Privacy Policy - PopPic Studio

1. Controller and scope

The controller is 广州唤星科技有限公司, registered at Room 203, Building 14, No. 449 Huadi Avenue Middle, Liwan District, Guangzhou, China. This policy covers the PopPic Studio website, WeChat mini program and related services. Contact gaojiaqi17135@gmail.com for privacy matters. The operator handles privacy inquiries; no separate data protection officer is currently designated publicly.

2. Information we collect

Account data includes email, display name, avatar, password hashes, WeChat identifiers for authorized sign-in and phone numbers you authorize us to receive. Not every sign-in method collects every field. Creative data includes prompts, uploads, references, generated images, project canvases, conversations and work you choose to publish.

Transaction data includes order IDs, amounts, currencies, payment and refund status, subscription periods, credit movements and renewal consent. Support records include emails and feedback you send. Technical and security records include necessary IP addresses, request times, browser or client information, errors, API calls and moderation logs. We do not actively collect precise location, address books or full payment-card details.

3. Purposes and legal bases

We process data needed for sign-in, generation and editing, media storage, entitlement delivery, reconciliation and support to perform the service contract. Processing for tax, cybersecurity and regulatory duties relies on legal obligations. Authorized WeChat sign-in, optional publication and other consent-based features rely on the relevant authorization.

Where applicable law recognizes legitimate interests, necessary fraud prevention, security and service improvement may rely on balanced legitimate interests. This does not bypass local consent requirements. We do not ourselves train AI models on creative inputs or use records retained after closure for marketing or profiling.

4. Cookies and browser storage

Required login cookies and session credentials verify your identity. Refresh sessions last 30 days, access tokens usually 15 minutes, and email verification codes 10 minutes. Language, preferences and canvas recovery data may remain in your browser until cleared or updated. Optional analytics is off by default. When enabled and expressly allowed, our own service and self-hosted Umami record sources, normalized pages, device category, language, approximate country, registration, creation, export, payment and refund status and original-currency amounts. Generation and export records use business IDs without file URLs; Web confirms browser handoff, while the mini-program distinguishes album saves from document previews. Payment analytics uses order, payment and refund IDs, status, currency and amounts without payment credentials. Analytics excludes prompts, artwork, asset URLs, contact details and card information.

Analytics uses random visitor and session identifiers. After sign-in, records may be linked to your account to understand referral, registration, creation and payment conversion. IP addresses are used on the server only to estimate country and are not retained in analytics events. You can decline or withdraw through Analytics preferences without affecting creation or payment. Withdrawal stops new analytics and clears identifiable records while retaining the minimum preference needed to honor your choice. Requests already sent, backups and cleanup jobs follow their actual processing progress; an interface message does not mean every copy has been deleted immediately.

You can clear or restrict cookies and local storage in your browser. This can sign you out or remove unsaved local drafts. Deletion cannot remotely erase browser data on other devices; clear those copies yourself.

5. Sharing and disclosure

We do not sell personal information. Necessary data is shared with the cloud and infrastructure providers, AI inference or moderation services, WeChat sign-in and payment services, Waffo Pancake and email services used for the requested feature. Generation requests may pass through configured AI gateways to upstream model services and may contain prompts, references and generated content. Avoid unnecessary sensitive information in prompts or media.

Waffo Pancake acts as Merchant of Record for its orders and processes card data, payments, taxes and related disputes. PopPic servers do not store full card numbers. We may disclose necessary information to meet lawful regulatory or judicial requirements. If restructuring or a business transfer involves personal data, we will notify affected users, require continued protection and obtain renewed consent where required.

6. Security and incidents

We use HTTPS, password hashing, authentication and workspace authorization to protect data. No system is absolutely secure; protect your credentials. If a personal-data incident occurs, we will take remedial action and notify authorities and affected users as required. Where GDPR applies and its reporting duty is triggered, the authority is notified without undue delay and, where feasible, within 72 hours of awareness.

7. Retention and handling after closure

Account and creative content are kept while you use the service. After a verified closure request, the account is disabled immediately. Background deletion starts after a minimum two-minute wait for in-flight requests and covers profile data, projects, conversations, uploads, generated content and ordinary debug records. Normal processing runs on a minute-based schedule; storage failures or unfinished tasks trigger retries and operator review. A receipt is not a claim that all deletion has completed.

Optional analytics: event details and linked referral touches are retained for up to 90 days, unlinked referral touches for up to 30 days, and account acquisition snapshots for up to 13 months. Expiry, withdrawal and account deletion trigger the applicable cleanup process. Aggregate statistics that cannot be traced to individuals may be retained for trend analysis for up to 13 months. The browser analytics retry queue is retained for at most 24 hours.

Security records: legally required network-security logs are retained for at least six months. Account closure does not erase evidence still within a statutory period. After expiry, records are erased or anonymized unless needed for an ongoing security incident, dispute or legal retention duty. This does not create a blanket retention requirement for original creative content.

Financial records: only the minimum records needed to reconcile orders, payments, refunds, subscription consent and tax/accounting obligations are retained after closure; unnecessary avatars, prompts and contact data are removed. Finance classifies records by their nature. Accounting source documents and accounting vouchers generally require 30 years, and bank statements and tax returns generally 10 years, starting on the first day following the accounting year. Ordinary product-usage records are not therefore kept for 30 years. Destruction follows required appraisal and checks for unresolved matters.

Support emails are outside the product database. Support reviews closure requests and removes records no longer needed. Material for unresolved refunds, disputes, security incidents or mandatory archives is retained only for those purposes. Operators handle backups and service-provider copies according to actual rotation and provider procedures; deletion requests must be reapplied before restoring backups. We do not claim unverified external copies have been erased. Contact us with your request ID for progress.

Information held solely because a statutory period has not ended or immediate deletion is technically difficult is restricted to storage, security and legally necessary processing. Retention does not authorize continued product use, marketing or AI training.

8. Your rights and deletion

Request deletion in Settings, verify your password or recent WeChat QR sign-in, and explicitly confirm. The system checks shared workspaces, in-flight tasks and payments and cancels Waffo auto-renewal first. If self-service closure is blocked, contact gaojiaqi17135@gmail.com for verified assistance. Deletion is irreversible; download your work and address refund needs beforehand.

You may also email us to request access, correction, export, erasure or restriction, object where applicable, withdraw consent or complain to your local authority. We verify identity and respond within the applicable statutory period, without requesting unrelated verification data. Withdrawing necessary authorization can affect functionality but does not invalidate earlier lawful processing.

9. Service notices and marketing

Current communications focus on billing, security, service and policy notices; there is no separate marketing-subscription feature. Future promotional communications requiring consent will obtain it first and provide an effective opt-out. You may also email to refuse marketing. Opting out does not stop necessary billing or security notices.

10. Cross-border processing

Projects and media are primarily stored on servers and object storage in mainland China. Some AI, payment, moderation or email services may process necessary data abroad. We select recipients and limit transfers under applicable requirements, provide notices and obtain separate consent and complete cross-border procedures where required. Website use is not treated as unlimited consent to all international processing.

11. Age limit

The service is intended for users aged 18 or older. We do not knowingly provide it to, or collect data from, younger users. Report a relevant account by email so that we can verify and erase the information or take other legally appropriate protective action.

12. Third-party links and public work

Third-party payment, sign-in and AI services process some data independently under their applicable rules. This policy does not replace theirs; read the privacy notices provided in their actual interfaces. Public work may be viewed or saved by others. Removal from PopPic cannot guarantee retrieval of copies already saved by third parties.

13. Policy updates

This page displays its update date and version. Material changes are explained through website announcements, account notices or email before taking effect. We obtain renewed consent for new processing when required; continued browsing alone is not consent to a new purpose requiring separate confirmation.

14. Contact

Company: 广州唤星科技有限公司. Address: Room 203, Building 14, No. 449 Huadi Avenue Middle, Liwan District, Guangzhou, China. Privacy and support email: gaojiaqi17135@gmail.com. Email is handled asynchronously with no fixed published support hours. Do not send passwords, full card details or illegal imagery.