Privacy Policy

1. Overview

K-StyleShot ("the Service", "we", "us") is committed to protecting your personal information and complies with all applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Korean Personal Information Protection Act (PIPA).

2. Information We Collect

Information you provide:

• Email address (collected via Polar at checkout)
• Uploaded photo (used solely for AI processing, deleted immediately after)
• Payment information (processed directly by Polar; we do not store card details)
• Session token and order ID (for service authentication, auto-deleted after 24 hours)

Automatically collected information:

• IP address, browser type, device information (server logs)
• Anonymized usage behavior (Microsoft Clarity)

3. Legal Basis for Processing (GDPR Article 6)

• Contract performance (Art. 6(1)(b)): AI image compositing, result email delivery, payment processing and refunds
• Legitimate interests (Art. 6(1)(f)): Service security, fraud prevention, error debugging
• Legal obligation (Art. 6(1)(c)): Record retention as required by applicable law

4. Data Retention

• Uploaded photos: Deleted immediately after AI processing
• Session data (order ID, session token): Auto-deleted 24 hours after payment
• Email address: Subject to Polar's data retention policy (contact us for deletion requests)
• Server logs: Automatically deleted after a maximum of 30 days

5. Third-Party Service Providers

We share data with the following processors to provide the Service:

• Polar (polar.sh, USA) — Payment processing and customer email management
• Replicate (replicate.com, USA) — AI image generation (photos transmitted and deleted after processing)
• Resend (resend.com, USA) — Result email delivery
• Upstash (upstash.com, USA) — Temporary session data storage
• Vercel (vercel.com, USA) — Service hosting and server logs
• Microsoft Clarity (USA) — Anonymous usage analytics

All processors operate under GDPR Standard Contractual Clauses (SCCs) or equivalent safeguards. We do not sell or share your data for marketing purposes.

6. International Data Transfers

This Service uses servers located in the United States. Personal data of EU/EEA residents is transferred under appropriate safeguards pursuant to GDPR Article 46 (Standard Contractual Clauses).

7. Your Rights (GDPR / PIPA)

You have the following rights regarding your personal data:

• Right of access: Request confirmation and a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure ("right to be forgotten"): Request deletion of your data
• Right to restriction: Request restricted processing in certain circumstances
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Rights related to automated decision-making: Not to be subject to solely automated decisions

To exercise your rights, contact us through kstylewshot.com. We will respond within one month.

EU residents have the right to lodge a complaint with their local supervisory authority (DPA).

8. California Residents (CCPA)

California residents have the following additional rights:

• Right to know what personal information is collected and why
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising CCPA rights

9. Children's Privacy

This Service is not directed at children under 13 (or under 14 in certain jurisdictions) and we do not knowingly collect personal information from children. If we become aware that a child's data has been collected, we will delete it promptly.

10. Cookies & Tracking

We use essential functional cookies and the Microsoft Clarity analytics script. You may disable cookies through your browser settings, though some service features may be affected.

11. Data Controller Contact

For inquiries, complaints, or to exercise your rights, please contact us through:

kstylewshot.com

12. Changes to This Policy

We will provide 7 days' notice of material changes to this Policy via in-service notice. For significant changes, we may also notify you by email.