Privacy Policy

1. Data controller and contact

Data controller: Circle Six Studio (Hong Kong).

Privacy and personal-data requests (access, correction, deletion): info@aislin.studio. We do not offer phone support.

2. Data we collect

• Account data: email address. You may sign in with Google or an email magic link; we receive identifiers provided through that method.
• Order and transaction data: package, style choices, order status. Prices are shown in Hong Kong dollars (HKD), New Taiwan dollars (TWD), or US dollars (USD); payments are processed by Stripe. We do not store full card numbers.
• Reference photos you upload: groom, bride, and optional couple photos, which may include facial features and are treated as sensitive personal data.
• Generation and delivery data: AI output images, virtual album links, and related metadata.
• Technical data: login sessions, album unlock state, access and error logs, and necessary cookies (see Cookie Policy).

3. Purposes of use

• Create accounts, verify identity, and provide the workspace and order history.
• Process payments, perform the contract, schedule AI generation, and quality review.
• Send reference photos to contracted cloud generation providers to produce deliverables.
• Provide downloads, password-protected virtual albums, and customer support.
• Maintain security, prevent abuse, meet legal obligations, and improve the service where reasonably necessary.

4. Legal bases

We mainly process data to perform our contract with you, based on your consent (e.g. uploading reference photos, choosing a sign-in method), and on legitimate interests (e.g. fraud prevention and security).

Under Hong Kong’s Personal Data (Privacy) Ordinance and Taiwan’s Personal Data Protection Act, you have rights including access, correction, and deletion (see section 8).

5. Third-party service providers

We use contracted third parties only for necessary operations, including:

• Supabase: authentication, database, and private file storage.
• Stripe: payments and transactions (actual charge currency and FX are determined by Stripe and your card issuer).
• fal.ai (or similar AI inference services): image generation per order.
• Google: if you choose Google sign-in; and Google Analytics 4 for anonymised or aggregated site usage (e.g. page views, device type, broad region).

5a. Google sign-in and Google user data

If you choose “Continue with Google”, we receive data from your Google account that you authorise (typically email; depending on your Google settings, name and avatar may also be included).

We use this data solely to create and verify your account, let you sign in, link orders and deliverables, and send necessary service notices. We do not sell Google user data or share it with third parties for advertising or remarketing.

Except for necessary providers listed in section 5 (e.g. Supabase for auth hosting), we do not share Google user data with unrelated third parties. You may revoke this app’s access in your Google account’s third-party app permissions; you may also email info@aislin.studio to request deletion of your account and related data (subject to legal or accounting retention).

6. Retention and deletion

Within 7 days after your order is fully delivered, we delete the reference photos you uploaded and related stored copies (except temporary processing needed for generation and quality review, and we do not keep unnecessary backups).

If you leave before checkout or do not complete payment, uploaded reference photos are automatically deleted within 48 hours after the order is created.

Delivered 4K outputs, account download links, and virtual albums remain accessible online for 30 days from delivery. Please download and back up files within that period.

Order records, billing, and dispute-related data may be kept longer where required by law or accounting. You may email info@aislin.studio to request account deletion or deletion of data where feasible.

7. Virtual albums

Virtual albums are protected by a shared access password for you and guests you trust. Do not publish the password publicly. Album and account download availability follows the same online access period from delivery (see section 6).

8. Your rights

Email info@aislin.studio. We may verify your identity. Hong Kong users may complain to the Office of the Privacy Commissioner for Personal Data; Taiwan users may complain to the competent authority. Statutory rights of consumers in Taiwan are not excluded by this policy.

• Ask whether we hold your personal data and obtain a copy (where permitted by law).
• Request correction of inaccurate data.
• Request deletion or restriction of processing where conditions are met.
• Withdraw consent (you may not be able to use features that require that data).

9. Security

We use reasonable technical and organisational measures (access control, encryption in transit, permission management). Do not upload images you are not entitled to use or without the subjects’ consent.

10. Minors

The service is intended for adults or couples who may lawfully enter contracts. We do not knowingly collect children’s personal data.

11. Marketing

We do not use your data for third-party ad targeting. We do not send promotional emails except where necessary for the service; if that changes, we will obtain consent separately.

12. Notice for Taiwan users

If you are in Taiwan, you retain rights under Taiwan’s Personal Data Protection Act and related rules. For cross-border transfer and outsourcing, we inform you in a reasonable manner and protect your interests.

Prices are shown in Hong Kong dollars (HKD), New Taiwan dollars (TWD), or US dollars (USD). Actual charges may appear in another currency or rate depending on Stripe and your card issuer.

13. Policy updates

We may revise this policy and publish the update date on the site. For governing law on disputes, see the Terms of Service (primarily Hong Kong SAR law).