Privacy Policy

Product DIY ("the Platform") is operated by YOUXEE STUDIO ("the Company", "we", "us"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Platform.

1. Information We Collect

When you register for and use Product DIY, we may collect the following information:

• Account information: email address, login password (stored encrypted)
• Uploaded content: product images and model photos you upload for AI processing
• Usage data: generation history, credit consumption records, feature usage frequency
• Payment information: top-up records, transaction IDs (actual payment details are processed by Stripe — we do not store bank card or e-wallet information)
• Device information: browser type, IP address (used for security and rate limiting)

2. How We Use Your Information

The information we collect is used to:

• Provide AI product image generation services
• Process credit top-ups and consumption
• Maintain the security of your account
• Improve our service quality
• Send important service notifications (such as payment confirmations)

3. Data Storage and Security

• User data is stored on Supabase (hosted on secure cloud infrastructure)
• Generated images are stored on Cloudflare R2 (with global CDN acceleration)
• All data transmission is encrypted using HTTPS/TLS
• Passwords are encrypted using industry-standard one-way hashing — we cannot view your plaintext password
• Row-Level Security (RLS) is enabled on the database, ensuring users can only access their own data

4. Third-Party Services

To provide our services, we use the following third-party providers. Your uploaded images may be transmitted to one or more of these providers depending on which feature you use:

• Google Vertex AI — Virtual Try-On model and Gemini 3.1 Flash Image (Nano Banana 2) for background swap, image translation, and try-on enhancement (servers in the United States and EU regions)
• OpenAI — gpt-image-2 for AI Ad Poster generation, gpt-5.4-mini for AI Fill prompt assistance (servers in the United States)
• BytePlus (Seedream 4.5) — secondary image-generation engine used in parallel with Google models for background swap and try-on. Inputs are uploaded to a temporary CDN URL and deleted after generation (servers in Singapore / United States)
• Supabase — authentication and database
• Cloudflare R2 — image storage and CDN
• Stripe — payment processing
• Vercel — website hosting

Each of these providers has their own privacy policy. We only share the minimum information necessary to deliver our services. By using the Platform, you consent to your uploaded images being transmitted to the providers listed above for the sole purpose of generating your requested output.

5. Handling of Uploaded Images

• Images you upload are used solely for AI generation and will not be used for model training or any other purpose
• Generated images are stored under your account and can only be accessed and downloaded by you
• You may request deletion of your image data at any time by contacting us
• Cross-border data transfer notice: depending on the feature used, your uploaded images may be processed on servers located outside Malaysia (United States, EU, or Singapore). All transmission is encrypted with HTTPS/TLS. We rely on the standard contractual safeguards published by each provider above

6. Cookie Usage

This Platform uses only essential cookies (to maintain your login session). We do not use any tracking, advertising, or analytics cookies. These cookies are necessary for the Platform to function properly and do not collect additional personal information.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your account and associated data
• Export your generation history

8. Policy Updates

We may update this Privacy Policy from time to time. For significant changes, we will notify you via email or platform notification. Continued use of the Platform constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us by email at: support@page-diy.com (operated by YOUXEE STUDIO, registered in Malaysia).