Privacy Policy | Artformly

Scope

Artformly is operated by ZHOU LIANG (周亮) as an individual operator based in Zhenjiang, Jiangsu, mainland China. In this Privacy Policy, "Artformly," "we," "us," and "our" refer to ZHOU LIANG in that capacity. The operator is responsible for deciding how and why Artformly processes personal information.

Artformly's intended market is global, and the service is intended to be available to adult users where it and its relevant features may lawfully be offered and used. Operating for a global audience means that different data-protection, consumer-protection, and cross-border-transfer requirements may apply. Access to the service does not mean that we have an establishment, registration, or local representative in your country or region.

This Privacy Policy explains how we handle information when you visit the website, create an account, purchase credits, upload source images, use AI generation, contact support, or otherwise use the service.

Artformly is not intended for children. You must meet the minimum age required to enter into a binding agreement where you live, and in all cases be at least 18 years old, to use AI generation or purchase credits.

Information We Collect

We collect only the information reasonably needed to operate and protect the service:

• Account information: name, email address, email-verification status, authentication method, profile image, account status, and security records.
• User content: source images, generated images, selected art direction, generation settings, task status, and support attachments. We do not ask users to enter a free-form prompt in the current product.
• Safety information: automated moderation results, matched safety categories, enforcement actions, review decisions, and limited technical evidence needed to investigate abuse. Moderation records do not store the source or generated image itself.
• Usage and device information: pages and features used, product events, approximate source/referrer, browser and device information, IP address, timestamps, and security or rate-limit signals.
• Transaction information: selected package, amount, currency, order and provider transaction identifiers, payment status, refunds, credits granted or consumed, and billing contact details returned by the payment provider. We do not store full card numbers or card security codes.
• Communications: support requests, replies, and service emails such as verification, password-reset, purchase, security, and account-deletion notices.
• Cookies and local storage: essential authentication and security data, preference data, and—only as allowed by your choices—analytics data. See our Cookie & Analytics Policy.

How We Use Information

We use this information to:

• provide accounts, authentication, uploads, generation, storage, downloads, support, credits, payments, and refunds;
• send transactional and security communications;
• operate content-safety checks, enforce our Acceptable Use Policy, prevent fraud, and protect users, providers, and payment relationships;
• measure reliability, diagnose errors, rate-limit abusive traffic, and improve the product;
• keep accounting, dispute, tax, and compliance records; and
• comply with lawful requests and enforce our agreements.

We do not sell your personal information. We do not use private source images or generated images to train our own AI models. Third-party processors may handle content only to provide contracted services, subject to their own terms and processing practices.

AI Processing and Content Safety

When you choose AI generation, the original image is uploaded without browser-side compression, stored privately, and sent to configured AI and content-safety providers. Both the source image and generated output may be automatically reviewed. A rejected request is not sent to the generation provider; a rejected output is withheld and reserved credits are returned.

Provider processing can occur in other countries and can involve short-lived provider-side copies, logs, or abuse-prevention records. We cannot control a provider's legally required retention. Read the AI Generation Notice before submitting confidential, regulated, or irreplaceable material.

Free Try Without an Account

You can make one free AI generation without creating an account. For this free try:

• Your photo is uploaded to private storage only to create your artwork. It goes through the same content-safety checks as account uploads and is deleted as soon as processing finishes or the request is rejected or canceled. Any copy left behind by an interrupted request is removed automatically within about 24 hours.
• Your artwork is stored privately. Without an account you can only view a low-resolution preview. If you sign up or sign in on the same browser within 7 days, the artwork is moved into your account. Unclaimed free-try artwork is deleted after 7 days.
• No training. Anonymous photos and the resulting artwork are not used to train our own AI models.
• Abuse prevention. We set a signed, random guest identifier cookie (af_guest) and a small readable flag cookie (af_guest_pending). We also derive keyed hashes from your IP address and a few coarse browser properties (for example, browser type, language, time zone and screen size). Raw values are not stored for the free try. These hashes are used only to limit how many free tries one person, device or network can use and to prevent abuse. They are cleared or deleted within 30 days.
• The free try is optional and may be changed, limited, paused or ended at any time.

Service Providers and Disclosure

We may disclose the minimum necessary data to providers that support:

• cloud hosting, database, object storage, network security, and bot protection;
• AI generation and image moderation;
• payment processing and fraud prevention;
• transactional email, analytics, monitoring, and customer support; and
• professional advisers, authorities, or counterparties when required by law, to investigate abuse, or to protect rights and safety.

We may also transfer information as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards and notice where required.

Retention

Private source images and generated works remain available in your account until you delete the work or account, unless an earlier operational expiry is shown in the product. Temporary processing copies and signed delivery links expire independently. Failed, canceled, or safety-rejected tasks may have their related image objects removed earlier.

Account, session, recovery, and support data is kept while needed to provide the service. Transaction, refund, credit-cost, fraud, and safety records may be retained in anonymized or minimized form for accounting, dispute handling, security, and legal compliance. Exact retention can vary because payment, infrastructure, AI, and safety providers apply their own required schedules.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, receive, object to processing of, or delete personal information. You can update profile information, manage cookies, delete individual works, download generated works, or permanently delete your account from the product. You may also submit a support ticket for a request or to appeal an automated safety decision.

We may need to verify your identity before completing a request. Some information cannot be deleted immediately when retention is required to resolve a payment dispute, prevent fraud, comply with law, or protect the service.

Account Deletion

Use Settings → Account & Privacy to permanently delete your account. Active generation tasks and subscriptions must first be completed or canceled. Password accounts must confirm the current password; social-login accounts must complete a recent sign-in.

Deletion removes sign-in sessions and connections, API keys, profile and product activity, source uploads, generated images, unused credits, recovery tokens, and support content. The account becomes a non-identifying tombstone so necessary business records no longer contain your name, email, IP address, or payment-contact details. See the deletion preview in the product for the current scope before confirming.

Security

We use measures designed to protect information, including encrypted transport, access controls, private object storage, short-lived signed URLs, secret management, rate limits, content checks, and operational logging. No system is perfectly secure. Keep your credentials confidential and notify support if you believe your account has been compromised.

International Processing

Artformly and its providers may process information outside your country. Where required, we rely on contractual, technical, and organizational safeguards appropriate to the transfer. By choosing AI generation, you understand that content must be transmitted to the providers needed to perform that request.

Changes

We may update this policy as the service, providers, or legal requirements change. We will revise the date above and provide additional notice for material changes when appropriate.

Contact

For privacy questions or requests directed to ZHOU LIANG as the individual operator of Artformly, email privacy@artformly.com or sign in and submit a ticket through Settings → Support Tickets. General product help is available at support@artformly.com. These channels create a traceable support record and are the currently designated contact methods. Do not include passwords, payment-card details, or illegal material in a request.