Privacy

Email and a password hash. There is no WeChat login and no phone OTP.

Reference photos go to object storage for the generation you start. The server assigns the object key.

Face packs require a rights confirmation. The statement is stored with the pack id.

Stripe processes payment. We store the session id, amount, currency and status, not a full card number.

A delivery link shows that pack’s assets, the client name and the AI label. It does not show your email. It expires in 14 days.