LiaforaStudio
1. Introduction and Data Controller
The Service is provided by LiaforaStudio ("we", "us"), which acts as the data controller. This policy explains how we collect, use, share, and protect your personal information when you use the Software and our website, and the rights you have under applicable law. Questions may be directed to [email protected].
2. Information We Collect
(a) Account information: email or phone number, password (stored only as a hash), third-party login identifiers (e.g., Google, WeChat), nickname, and avatar; (b) Transaction information: top-up, Computinglet purchase, and subscription records (sensitive payment data such as card numbers is processed directly by the payment provider; we do not store full card numbers); (c) Usage and log information: feature usage, device and operating system information, IP address, crash and error logs; (d) Content you upload for processing: audio, video, images, and documents submitted to AI features; (e) Local data: certain settings and caches stored locally on your device.
3. How We Use Information and Legal Bases
We process personal information to: provide, maintain, and improve the Service (performance of a contract); process orders and prevent fraud (contract performance and legitimate interests); analyze and improve the product (legitimate interests, which you may object to); send service or marketing communications where you have consented (consent, withdrawable at any time); and comply with legal obligations (statutory, tax, and judicial requirements).
4. AI Processing
To deliver features such as video translation and image processing, the content you choose to process is transmitted in encrypted form to our AI service providers. We do not use your uploaded content to train general-purpose AI models (unless separately and clearly disclosed with your prior consent). After processing, content is deleted or anonymized in accordance with our retention practices.
5. How We Share Information
We do not sell your personal information. We share it only: (a) with our payment provider, which collects the payment and billing information needed to complete a purchase and handles invoicing, tax, and refunds; (b) with other service providers—AI compute providers, cloud hosting and CDN providers located in the United States, and messaging and customer support systems—under contracts restricting them to processing for those purposes; (c) where required by law, or by compulsory request of judicial or administrative authorities; (d) in connection with a merger, acquisition, or asset transfer, where the successor remains bound by this policy.
6. International Data Transfers
Our servers and service providers are located principally in the United States (Silicon Valley, California), and we operate from the Hong Kong SAR. For personal data transferred out of the EEA, the UK, and Switzerland, we rely on approved transfer mechanisms: where a recipient in the United States is certified under the EU-US Data Privacy Framework (including its UK Extension), we rely on that adequacy decision; otherwise we rely on the European Commission’s approved Standard Contractual Clauses, and for UK transfers the International Data Transfer Agreement or the UK Addendum. We also apply supplementary measures such as encryption in transit. You may request a copy of these safeguards at [email protected].
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy, including the period your account is active and the Service is provided, plus any period required by law (e.g., tax and transaction records). After you close your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law.
8. Your Rights
EEA and UK users (GDPR): you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with your local supervisory authority. California users (CCPA/CPRA): you have the right to know, delete, and correct your personal information, and to opt out of its "sale" or "sharing" (we do not sell personal information), without discrimination for exercising these rights. Users in other regions have equivalent rights under local law. To exercise any right, contact [email protected]; we will respond within the timeframe required by law.
9. Children's Privacy
The Service is intended for users aged 16 and over. We do not knowingly collect personal information from children under 13 (or below the consent age applicable in your EEA country). If you believe a child has provided us with personal information, contact [email protected] and we will delete it promptly.
10. Security
We protect personal information using measures such as encryption in transit (TLS), access controls, and data minimization. No system is absolutely secure; we continuously improve our security practices and will notify you of any data breach affecting your rights as required by law.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date shown on this page and publish the update via in-app notice or our website; material changes will be prominently highlighted.
12. Contact Us
For questions, concerns, or complaints about this policy or our processing of personal information, contact [email protected].