Privacy Policy

Last updated: 2026-10-08 · Product Studio (/), operated by KunStudio.

1. Information We Collect

We collect minimal data to operate Product Studio:

Photos you upload: the product photos you upload, used solely to generate your result image.
Analytics data (via Google Analytics 4): device and browser type, pages visited, approximate region (Google Analytics 4 does not log or store IP addresses), and interaction events. Collected through cookies and similar identifiers.
Listing details you type: if you add the SEO listing copy option, the product name, category, features, brand and target buyer you enter.
Information you provide: only if you contact us or submit a form (e.g. email address).
Payment data: processed securely by PayPal. We do not store your card or bank details on our servers.

2. How Your Photos Are Handled

Uploaded photos are transmitted securely (HTTPS) to our AI processing provider fal.ai and stored on fal's media storage in order to generate your result. We do not keep copies of your photos on our own servers, we do not use your photos to train AI models, and we never sell or share them. See the fal.ai Privacy Policy for the provider's handling. To request deletion of an uploaded photo or generated image, contact us at the address below and we will process the request with our provider.

2a. How listing text is processed by AI providers

If you add the SEO listing copy option, the listing details you typed (not your photo) are sent over HTTPS to Google Gemini API (Google LLC), our main text provider, and, only as a last-resort fallback when Gemini does not return a usable answer, to the OpenAI API (OpenAI). As of 2026-10-03 we use the Gemini API under Google's paid service terms (Paid Services); before that date we used Google's free tier. Under Google's terms for Paid Services, Google does not use submitted prompts or responses to improve its products and processes them under its Data Processing Addendum for Products Where Google is a Data Processor. Google logs prompts and responses for a limited period of time, solely to detect and prevent violations of its Prohibited Use Policy and to meet legal or regulatory disclosure requirements, and this data may be stored transiently or cached in any country where Google or its agents maintain facilities (see Gemini API Additional Terms of Service). Please do not type personal or confidential information into the listing fields. We do not store your listing details after your copy has been returned to your browser.

We also keep a delivery record per order (PayPal order number, plan, amount, time, whether images and copy were delivered, and a short technical error message if a step failed; no photos and no listing text) for up to 400 days, for support, refunds and accounting.

3. Cookies & Tracking

We use analytics cookies (Google Analytics 4) to understand usage and improve the service. These are non-essential. We do not use advertising cookies. Cookies collect device type and browsing behavior (Google Analytics 4 does not log or store IP addresses); retention follows the setting on our Google Analytics property, currently 2 months for event-level data. You can block cookies via your browser settings.

4. How We Use Data

To provide and improve Product Studio, analyze aggregate usage, and respond to inquiries. We do not sell or share your personal information for cross-context behavioral advertising.

5. Third Parties

fal.ai — AI image processing. See fal.ai Privacy Policy.
Google (Gemini API) — AI listing-copy text. See Google Privacy Policy.
OpenAI — AI listing-copy text (fallback). See OpenAI Privacy Policy.
Google Analytics — usage analytics. See Google Privacy Policy. Google processes data as described in its policy.
PayPal — payment processing. See PayPal Privacy Statement.
Cloudflare — hosting and security.

6. Your Rights

EU/UK (GDPR): You have the right to access, correct, delete, or restrict processing of your data, and to withdraw consent at any time. Non-essential (analytics) cookies are used only with your consent where required.

California (CCPA/CPRA): You have the right to know, delete, correct, and opt out of the sale/sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of; you may also use your browser's privacy controls. To exercise rights, contact us below.

Other regions: We apply these protections to all visitors regardless of location.

7. Data Retention

Our servers keep no copy of your photos or result images. Files our image provider (fal.ai) holds stay under fal.ai’s own storage settings: we set no expiry and run no deletion job, so we cannot state a deletion date (fal.ai’s documentation says request inputs and outputs are kept for 30 days by default). Email us the order ID to have them deleted; we will request it from fal.ai. Event-level analytics data is retained for 2 months — the period currently set on our Google Analytics property; aggregate reports remain after that. Contact/inquiry data is kept only as long as needed to respond, then deleted.

Result copy email (after purchase)

After you pay, we email you one copy of your results and your order details (payment confirmation, PayPal order number and links to your images plus the listing copy if you bought it). The recipient is the address you type in the optional email field next to the PayPal buttons or, if you leave it empty, the email address of your PayPal account as returned to us by PayPal. We use the address only to send this message and do not keep it in our order records. To enforce a daily limit and avoid duplicate sends we keep, for 90 days, a marker that a copy was sent for the order (it holds a shortened one-way hash of the address, not the address) and, for 2 days, a list of order numbers per address hash. The message is sent through our Gmail account (Google), so a copy stays in that mailbox's sent folder until we delete it; email us to have it deleted. The links point to files hosted by our image provider and may expire. The buyer address travels inside the signed 12-hour order token held by your own browser; we do not store it. If a copy cannot be delivered (for example during a Gmail outage, or when one address has already received copies of several other orders today), the address and the composed message are kept for up to 7 days so we can resend it by hand, then deleted automatically; nothing is resent automatically.

Feedback, referral and share buttons

Feedback button. If you use it, the message you write, the optional email address you type, the feedback type, the page you were on, the first 160 characters of your browser’s identification text (User-Agent) and your country are sent to KunStudio’s own feedback endpoint (sajuapp.app, run by us). They are saved in a file in a GitHub Gist controlled by us (GitHub, Inc., United States) that keeps the most recent 500 entries with no other time limit, and the message, page and email are forwarded to the operator in a Telegram message. Do not put anything confidential in the message. To have an entry deleted, email us.

8. Contact

For any privacy request or question: [email protected] (KunStudio). We respond within a reasonable timeframe.

← Back to Product Studio

Operator alerts and international transfers (added 2026-10-07)

Operator alerts. When a paid order succeeds, fails or needs attention (for example a failed delivery, a payment check flag or a failed result email), our server sends the operator a Telegram message (Telegram) with the PayPal order ID, the product code, the amount and a short reason. It contains no photo and no text you typed. Telegram processes it on servers in various countries.

Korea (PIPA Articles 26 and 28-8). The providers named in this policy (our image provider, PayPal, Google, Telegram and Cloudflare) process data on our behalf outside Korea, mainly in the United States, over the internet at the moment you use the feature that needs them (upload, preview, payment, generation, email). The items sent, the purpose and the retention are the ones described in this policy; you may refuse by not using that feature, but the service cannot be provided without it. Privacy officer (개인정보 보호책임자): Hong Deokhun (홍덕훈), 070-8018-7832, [email protected]. You may ask to view, correct, delete or suspend processing of your personal information, or withdraw consent, at any time.

KunStudio (쿤스튜디오) · Representative: Hong Deokhun (홍덕훈) · Business Registration No. 552-59-00848 · Mail-order business report No. 제2026-경북경주-0237호 (경주시장, reported 2026-05-20) · 25-52, Jenaemosan-gil, Oedong-eup, Gyeongju-si, Gyeongsangbuk-do, Republic of Korea · Tel 070-8018-7832 · [email protected]