Privacy Policy
This Privacy Policy explains how CharaStudio collects, uses, stores, and shares your personal information when you use our service, and your rights regarding your data.
Introduction
CharaStudio ("we", "us", or "our") respects and protects your privacy. This Privacy Policy ("this Policy") explains how we collect, use, store, and share your personal information when you use CharaStudio ("the Service"), as well as your rights regarding your data.
CharaStudio is a desktop application software. Content you create and edit on your local device is stored locally by default. We only store and sync your account information when necessary.
Please read this Policy carefully before using our Service. By using our Service, you acknowledge that you have read and agree to this Policy. We may update this Policy from time to time, and any material changes will be communicated to you in advance via email.
1. Data Controller
The data controller for this Service is:
- Legal Entity Name: CharaStudio (Individual Developer)
- Contact Email: charastudio@163.com
- Data Protection Officer: No dedicated DPO has been appointed at this time
2. Personal Information We Collect
Important Notice: CharaStudio implements security review for AI content generated through official interfaces. For content generated through third-party interfaces, custom API configurations, or other non-official channels, CharaStudio does not have management capability and assumes no legal responsibility for such content, which remains the user's sole responsibility.
2.1 Information You Provide
- Account Information: Email address, password (encrypted storage), account settings preferences.
- Payment Information: Transaction amount, payment status, purchased product information. We do not store complete payment card numbers — payment data is processed exclusively by our PCI-DSS compliant payment processor (Waffo / 虎皮椒).
- Feedback and Communication: Emails, tickets, and feedback content you send to us.
2.2 Information We Automatically Collect
- Account Sync Data: To enable multi-device sync functionality, we may sync your basic account information and settings preferences.
- Service Logs: Device model, OS version, app version, error logs, operation records (for troubleshooting and service optimization).
- IP Address: When you log in or use features requiring internet connectivity, we record your IP address for security verification.
2.3 Local Data (Not Uploaded to Servers)
As a desktop application, the following data is stored on your local device by default and is not uploaded to our servers:
- Creative content you create, such as story plots, character settings, and material files.
- App configuration, local cache, image previews, and other local settings.
- Your local project files.
3. How We Use Your Personal Information
| Purpose of Use | Legal Basis |
|---|---|
| Account registration, login, and identity verification | Contract performance |
| Billing and payment processing | Contract performance |
| Account security and fraud prevention | Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Customer support and issue resolution | Contract performance / Legitimate interest |
| Product optimization and analysis (anonymized data) | Legitimate interest |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot be used to identify specific individuals.
4. Cookies and Tracking Technologies
| Type | Purpose | Can be Disabled |
|---|---|---|
| Strictly Necessary | Maintain login sessions, core functionality | No |
| Functional | App interface preference settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing | (We do not send marketing messages) | N/A |
We use limited tracking technologies to understand service usage and improve user experience. We do not track your specific creative content within the app.
5. Sharing and Disclosure of Personal Information
We do not sell your personal information, including "sale" as defined by applicable laws (such as CCPA). We only share your information in the following circumstances:
- Payment Processors: Payment card data is processed exclusively by our PCI-DSS compliant payment processor (Waffo / 虎皮椒) and is not stored on our servers.
- Cloud Service Providers: If cloud services are used to store account sync data, they are subject to confidentiality agreements.
- Legal and Regulatory Requirements: As required by law, court orders, or legitimate requests from authorities.
- Business Transactions: In cases of mergers, acquisitions, etc., with advance notice and ensuring continued protection obligations.
- With Your Consent: For other purposes, with your explicit prior consent.
6. Data Security Measures
- Transmission Encryption: HTTPS/TLS encrypted transmission.
- Storage Security: Sensitive data such as passwords is encrypted or hashed.
- Local Data Protection: Content you create locally is your responsibility. We recommend regularly backing up important data.
- Access Control: Principle of least privilege. Only authorized personnel can access necessary data.
- Regular Security Assessments: We continuously evaluate and improve security measures.
In the event of a security incident affecting your rights, we will notify you and relevant regulatory authorities within 72 hours of discovery. Please keep your account credentials safe and do not share them with others.
7. Personal Information Retention Period
| Data Type | Retention Period | Action Upon Expiry |
|---|---|---|
| Account Information | During active period; 90 days after account deletion | Delete or anonymize |
| Transaction Records | As required by regulations, typically 5 years | Delete or archive |
| Service Logs | 12 months | Securely delete |
| Account Sync Data | Within 30 days of account deletion | Delete |
Locally stored data is managed by you. After deleting the app, local data is no longer subject to this Policy.
8. Your Data Rights
To exercise the following rights, please contact us. We will process your request within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal information |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of data under specific conditions |
| Right to restriction | Pause data processing under specific circumstances |
| Right to portability | Obtain your data in machine-readable format |
| Right to object | Object to processing based on legitimate interest or marketing |
| Right to withdraw consent | Withdraw consent for processing based on consent |
| Right to lodge complaint | You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly |
If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
9. Marketing Communications and Unsubscription
We do not send unsolicited marketing information. If you choose to subscribe to our membership service, we will only send service notifications related to your subscription, including billing, security, and policy updates.
You may contact us at any time to unsubscribe from any non-essential service notifications.
10. Cross-border Data Transfer
Our servers may be located inside or outside of China. When transferring data across borders, we ensure data security through the following measures:
- Signing data processing agreements that comply with applicable laws.
- Transferring only to recipients with equivalent protection levels.
- Implementing necessary technical and organizational security measures.
11. Protection of Minors
This Service is intended for users aged 18 and above. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately, and we will delete it as soon as possible.
12. Third-Party Links and Services
This Service may contain links to third parties or integrate with third-party services. This Policy only applies to information we collect directly. We are not responsible for third parties' data practices, and we recommend reviewing their policies before use.
13. Changes to This Policy
If material changes occur, we will notify you via email at least 15 days in advance and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance.
14. Contact Us
If you have any questions about this Policy or data processing, please contact us:
- Official Website: www.charastudio.net
- Privacy Contact Email: charastudio@163.com
- Customer Support Email: charastudio@163.com