Privacy Policy

1. About this policy

This policy explains how PainPoint Technologies Co., Ltd. ('we', 'us') collects, uses, shares, and protects your personal data for ArtOfClone (The Art of the Clone, artoftheclone.ai).

We are the collector/controller of your personal data.

2. Data we collect

• You provide: registration data (such as email); and the Materials used to build your Double (photos, video, voice samples, text).
• The Materials include your facial images and voice, which are sensitive data — we handle them with particular care (see 'Explicit consent' below).
• From Connected Accounts: within the scope you authorize, data from Instagram / Facebook / Threads (such as profile and posts).
• Collected automatically: usage and device data, IP address, cookies, and analytics data.
• Payment: handled by our third-party payment provider, Portaly (TapPay); we do not store your full card number.

3. Purposes & legal basis

Purposes: to provide and operate the Service (build and run your Double, create and publish Content), customer support, billing, security, and legal compliance.

Legal basis: performance of our contract with you; your consent (especially for sensitive data such as likeness and voice); and our legitimate interests (security, improvement).

4. Explicit consent for likeness & voice

We use your facial images, voice, and text to build and run your Digital Double only after we obtain your explicit consent.

You may withdraw consent at any time. After withdrawal we will stop that processing and, at your request, delete the related Materials, except where the law requires us to retain them.

5. AI & your data

We use third-party AI providers to generate Content: OpenAI for text, and Higgsfield for images (including the processing of your facial images).

We do not use your Materials or Content to train our own AI models.

We require our AI providers to process data only to provide the Service.

6. How we share data

• Service providers: our AI providers (OpenAI, Higgsfield), cloud/hosting (Cloudflare, Vercel, Supabase), payment (Portaly / TapPay), analytics, and support tools.
• Platforms: we interact only with your Connected Accounts under your authorization; data obtained from Meta is subject to Limited Use and is not resold.
• Legal: where required by law or to protect rights.
• We do not sell your personal data.

7. Retention

• Member data: retained until you stop using the Service or request deletion.
• Non-member / preview data: generally retained for one year from the date you provide it.
• After you withdraw consent or request deletion, we delete the data within a reasonable period, except where the law requires retention.

8. Your rights

Under Taiwan's Personal Data Protection Act, you may: inquire about or review your data, request a copy, request correction, request that we stop collecting/processing/using it, and request deletion.

Where GDPR or other laws apply, you also have rights of access, rectification, erasure (to be forgotten), portability, restriction, objection, and withdrawal of consent.

To exercise your rights, contact [email protected].

9. Data deletion

You can delete your account and data yourself in your account settings, or request deletion by emailing [email protected].

If you connected via Facebook login/authorization, you can also request deletion through your Facebook settings; we provide a Data Deletion Callback to handle such requests. For step-by-step instructions, see artoftheclone.ai/en/data-deletion.

10. Security

We use reasonable technical and organizational measures (such as encryption in transit and access controls) to protect your data. No system, however, can guarantee absolute security.

11. International transfers

Your data may be transferred to and processed by service providers outside Taiwan (such as OpenAI or Cloudflare, located in the United States and elsewhere). We take appropriate safeguards for such transfers.

12. Cookies

We use cookies and similar technologies to keep you signed in, for analytics, and to improve your experience. You can manage cookies through your browser settings. (If we later add a consent banner, this section will be updated.)

13. Children

The Service is not directed to anyone under 18. If we learn that we have collected data from a minor, we will delete it.

14. Changes & contact

We may revise this policy and will post changes on this page; we will give notice of material changes.

Contact: [email protected] · PainPoint Technologies Co., Ltd. · VAT No. 62152635 · 5F.-3, No. 45-1, Chang'an W. Rd., Datong Dist., Taipei City 103, Taiwan.