Privacy Policy

This explains what we collect, what we do with the images you upload, how long we keep things, and what you can ask us to do. It is written to be read rather than to be survived.

1. Who we are

Jinkō-Mage is the AI imaging product of [registered company name], registered at [registered address]. In this policy "we" and "us" mean that company, and "you" means the person or organisation using our products, which include the Jinkō-Mage generator, RE Studio, and our retouching services.

We are the data controller for the information described here. For privacy questions, write to [email protected].

2. What we collect

What	Where it comes from
Account details name, email address, password (stored hashed, never in readable form), company name	You, when you register
Images you upload product photographs, room photographs, reference images	You, when you use the product
Images we generate the outputs produced from your uploads, and the settings used to produce them	Created by the service
Usage records which actions you ran, when, how long they took, credits consumed, errors encountered	Recorded automatically
Billing details plan, invoices, payment status	You and our payment processor. We never see or store your full card number.
Analytics pages viewed, approximate region, device type	Only if you accept analytics cookies

3. Your images, and model training

This is the section most people are actually looking for, so it is the most specific one here.

Without your written consent

We use the images you upload, and the images we generate from them, only to:

• produce and deliver the output you asked for;
• investigate faults, quality problems and support requests, including cases you report to us and cases our automated quality checks flag;
• improve our software from what those investigations teach us, by changing our code, our instructions to the models we use, and our quality checks;
• keep aggregate operational statistics, such as how often a check fails, which contain no images.

None of that involves training or fine-tuning model weights on your images.

With your written consent

If you give specific written consent, we may additionally use your images to train or fine-tune models. Where we do:

• Scope. The resulting model is used to produce your work. We do not offer it to other customers, and we do not merge your images into a general-purpose model sold to others, unless a separate agreement says so in terms.
• Specificity. Consent covers the images, the purpose and the period named in the consent document. It is not a blanket permission and it is not buried in these terms. It is a separate document you sign.
• Withdrawal. You can withdraw consent at any time, in writing. We then stop using your images for training, and remove them from the training set.
• What withdrawal cannot undo. We will be straight with you about this: removing images from a training set stops future training, but a model that has already been trained cannot always be returned to the state it was in beforehand. Where a model can be retrained or rolled back we will do it and tell you when. Where it cannot, we will tell you that instead, rather than imply an erasure we cannot perform.

Our own material

We train primarily on images we own and produce ourselves, using our own garments, our own sample rooms and our own generated results. That is the default source for our model development and it involves no customer material at all.

4. Why we are allowed to process it

If you are in the UK or the European Economic Area, the law requires us to name a lawful basis for each purpose. Ours are:

• Performing our contract with you. Producing your images, running your account, taking payment, providing support.
• Our legitimate interests. Keeping the service secure, preventing abuse, and fixing faults in our software. We have considered your interests against ours and limited this to what fault-fixing actually requires.
• Your consent. Analytics cookies, marketing email, and any use of your images for model training. Consent can be withdrawn.
• Legal obligation. Keeping tax and accounting records.

5. Who else sees it

We use third-party providers to run the service. They act on our instructions and may not use your material for their own purposes. By category, they are:

• Cloud hosting and storage providers, who store the files and run the application.
• AI model providers, who process an image in order to return a generated result. We use paid service tiers, which are contracted so that the provider does not use your prompts or images to improve their own products.
• Our payment processor, who handles card details directly so that we do not hold them.
• Email delivery and analytics providers, for account email and, where you have consented, site analytics.

We do not sell your personal information, and we do not sell or license your images. If you need our providers named individually, for example for a vendor security review or a data processing agreement, write to us and we will give you the current list.

6. Where it is processed

We operate from India and our providers are largely in the United States and the European Union, so your material is processed outside your country. Where we move personal data out of the UK or the EEA we rely on the European Commission's Standard Contractual Clauses, or the UK Addendum, with the provider concerned.

7. How long we keep it

What	How long
Working files on our servers	7 days, then deleted automatically
Your uploads and finished images in your account	[retention period for account images]
Account details	While your account is open, then [period] after closure
Usage and billing records	As long as tax and accounting law requires
Images in a training set, where you consented	For the period named in your consent document, or until you withdraw consent

You can ask us to delete your images sooner. See your rights below.

8. Your rights

Depending on where you live, you can ask us to:

• give you a copy of what we hold about you;
• correct anything that is wrong;
• delete your material, subject to records we must keep by law;
• export your data in a portable format;
• stop processing based on legitimate interests, where you object;
• withdraw a consent you previously gave, including consent to training.

Write to [email protected]. We will respond within 30 days. You do not have to pay, and you do not have to give a reason. If you think we have handled your data badly you can also complain to your local data protection authority, which in the UK is the Information Commissioner's Office.

9. Cookies and analytics

Cookies that are needed to keep you signed in are always on, because the product does not work without them. Analytics cookies are off until you accept them, and you can change your mind from the cookie banner at any time. We do not use advertising cookies and we do not track you across other websites.

10. Security

Traffic is encrypted in transit. Passwords are stored hashed, so nobody at our company can read yours. Access to customer images is limited to people who need it to run the service or investigate a fault. No system is perfectly secure, and if a breach affects your data we will tell you and the relevant regulator within the time the law requires.

11. Children

Our products are for businesses. They are not directed at children and we do not knowingly collect information from anyone under 18. Do not upload photographs of children without the rights and permissions to do so.

12. Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect rather than quietly updating the date at the top. We will never change this policy to start training on images you already gave us under an earlier version. Training always requires consent given after you have seen what you are consenting to.

13. Contact

[registered company name]
[registered address]
[email protected]