How Yim Studio uses and protects your data

Yim Studio is the service name responsible for decisions about data collected through yimstudio.co and acts as the data controller for that service. During this limited launch, final legal-operator identification is still being completed. The privacy contact is info@yimstudio.co.

For privacy questions, rights requests, consent withdrawal, or deletion requests, contact info@yimstudio.co. We may ask for only the information needed to verify your identity and prevent someone else from accessing or deleting your data.

We collect information from you, from your use of the service, and from data created to provide the service:

• Account and contact data, such as name, email, optional LINE ID, language, and account authentication records.
• Uploaded face photos and selfies, including file details, image-quality signals, and whether a usable face was detected.
• Face-derived biometric data: a 128-number face descriptor, which is a numerical template of facial characteristics used for likeness comparison rather than a copy of the photo.
• One private 768 × 768 face-reference crop, minimised from the clearest upload, plus a separate face descriptor. If the legacy trained-model system applies and prior or separate consent covers it, this may also include a LoRA, model token, training status, and identity-quality checks.
• Generation data, such as selected style, creative goals, prompts, results, credits used, job status, and rerun requests.
• Order and payment data, such as pack, amount, currency, payment status, order number, a bank slip or transaction reference you submit, and provider transaction identifiers when Stripe is used. We do not receive or store full card numbers or card security codes.
• Technical and security data, such as IP address, request identifiers, error logs, service events, session data, essential cookies, and signals used to prevent fraud or policy abuse.
• Support messages and records of how we handled your request.

We use data to create and secure accounts, receive and check photos, prepare a private face reference, generate and deliver portraits, evaluate likeness, administer credits and orders, provide support, prevent fraud, maintain security, diagnose failures, and comply with law.

General processing is based on necessity to provide the contracted service, legitimate interests in security and reliability, and legal obligations. Use of face photos, face descriptors, private face references, and legacy identity models as biometric data is based on explicit consent unless a specific alternative basis is permitted by applicable law.

Automated identity-quality checks compare a result's face descriptor with the reference template. A result may pass, be rejected, or require further review. If you believe an automated result is wrong, contact support and ask for review.

Your references transfer facial identity and the facial characteristics needed for likeness only. The system creates new clothing, body state, scenes, lighting, poses, camera angles, crops, and compositions for the selected style instead of copying source-photo context. Tattoos are allowed and may be retained when naturally visible, but they are not used as facial biometric identifiers.

Yim Studio supports one active private face reference per account at launch. We do not use your photos, descriptor, private face reference, or any legacy model to generate another person's identity, identify you in an unrelated service, or target advertising.

Withdrawing consent stops future consent-based processing but does not invalidate processing that was lawful before withdrawal. Withdrawing face-data consent may mean we can no longer use your private face reference, generate new photos, or provide service features that depend on identity data.

We disclose data only as needed to providers that operate the service. Providers may process data outside Thailand. Cross-border processing is handled under applicable law and provider terms, using available contractual and technical safeguards appropriate to the transfer. You may email us for more detail about destinations or safeguards.

• FAL (fal.ai) for face-reference image generation, temporary job payloads, and job-status callbacks and, only for legacy processing covered by prior or separate consent, AI model training and checkpoint processing.
• KBank for receiving and verifying direct bank transfers, and Stripe for checkout, transaction confirmation, fraud prevention, and payment records when that route is enabled.
• Supabase for the database, authentication, and private storage of some uploads or results.
• Google Cloud for website hosting, server functions, secret management, and scheduled operations.
• Resend for transactional order, payment, and account-ready email from Yim Studio's verified domain, using its Tokyo processing region.
• Cloudflare Turnstile for bot and automated-form protection, which may process browser and network signals needed for the security check.
• Cloudflare R2 for private storage of large legacy-model checkpoints and result assets when selected as the active store.

After a checkpoint or result is secured in Yim Studio's durable private storage and the job is settled, Yim Studio calls FAL's request-payload deletion control. During account deletion, stored request identifiers are used to request FAL payload deletion again. Provider security logs or backups that must be retained remain subject to that provider's terms and legal obligations.

We keep data only as long as needed for the purposes above, security, dispute handling, and legal obligations, using these operational rules:

• Uploads and setup data for an abandoned form or order are deleted within 30 days.
• Source photos and any legacy training archive are scheduled for deletion around 24 hours after the private face reference becomes ready. The exact time may vary slightly with the scheduled maintenance cycle. One minimised 768 × 768 face-reference crop remains in private storage while the account is active so you can create more photos without re-uploading the raw set.
• Waitlist names and email addresses are kept for 180 days after the latest signup or update, then removed by scheduled maintenance.
• Private generated-result assets are scheduled for deletion after 30 days. Limited job-status or transaction records may remain where needed for the purposes stated in this notice.
• Uploaded bank slips are kept in restricted private storage only as long as needed to verify the payment, handle disputes, prevent fraud, and meet applicable accounting or legal duties. They are not placed in the customer gallery or used for advertising.
• After a model checkpoint or generated result is durably stored and successfully settled, Yim Studio calls FAL's request-payload deletion control. Account deletion requests cleanup again using the stored provider request identifiers.
• The face descriptor, one private face-reference crop, and any legacy model are kept while the account is active and needed to generate photos, unless you request account deletion or law requires longer retention.
• Account deletion removes or de-identifies data controlled by Yim Studio, including source photos, the private face-reference crop, legacy models, face descriptors, and results. Transaction records, the credit ledger, or evidence required for tax, fraud, or legal claims may be retained in restricted or pseudonymised form.
• Deletion of data held by an external provider uses that provider's available deletion controls. Security logs or backups the provider must retain remain subject to its timelines and obligations.

We may disclose information where needed to comply with law or a valid order, protect rights or safety, investigate fraud, or support a business reorganisation, with the recipient limited to the relevant purpose. We do not sell your face photos, face descriptors, private face references, or legacy models, and results are not public by default.

Subject to applicable conditions and exceptions, you may request access and a copy, data portability, correction, deletion, restriction, objection, consent withdrawal, and information about cross-border transfers. Send requests to info@yimstudio.co.

If you are not satisfied with our response, you may complain to Thailand's Personal Data Protection Committee (PDPC) or another competent authority. Exercising a right does not limit other legal remedies. We do not charge a fee unless the law permits one for a manifestly unfounded, excessive, or repetitive request.

We use risk-based safeguards including encrypted connections, private storage, access controls, time-limited delivery links where supported, account-level separation, event monitoring, request-rate limits, and server-side secrets. No system is perfectly secure. Contact us promptly if you suspect unauthorised access to your account or data.

The service is for adults aged 18 or older. Do not upload a minor's photo or another person's face unless you have legal authority and the explicit consent required for that processing. If we learn that data was submitted in breach of this rule, we may stop the job and delete the data.

We may update this notice when the product, providers, or law changes. The current date appears above. For a material change, we will give notice through the site, account, or email as appropriate and obtain renewed consent where required.