How Yim Studio uses and protects your data

For questions about how Yim Studio uses your data, contact info@yimstudio.co.

For privacy questions, rights requests, consent withdrawal, or deletion requests, contact info@yimstudio.co. We may ask for only the information needed to verify your identity and prevent someone else from accessing or deleting your data.

We collect information from you, from your use of the service, and from data created to provide the service:

• Account and contact data, such as name, email, optional LINE ID, language, and account authentication records.
• Free likeness check eligibility records, including the trusted registration date and a salted email hash to prevent repeated claims. This hash is not a photo or face template.
• Uploaded face photos and selfies, including file details, image-quality signals, and whether a usable face was detected.
• Face-derived biometric data: a 128-number face descriptor, which is a numerical template of facial characteristics used for likeness comparison rather than a copy of the photo.
• With your consent, we retain your uploaded reference collection privately to select suitable combinations, plus a separate face descriptor. Face-detail crops are prepared temporarily during generation. Older accounts retain one 768 × 768 face crop. Legacy LoRA data is retained only where prior or separate consent covers it.
• Generation data, such as selected style, creative goals, prompts, results, credits used, job status, and rerun requests.
• Order and payment data, such as pack, amount, currency, payment status, order number, a bank slip or transaction reference you submit, and provider transaction identifiers when Stripe is used. We do not receive or store full card numbers or card security codes.
• Technical and security data, such as IP address, request identifiers, error logs, service events, session data, essential cookies, and signals used to prevent fraud or policy abuse.
• Support messages and records of how we handled your request.

We use data to create and secure accounts, receive and check photos, prepare a private face reference, generate and deliver portraits, evaluate likeness, administer credits and orders, provide support, prevent fraud, maintain security, diagnose failures, and comply with law.

General processing is based on necessity to provide the contracted service, legitimate interests in security and reliability, and legal obligations. Use of face photos, face descriptors, private face references, and legacy identity models as biometric data is based on explicit consent unless a specific alternative basis is permitted by applicable law.

Automated identity-quality checks compare a result's face descriptor with the reference template. A result may pass, be rejected, or require further review. If you believe an automated result is wrong, contact support and ask for review.

Your references transfer facial identity and the facial characteristics needed for likeness only. The system creates new clothing, body state, scenes, lighting, poses, camera angles, crops, and compositions for the selected style instead of copying source-photo context. Tattoos are allowed and may be retained when naturally visible, but they are not used as facial biometric identifiers.

Yim Studio supports one person's private reference set per account: your uploaded collection for reference selection and approved combinations for generation. We do not use this data to generate another person's identity, identify you in unrelated services, or target advertising.

Withdrawing consent stops future consent-based processing but does not invalidate processing that was lawful before withdrawal. Withdrawing face-data consent may mean we can no longer use your private face reference, generate new photos, or provide service features that depend on identity data.

We disclose data only as needed to providers that operate the service. Providers may process data outside Thailand. Cross-border processing is handled under applicable law and provider terms, using available contractual and technical safeguards appropriate to the transfer. You may email us for more detail about destinations or safeguards.

• FAL (fal.ai) for face-reference image generation, temporary job payloads, and job-status callbacks and, only for legacy processing covered by prior or separate consent, AI model training and checkpoint processing.
• KBank for receiving and verifying direct bank transfers, and Stripe for checkout, transaction confirmation, fraud prevention, and payment records when that route is enabled.
• Supabase for the database, authentication, and private storage of some uploads or results.
• Google Cloud for hosting, server functions, secret management and scheduled operations. With explicit multi-reference consent, Gemini assesses the uploaded reference collection to select suitable combinations. Google Vertex AI (Nano Banana) receives the selected references, temporary face-detail crops and prompt for generation; Gemini reviews references, results and the brief for likeness and quality. We do not send the 128-value face descriptor to Google. Global processing may occur outside Thailand. Older consent does not automatically authorize the expanded processing.
• Google states that customer data is not used to train or fine-tune models without prior permission. Prompts flagged for possible abuse may nevertheless be logged for up to 90 days. Deleting your Yim Studio data therefore does not promise immediate deletion of Google's security logs.
• Resend for transactional order, payment, and account-ready email from Yim Studio's verified domain, using its Tokyo processing region.
• Cloudflare Turnstile for bot and automated-form protection, which may process browser and network signals needed for the security check.
• Cloudflare R2 for private storage of large legacy-model checkpoints and result assets when selected as the active store.

After a checkpoint or result is secured in Yim Studio's durable private storage and the job is settled, Yim Studio calls FAL's request-payload deletion control. During account deletion, stored request identifiers are used to request FAL payload deletion again. Provider security logs or backups that must be retained remain subject to that provider's terms and legal obligations.

We keep data only as long as needed for the purposes above, security, dispute handling, and legal obligations, using these operational rules:

• Uploads and setup data for an abandoned form or order are deleted within 30 days.
• Original uploads and legacy training archives are scheduled for deletion around 24 hours after setup, subject to the maintenance cycle. The reference collection remains private while the account is active and needed for selection and generation; older accounts retain one face crop. Account face-data deletion includes every retained reference image.
• Waitlist names and email addresses are kept for 180 days after the latest signup or update, then removed by scheduled maintenance.
• Private generated-result assets are scheduled for deletion after 30 days. Limited job-status or transaction records may remain where needed for the purposes stated in this notice.
• Uploaded bank slips are kept in restricted private storage only as long as needed to verify the payment, handle disputes, prevent fraud, and meet applicable accounting or legal duties. They are not placed in the customer gallery or used for advertising.
• After a model checkpoint or generated result is durably stored and successfully settled, Yim Studio calls FAL's request-payload deletion control. Account deletion requests cleanup again using the stored provider request identifiers.
• The face descriptor, private reference set and any consented legacy model are kept while the account is active and needed for generation, unless you request account deletion or law requires longer retention.
• Account deletion removes or de-identifies data controlled by Yim Studio, including source photos, the private face-reference crop, legacy models, face descriptors, and results. Transaction records, the credit ledger, or evidence required for tax, fraud, or legal claims may be retained in restricted or pseudonymised form.
• We retain the salted email hash and first-registration record in a separate restricted area while the free likeness check offer operates, including after account deletion, to prevent deleting and registering again to claim another free likeness check. We review the need for these records when the offer ends.
• Deletion of data held by an external provider uses that provider's available deletion controls. Security logs or backups the provider must retain remain subject to its timelines and obligations.

We may disclose information where needed to comply with law or a valid order, protect rights or safety, investigate fraud, or support a business reorganisation, with the recipient limited to the relevant purpose. We do not sell your face photos, face descriptors, private face references, or legacy models, and results are not public by default.

Subject to applicable conditions and exceptions, you may request access and a copy, data portability, correction, deletion, restriction, objection, consent withdrawal, and information about cross-border transfers. Send requests to info@yimstudio.co.

If you are not satisfied with our response, you may complain to Thailand's Personal Data Protection Committee (PDPC) or another competent authority. Exercising a right does not limit other legal remedies. We do not charge a fee unless the law permits one for a manifestly unfounded, excessive, or repetitive request.

We use risk-based safeguards including encrypted connections, private storage, access controls, time-limited delivery links where supported, account-level separation, event monitoring, request-rate limits, and server-side secrets. No system is perfectly secure. Contact us promptly if you suspect unauthorised access to your account or data.

The service is for adults aged 18 or older. Do not upload a minor's photo or another person's face unless you have legal authority and the explicit consent required for that processing. If we learn that data was submitted in breach of this rule, we may stop the job and delete the data.

We may update this notice when the product, providers, or law changes. The current date appears above. For a material change, we will give notice through the site, account, or email as appropriate and obtain renewed consent where required.