Privacy Policy

1. Who this Policy covers

This Policy covers visitors, account holders, partner users, people who submit custom or support requests, and people whose personal data appears in media submitted to P图. If you upload another person's image or information, you are responsible for having the authority and consent needed to do so.

This Policy does not govern a third-party website or service that you choose to visit. That provider's own privacy notice applies to its service.

2. Personal data we collect

The data we collect depends on how you use P图. It may include:

• Account and access data, including your name, email address, account role, login verification records, session information, preferences, warnings, account status, exclusion or blacklist status, and the reasons and audit records for an access decision.
• Customer content, including uploaded images or other media, generated results, filenames, prompts, tool and service selections, reference material, editing instructions, and related metadata.
• Job and support data, including generation identifiers, status, failure information, custom briefs, messages, quotes, approvals, appeals, and our actions to investigate or complete work.
• Transaction data, including purchased or transferred credits, prices, currency, order identifiers, payment status, refund status, and payment-provider references. We do not receive or store your full payment-card number.
• Technical and security data, including IP address, browser and device information, request time, diagnostic logs, security events, audit history, and records needed to prevent abuse or recover interrupted work.
• Communications and any other information you choose to give us when you contact P图.

3. How we collect data

• Directly from you when you register, upload content, choose or configure a service, provide instructions, pay, receive or transfer credits, redeem a code, or contact support.
• Automatically from your device and use of P图, including technical, session, and security records.
• From service providers, such as payment confirmations, delivery status, AI-processing results, moderation signals, and infrastructure logs.
• From another authorised P图 user when that user transfers credits or includes you in a partner account.

4. Why we use personal data

• Create and secure your account, authenticate you, and provide account features.
• Upload, inspect, store, transform, generate, deliver, and delete customer media.
• Price jobs, reserve or deduct credits, process payments and refunds, and maintain transaction records.
• Operate custom requests and support, investigate failed jobs, recover interrupted work, and complete approved work through an alternative or manual process.
• Moderate content, enforce our Terms, prevent fraud and abuse, protect customers and P图, and comply with law.
• Evaluate registration and service eligibility, maintain internal exclusion or blacklist records, refuse access, suspend accounts, and enforce previous access decisions.
• Maintain, troubleshoot, measure, and improve the reliability and usability of P图.
• Send service messages about authentication, jobs, payments, expiry, security, support, or policy changes. We will obtain any consent required before sending direct marketing.

5. AI processing and automated tools

When you start a job, P图 may send the media, prompt, selected options, reference material, and technical instructions needed to AI infrastructure and model providers. Those providers process the material to return a result or moderation decision. P图 may route a failed or unsuitable job through a different approved workflow when support is asked to assist.

Automated systems inspect uploads, apply safety controls, estimate prices, run transformations, and detect technical failures. We may review a job manually when you request support, appeal a restriction, or when review is needed for security, safety, billing, or legal reasons.

6. Who we disclose data to

We disclose only the data reasonably needed for the relevant purpose. Recipients may include:

• Cloud hosting, private object storage, database, queue, monitoring, and security providers.
• AI infrastructure and model providers used to process customer jobs.
• Payment processors, banks, card networks, and fraud-prevention providers. Stripe processes P图's online payments.
• Email-delivery and customer-support providers used to send sign-in codes and service communications.
• Professional advisers, auditors, insurers, and a buyer or successor involved in a genuine business reorganisation, subject to suitable confidentiality and data-protection measures.
• Courts, regulators, law-enforcement agencies, and other parties when disclosure is required by law or reasonably necessary to protect rights, safety, and platform integrity.

7. International transfers

Some service providers or their subprocessors may process personal data outside Singapore. We take reasonable steps to use contractual, organisational, or other safeguards so that transferred personal data receives a standard of protection comparable to the Personal Data Protection Act 2012 of Singapore (PDPA), unless an exception under applicable law applies.

8. Retention and deletion

• Uploaded media normally expires two years after it is added to your library, and generated media normally expires two years after it is created. Expired media is removed from active private storage by an automated cleanup process. A file may remain briefly while an active job finishes or while deletion is being processed.
• You may delete an available media item earlier. We may retain limited metadata showing that a job or deletion occurred when needed for billing, security, audit, dispute, or legal purposes.
• Account, ledger, payment, refund, invoice, tax, support, moderation, security, and audit records are kept only for as long as reasonably needed for the purpose collected and any legal, accounting, fraud-prevention, or dispute requirements.
• Backups and provider systems may retain protected copies for a limited recovery or legal-compliance period before deletion or irreversible anonymisation.
• We may preserve specific information when required by law, a lawful order, a dispute hold, or an investigation.

9. How we protect data

P图 uses measures designed for the nature of the data and service, including encrypted HTTPS connections, private object storage, time-limited download links, restricted administrative access, protected secrets, authentication controls, logging, and operational monitoring. No internet service can promise absolute security. Tell us promptly through Support if you believe your account or data has been compromised.

10. Cookies and local storage

P图 uses essential cookies and similar browser storage to keep you signed in, protect requests, remember necessary workflow state, and maintain security. Disabling essential storage may prevent account and generation features from working. If P图 later adds non-essential analytics or advertising cookies, we will provide any notice and choice required by law before using them.

11. Your choices and PDPA requests

We may need to verify your identity before acting on a request. A reasonable fee may apply to an access request where permitted by law, and we will tell you the amount in advance.

• Access: ask for personal data in our possession or control and information about how it was used or disclosed, subject to applicable exceptions.
• Correction: ask us to correct an error or omission in your personal data.
• Withdrawal: withdraw consent for a purpose by giving reasonable notice. We will explain likely consequences; some services may no longer be available after withdrawal.
• Deletion and closure: delete available media through your library or request account closure through Account settings.
• Complaints: contact our Data Protection Officer first so we can investigate and respond.

12. Closing an account

You may close your account after active jobs and pending payments or refunds are resolved. Closing the account revokes active sessions and schedules customer media for deletion. Unused credits are forfeited unless applicable law requires otherwise or P图 confirms a refund in writing. Records that must be retained for payment, tax, security, fraud-prevention, audit, dispute, or legal purposes will be restricted and kept only as long as necessary.

13. Children and other people in media

P图 accounts are for people aged 18 or older. P图 is not directed to children and we do not knowingly create accounts for them. Adults may submit legitimate family or child photographs only when they have the legal authority and appropriate consent to do so. Sexual, exploitative, abusive, or otherwise illegal content involving a minor is prohibited and may be reported to the authorities.

14. Data incidents

We investigate suspected data incidents and will notify the Personal Data Protection Commission and affected individuals when required by the PDPA. Notices will explain the incident and practical protective steps where appropriate.

15. Changes to this Policy

We may update this Policy when P图, our processing practices, or applicable requirements change. We will publish the revised effective date and give additional notice when a change materially affects how we handle personal data. Where fresh consent is required, we will request it before applying the new use.

16. Contact our Data Protection Officer

Send a privacy request or complaint through P图 Support and mark it for the Data Protection Officer, or write to: Data Protection Officer, DAVIS MATERIALWORKS (UEN 53036747E), 39 Ubi Road 1 #02-04, Singapore 408695. Include enough information for us to identify the relevant account and request, but never send a password, sign-in code, or full card number.