Functional Cookies: To remember your preferences and settings
You can control cookies through your browser settings. Note that disabling certain cookies may affect service functionality.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified through our website or via email. Your continued use of our service after such changes constitutes acceptance of the updated Privacy Policy.
11. Contact Information
If you have questions, concerns, or wish to exercise your data protection rights, please contact us:
Email: [email protected]
Support Email: [email protected]
Website: https://hanfuphoto.com
Data Protection Officer: For GDPR-related inquiries, please contact us at [email protected]
Last updated: December 19, 2024