This Privacy Policy explains how CharaStudio collects, uses, stores, and shares your personal information when you use our service, and your rights regarding your data.
CharaStudio ("we", "us", or "our") respects and protects your privacy. This Privacy Policy ("this Policy") explains how we collect, use, store, and share your personal information when you use CharaStudio ("the Service"), as well as your rights regarding your data.
CharaStudio is a desktop application software. Content you create and edit on your local device is stored locally by default. We only store and sync your account information when necessary.
Please read this Policy carefully before using our Service. By using our Service, you acknowledge that you have read and agree to this Policy. We may update this Policy from time to time, and any material changes will be communicated to you in advance via email.
The data controller for this Service is:
Important Notice: CharaStudio implements security review for AI content generated through official interfaces. For content generated through third-party interfaces, custom API configurations, or other non-official channels, CharaStudio does not have management capability and assumes no legal responsibility for such content, which remains the user's sole responsibility. The underlying AI models used by CharaStudio include: OpenAI GPT Series (GPT-4o, GPT-4o-mini, GPT-4-Turbo, etc.), Google Gemini Series (Gemini-1.5-Pro, Gemini-1.5-Flash, Gemini-2.0-Flash, etc.), MiniMax Series (MiniMax-M2.5, MiniMax-M2.7, MiniMax-M3, etc.), GPT-Image-2 (OpenAI), NanoBanana-2, etc. Model access sources are OpenRouter, SiliconFlow, and MiniMax Official.
2.1 Information You Provide
2.2 Information We Automatically Collect
2.3 Local Data (Not Uploaded to Servers)
As a desktop application, the following data is stored on your local device by default and is not uploaded to our servers:
| Purpose of Use | Legal Basis |
|---|---|
| Account registration, login, and identity verification | Contract performance |
| Billing and payment processing | Contract performance |
| Account security and fraud prevention | Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Customer support and issue resolution | Contract performance / Legitimate interest |
| Product optimization and analysis (anonymized data) | Legitimate interest |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot be used to identify specific individuals.
| Type | Purpose | Can be Disabled |
|---|---|---|
| Strictly Necessary | Maintain login sessions, core functionality | No |
| Functional | App interface preference settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing | (We do not send marketing messages) | N/A |
We use limited tracking technologies to understand service usage and improve user experience. We do not track your specific creative content within the app.
We do not sell your personal information, including "sale" as defined by applicable laws (such as CCPA). We only share your information in the following circumstances:
In the event of a security incident affecting your rights, we will notify you and relevant regulatory authorities within 72 hours of discovery. Please keep your account credentials safe and do not share them with others.
| Data Type | Retention Period | Action Upon Expiry |
|---|---|---|
| Account Information | During active period; 90 days after account deletion | Delete or anonymize |
| Transaction Records | As required by regulations, typically 5 years | Delete or archive |
| Service Logs | 12 months | Securely delete |
| Account Sync Data | Within 30 days of account deletion | Delete |
Locally stored data is managed by you. After deleting the app, local data is no longer subject to this Policy.
To exercise the following rights, please contact us. We will process your request within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal information |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of data under specific conditions |
| Right to restriction | Pause data processing under specific circumstances |
| Right to portability | Obtain your data in machine-readable format |
| Right to object | Object to processing based on legitimate interest or marketing |
| Right to withdraw consent | Withdraw consent for processing based on consent |
| Right to lodge complaint | You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly |
If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
We do not send unsolicited marketing information. If you choose to subscribe to our membership service, we will only send service notifications related to your subscription, including billing, security, and policy updates.
You may contact us at any time to unsubscribe from any non-essential service notifications.
Our servers may be located inside or outside of China. When transferring data across borders, we ensure data security through the following measures:
This Service is intended for users aged 18 and above. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately, and we will delete it as soon as possible.
This Service may contain links to third parties or integrate with third-party services. This Policy only applies to information we collect directly. We are not responsible for third parties' data practices, and we recommend reviewing their policies before use.
If material changes occur, we will notify you via email at least 15 days in advance and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance.
If you have any questions about this Policy or data processing, please contact us:
