隐私政策

本政策说明【★ 请替换：商户名称 ★】（以下称“我们”）在您使用本平台时，收集哪些关于您的信息、为什么收集、与谁共享、保存多久，以及您可以如何控制这些信息。请在使用前阅读。

一句话概括：我们只收集为您提供定制印刷服务所必需的信息；您上传的照片只用于制作您下单的商品；我们不会把您的信息出售给任何人。

一、我们收集哪些信息

1. 您主动提供的

• 账户信息：账号名、电子邮箱、密码。密码以不可逆的方式加密保存，我们无法查看您的原始密码。
• 第三方登录标识：若您使用第三方账号登录，我们会保存该平台返回的用户标识，用于识别您的账户。我们不保存第三方登录返回的访问令牌与会话密钥。
• 订单与收货信息：收货人姓名、电话、地址、邮编。
• 您上传的内容：照片、文字，以及您用它们制作的作品。
• 联系与客服记录：您在客服会话中发送的文字与图片。
• 实名核验信息（仅在适用时）：若您所在地区的法律或本平台的风险控制要求对某类订单进行实名核验，您需要提供姓名与证件号或手机号。相关说明见《实名核验使用协议》。

2. 您使用服务时自动产生的

• 设备与日志信息：IP 地址、浏览器或客户端类型、操作时间、访问的页面。
• 操作记录：下单、支付、编辑作品等关键操作的时间与结果，用于排查问题与保障交易安全。
• 协议同意记录：您同意某份协议的时间、版本号、当时的界面语言与 IP。这是我们证明您已获得告知的依据，依法保存。

二、我们为什么收集，以及依据是什么

信息	用途	依据
账户信息	创建与识别您的账户、找回密码、发送与订单有关的通知	履行与您的合同所必需
订单与收货信息	生产、开票、配送、售后	履行与您的合同所必需
您上传的照片与作品	在编辑器中呈现、生成印刷文件、制作您下单的商品	履行与您的合同所必需
设备与日志信息	保障账户与支付安全、排查故障、防范滥用	我们与您的正当利益
AI 功能的输入内容	生成您请求的结果、进行必要的合规审核	您的单独同意（见《AI 使用协议》）
人脸特征	实现您主动开启的美颜效果	您的单独同意（见《人脸特征处理同意》）
实名核验信息	完成法律或风控要求的身份核验	法律义务或您的单独同意

我们不会把您的信息用于本政策未载明的用途。如果将来出现新的用途，我们会重新征求您的同意。

三、我们与谁共享

我们不出售您的个人信息。为了把服务交付给您，我们需要把必要的信息提供给下列类别的服务商，且仅限于其完成工作所必需的范围：

• 支付服务商——处理您的付款。您的支付凭据由他们直接收集，我们不接触。
• 物流承运商——我们会向其提供收货人姓名、电话与地址以完成配送。
• 云存储服务商——您上传的照片与作品文件存放在云存储服务上。
• 人工智能服务商——仅当您使用 AI 功能时，您在该功能中输入的文字与您为此提交的图片会发送给 AI 服务商用于生成结果。未使用 AI 功能则不会发生此项共享。
• 短信与电子邮件服务商——发送验证码与订单通知。
• 身份核验服务商——仅在需要实名核验时，用于核对您提供的身份信息。
• 第三方登录平台——仅在您选择第三方登录时，用于验证您的身份。

此外，在下列情形我们可能披露您的信息：法律、法律程序或主管机关的强制要求；为保护本平台、其他用户或公众的重大合法权益所必需；您另行同意的其他情形。

本平台的具体服务商由本商户配置，可能因商户而异。您可以通过本政策末尾的联系方式，向我们索取当前实际使用的服务商清单。

四、您的照片与作品（请重点阅读）

照片是您交给我们最敏感的信息，我们单列一章说明：

• 用途单一：您上传的照片仅用于在编辑器中呈现、生成印刷文件、以及制作您下单的商品。我们不会将您的照片用于宣传、展示、训练模型或提供给无关第三方。
• 存放位置：照片文件存放在云存储服务上，访问需经我们的服务鉴权。
• 可见范围：您的作品默认仅您本人可见。只有当您主动使用分享功能生成分享链接时，持有该链接的人才能查看。如不希望继续分享，请删除该作品或联系我们。
• 请您自行保存原件：本平台不是照片备份服务，请不要把本平台作为原始照片的唯一存放地。

五、人脸特征的处理

若您使用美颜功能，系统需要识别照片中的人脸位置。这一识别过程完全在您的设备（浏览器或客户端）内完成，识别所用的模型也由本平台自行托管——您的照片不会为了识别人脸而被上传到任何第三方。

识别产生的是一组描述五官位置的坐标数值，它会随您的作品一起保存，以便您下次打开时复现同样的效果。详细说明与您的选择权见《人脸特征处理同意》。

六、我们保存多久

• 账户存续期间：您的账户信息、作品与订单记录在您使用本平台期间持续保存。
• 最短保存期：交易与日志类记录，我们会按照适用法律要求的期限保存，该期限不少于 180 天，具体时长由本商户根据所在地法律设置。
• 注销之后：您申请注销后，账户进入 15 天冷静期；冷静期内任何一次成功登录都会自动撤销注销。冷静期届满后，我们会删除或匿名化您的个人信息。作品与照片将被永久删除、无法恢复；订单交易记录会在去除个人信息后按法律要求的期限保留。完整说明见《账户注销须知》。
• 超过保存期限或不再必要的信息，我们会删除或匿名化处理。

七、我们如何保护

• 传输过程使用加密连接。
• 敏感字段（包括证件信息、联系方式、IP 等）以加密形式存放在数据库中，加密密钥与数据分开保管并定期轮换。
• 密码不以明文或可还原的方式保存。
• 后台管理权限按岗位最小化分配，涉及资金与用户数据的高风险操作需要二次验证并留存操作日志。
• 尽管如此，没有任何系统可以保证绝对安全。若发生可能影响您权益的数据安全事件，我们会按照适用法律的要求通知您与主管机关，并说明我们采取的措施。

八、您的权利

在适用法律允许的范围内，您可以：

• 查阅与更正——在账户设置中查看并修改您的账户信息与收货地址；
• 删除——删除您的作品与照片；或通过注销删除整个账户；
• 撤回同意——对于基于您同意而处理的信息（如 AI 功能、人脸特征），您可以停止使用该功能；撤回不影响撤回前已经进行的处理；
• 获取副本——就我们持有的与您有关的信息向我们索取副本；
• 投诉——如果您认为我们处理您信息的方式不当，可以联系我们；您也有权向您所在地区的个人信息保护主管机关投诉。

我们会在合理期限内答复您的请求。为防止他人冒用您的身份提出请求，我们可能需要先核验您的身份。若我们拒绝您的请求，会说明理由。

九、未成年人

本平台面向成年人提供服务。若您未达到您所在地区法律规定的可独立订立合同的年龄，请在监护人同意并陪同下使用。若我们发现在未取得监护人同意的情况下收集了未成年人的个人信息，会尽快删除。监护人如发现此类情况，请通过本政策末尾的方式联系我们。

十、信息的跨境处理

我们使用的部分服务商（例如云存储、人工智能、支付服务商）的服务器可能位于您所在国家或地区之外。这意味着您的信息可能被传输到境外并在境外存储或处理。

发生此类传输时，我们会采取适用法律要求的措施，例如与接收方订立数据保护条款、评估接收方所在地区的保护水平，或在法律要求时另行取得您的同意。您可以通过本政策末尾的联系方式，了解本商户当前的数据存放地与跨境情况。

十一、Cookie 与同类技术

我们使用 Cookie 及本地存储维持您的登录状态、记住您的界面偏好、以及保障账户安全。这些是服务运行所必需的，关闭它们会导致您无法保持登录。您可以通过浏览器设置管理 Cookie，但这可能影响部分功能的使用。

十二、本政策的更新

我们可能更新本政策。涉及处理目的、处理方式或共享对象实质变化的更新，我们会在您下次使用相关功能时请您重新确认。文字订正等非实质性更新不再单独请求确认。历次版本我们会留存记录。

十三、联系我们

关于本政策，或您希望行使上述任何一项权利，请联系：

• 客服电话：【★ 请替换：客服电话 ★】
• 个人信息保护相关事宜邮箱：【★ 请替换：隐私事务邮箱 ★】
• 通讯地址：【★ 请替换：通讯地址 ★】

本政策自您点击同意之日起生效。

照片的保存期限

您上传的照片，我们按本站「照片保留设置」中公示的期限保存。超期未使用的照片会先进入您的回收站（期间可自行恢复），回收站到期后由系统清理；清理后的文件在备份区域另行保留一段时间用于审计与差错处理，之后自动销毁。

您已付款订单中的作品所引用的照片，为履行订单、处理售后及支持再次下单，我们将长期保存，不适用上述期限。

您可以随时在相册中删除自己的照片，删除后的照片同样先进入回收站并适用上述规则。

Privacy Policy

This Policy explains what information [★ REPLACE: Merchant Name ★] ("we", "us") collects about you when you use the Platform, why we collect it, who we share it with, how long we keep it, and how you can control it. Please read it before using the service.

In short: we collect only what we need in order to make the personalised goods you order; the photographs you upload are used only to produce those goods; and we do not sell your information to anyone.

1. What We Collect

1.1 Information you give us

• Account details — username, email address, password. Your password is stored in a form that cannot be reversed; we cannot see it.
• Third-party login identifiers — if you sign in with another platform's account, we store the identifier it returns so that we can recognise your account. We do not store the access tokens or session keys returned by those platforms.
• Order and delivery details — recipient name, telephone number, address and postcode.
• Content you upload — photographs, text, and the works you create from them.
• Support correspondence — messages and images you send through customer support.
• Identity verification details, where applicable — where the law in your territory, or our risk controls, require identity verification for certain orders, you will be asked for your name and an identity document number or mobile number. See the Identity Verification Consent for detail.

1.2 Information generated as you use the service

• Device and log data — IP address, browser or client type, time of action, pages visited.
• Activity records — the time and outcome of key actions such as placing an order, paying, or editing a work, used to investigate problems and to keep transactions secure.
• Consent records — when you accepted an agreement, which version, the interface language at the time, and your IP address. This is how we evidence that you were properly informed, and it is retained as the law requires.

2. Why We Collect It, and On What Basis

Information	Purpose	Basis
Account details	Creating and identifying your account, password recovery, order notifications	Necessary to perform our contract with you
Order and delivery details	Production, invoicing, delivery, after-sales	Necessary to perform our contract with you
Photographs and works	Display in the editor, generation of print files, manufacture of what you ordered	Necessary to perform our contract with you
Device and log data	Account and payment security, fault diagnosis, prevention of abuse	Our legitimate interests, and yours
AI feature inputs	Producing the result you asked for, and the compliance check that precedes it	Your separate consent (see the AI Use Agreement)
Facial landmarks	Applying the retouching effect you chose to switch on	Your separate consent (see the Facial Data Consent)
Identity verification details	Completing a verification required by law or by risk controls	Legal obligation, or your separate consent

We do not use your information for purposes not set out in this Policy. If a new purpose arises, we will ask for your consent again.

3. Who We Share It With

We do not sell your personal information. To deliver the service we pass the necessary information to the following categories of provider, limited to what each needs in order to do its job:

• Payment providers — to take your payment. Your payment credentials go to them directly; we do not receive them.
• Carriers — we give them the recipient's name, telephone number and address so that they can deliver.
• Cloud storage providers — your uploaded photographs and work files are stored on cloud storage.
• AI providers — only when you use an AI feature. The text you enter and any image you submit for that purpose are sent to the AI provider to generate the result. If you do not use AI features, no such sharing occurs.
• SMS and email providers — to send verification codes and order notifications.
• Identity verification providers — only where verification is required, to check the details you supply.
• Third-party login platforms — only where you choose to sign in with them.

We may also disclose your information where required by law, legal process or a competent authority; where necessary to protect the substantial legitimate interests of the Platform, our users or the public; or where you have separately agreed.

The particular providers used on this Platform are configured by this merchant and may differ between merchants. You may request the current list using the contact details at the end of this Policy.

4. Your Photographs and Works (please read carefully)

Photographs are the most sensitive thing you entrust to us, so we deal with them separately:

• A single purpose. Your photographs are used to display your work in the editor, to generate print files, and to manufacture what you ordered. We do not use them for marketing, display, model training, or supply them to unrelated third parties.
• Where they are kept. Files are held on cloud storage and access is authenticated by our service.
• Who can see them. By default your work is visible only to you. Only if you choose to create a share link can anyone holding that link view it. If you no longer wish to share, delete the work or contact us.
• Keep your own originals. The Platform is not a backup service; it should not be the only place your original photographs exist.

5. Facial Data

If you use the retouching feature, the system needs to locate faces in the photograph. That detection happens entirely on your own device (in your browser or the app), using a model we host ourselves — your photograph is not uploaded to any third party for the purpose of face detection.

What detection produces is a set of coordinates describing the position of facial features. It is saved with your work so that the same effect can be reproduced when you open it again. The detail, and your choices, are set out in the Facial Data Consent.

6. How Long We Keep It

• While your account is open — your account details, works and order records are kept for as long as you use the Platform.
• Minimum retention — transaction and log records are kept for the period applicable law requires, which is not less than 180 days; the exact period is set by this merchant according to local law.
• After closure — once you request closure your account enters a 15-day cooling-off period, and any successful sign-in during that period cancels the closure. After it ends we delete or anonymise your personal information. Works and photographs are permanently deleted and cannot be recovered; transaction records are retained, stripped of personal information, for the period the law requires. See the Account Closure Notice for the full picture.
• Information held beyond its retention period, or no longer needed, is deleted or anonymised.

7. How We Protect It

• Data in transit is carried over encrypted connections.
• Sensitive fields — including identity details, contact details and IP addresses — are stored encrypted in the database, with keys held separately from the data and rotated periodically.
• Passwords are never stored in plain text or in any recoverable form.
• Administrative access is granted on a least-privilege basis; high-risk operations touching money or user data require a second verification step and are logged.
• Even so, no system can be guaranteed absolutely secure. If a security incident occurs that may affect your rights, we will notify you and the relevant authority as applicable law requires, and explain what we have done about it.

8. Your Rights

So far as applicable law allows, you may:

• Access and correct — view and change your account details and delivery addresses in your account settings;
• Delete — delete individual works and photographs, or close your account entirely;
• Withdraw consent — where we rely on your consent (AI features, facial data), you may stop using that feature; withdrawal does not affect processing already carried out;
• Obtain a copy — ask us for a copy of the information we hold about you;
• Complain — contact us if you believe we have handled your information improperly. You may also complain to the data protection authority in your territory.

We will respond within a reasonable period. To prevent someone else making a request in your name, we may need to verify your identity first. If we refuse a request, we will tell you why.

9. Children

The Platform is intended for adults. If you have not reached the age at which you can enter into a contract where you live, please use it only with the consent and supervision of a parent or guardian. If we learn that we have collected a child's personal information without that consent, we will delete it promptly. Parents and guardians who become aware of such a case should contact us using the details below.

10. International Transfers

Some of the providers we use — cloud storage, AI and payment providers among them — may operate servers outside your country or territory. Your information may therefore be transferred, stored or processed abroad.

Where that happens we apply the safeguards applicable law requires: contractual data protection terms with the recipient, an assessment of the level of protection in the recipient's territory, or your separate consent where the law requires it. You may ask us, using the details below, where this merchant's data is held and what transfers take place.

11. Cookies and Similar Technologies

We use cookies and local storage to keep you signed in, remember your interface preferences, and protect your account. These are necessary for the service to work; disabling them will prevent you from staying signed in. You can manage cookies through your browser, but some features may then be unavailable.

12. Changes to This Policy

We may update this Policy. Where an update materially changes the purposes, the means of processing, or who we share with, we will ask you to accept it again the next time you use the relevant feature. Minor updates such as corrections of wording do not trigger a fresh request. We keep a record of each version.

13. Contact Us

For questions about this Policy, or to exercise any of the rights above:

• Telephone: [★ REPLACE: Customer Service Telephone ★]
• Privacy enquiries: [★ REPLACE: Privacy Email ★]
• Postal address: [★ REPLACE: Postal Address ★]

This Policy takes effect when you accept it.

How Long We Keep Your Photos

We keep the photos you upload for the period published under "Photo Retention" on this site. Photos not used beyond that period first go to your recycle bin (where you can restore them yourself); once the recycle-bin period is over the system cleans them up. The files are then kept in our backup area for a further period for audit and error-handling purposes and are destroyed automatically afterwards.

Photos referenced by works in your paid orders are kept long term and are not subject to the period above, so that we can fulfil your order, handle after-sales and support re-ordering.

You may delete your own photos from the album at any time; deleted photos also go to the recycle bin first and follow the same rules.