Uisato Studio

UISATO STUDIO — PRIVACY POLICY

Last Updated: [INSERT DATE]

This Privacy Policy explains how Uisato Studio (“Uisato Studio”, “we”, “us”, “our”) collects, uses, and shares information when you use our website, apps, and services (the “Service”).

If you have questions, contact: support@uisatostudio.ai

1) WHO WE ARE / CONTACT

  • Operated by: Uisato Studio
  • Address: Manuel Galvez 4840, Buenos Aires, Argentina
  • Privacy contact: support@uisatostudio.ai

2) INFORMATION WE COLLECT

We collect the following categories of information:

2.1 Account Data

  • Email, name, username, avatar
  • Authentication method (local login or third-party login)

2.2 Billing Data

  • Subscription plan, invoices/receipts, payment status
  • Limited payment details such as last4/country (via payment processor)

2.3 User Content

  • Uploaded images/video/audio, prompts, and other inputs
  • Generated outputs (images/videos/etc.) stored in your account history

2.4 Usage & Technical Logs

  • Timestamps, feature usage, queue/job IDs, errors and diagnostics
  • IP address, device identifiers, user agent, approximate location

2.5 Support Data

  • Messages to support, attachments, and related metadata

3) HOW WE USE INFORMATION

We use information to:

  • Provide the Service and generate outputs you request
  • Maintain account functionality, authentication, and billing
  • Monitor performance, prevent abuse, and secure the Service
  • Debug, improve reliability, and develop new features
  • Communicate service-related messages (e.g., security, billing, operational notices)
  • Comply with legal obligations and enforce policies

Legal bases (where applicable, e.g., EU/UK): performance of a contract, legitimate interests (service improvement and security), compliance with legal obligations, and consent (for certain cookies/marketing where required).

3.1) LEGAL BASES (EEA/UK USERS)

Where the GDPR/UK GDPR applies, we process personal data under the following legal bases:

  • Contract: to provide the Service you request (e.g., account access, generating outputs, storing your projects/history), and to administer billing and account management.
  • Legitimate interests: to secure, maintain, and improve the Service (e.g., preventing abuse/fraud, monitoring performance, debugging, and reliability improvements).
  • Legal obligation: to comply with applicable laws, lawful requests, and enforce our policies.
  • Consent: where required (e.g., certain cookies/marketing communications, if and when enabled). You may withdraw consent at any time.

3.2) WHETHER YOU MUST PROVIDE INFORMATION

You must provide certain information for us to provide the Service. For example:

  • Account Data is required to create and maintain your account.
  • Billing Data is required if you purchase subscriptions or top-ups.
  • User Content is required to generate outputs when you choose to use generation features.

If you do not provide the required information, we may be unable to provide some or all of the Service (for example, you may not be able to create an account, complete purchases, or generate outputs).

4) HOW WE SHARE INFORMATION

We share information only as needed to operate the Service:

4.1 Service Providers / Subprocessors

We use providers for hosting, storage, analytics, email delivery, payments, and error tracking. These providers process data on our behalf under appropriate contractual safeguards. Examples may include:

  • Model providers (e.g., Google, Kling, Alibaba Cloud, Modal)
  • Storage (Cloudflare R2)
  • Hosting (Vercel)
  • Payments (Stripe)
  • Email (Resend / SendGrid or similar)
  • Error tracking (Sentry or similar)
  • Analytics (may be added in the future, e.g., PostHog)

4.2 Third-Party AI Model Providers

To generate outputs, we may send User Content (uploads/prompts/inputs) to third-party AI model providers. These providers may process data under their own terms and privacy policies. If you do not want your content sent to those providers, do not use the related features.

4.3 Legal, Safety, and Enforcement

We may disclose information to comply with law, respond to lawful requests, protect safety, investigate fraud/abuse, and enforce our policies.

4.4 Business Transfers

If we are involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

In such transactions, we may transfer personal information and also any de-identified/aggregated datasets and insights we maintain, including content-derived insights, as part of the assets of the business.

4.5 De-Identified / Aggregated Information (Including Content-Derived Insights)

We may create de-identified and/or aggregated information that does not identify you (for example, aggregated usage metrics, performance statistics, or high-level patterns derived from prompts and outputs once de-identified). We use this information to understand how the Service is used, improve reliability and safety, develop new features, and for analytics, benchmarking, research, and other lawful business purposes.

We may share, license, or otherwise commercialize de-identified and/or aggregated information with third parties (such as partners, vendors, researchers, or business customers) for lawful business purposes. This may include de-identified, aggregated, or statistical datasets derived from prompts and generated outputs, provided they do not identify you.

We do not attempt to re-identify de-identified information, and we require recipients (where applicable) to keep it de-identified and not attempt re-identification.

For clarity: de-identified/aggregated information is different from your account data or identifiable User Content. We do not sell identifiable personal information.

5) COOKIES & TRACKING

We use cookies and similar technologies for:

  • Authentication and session management
  • Security
  • Preferences
  • (Optionally) analytics, if enabled in the future

If you are in the EU/UK, we will present a cookie consent mechanism where required. You can also control cookies through browser settings.

6) DATA RETENTION

We retain data as follows (subject to legal and operational needs):

6.1 Uploads (Reference Images/Video/Audio)

  • Retained while your account is active to enable your projects and generations.
  • We have no obligation to store any content; do not rely on the Service as a permanent storage locker.

6.2 Prompts and Generated Outputs

  • Stored in your account history while your account is active to allow you to revisit projects/generations.

6.3 Logs and Diagnostics

  • Typically retained for a reasonable period (generally 30–180 days) for security, debugging, fraud prevention, and reliability.

6.4 Deletion

You may request deletion at support@uisatostudio.ai. Deletion may not be instantaneous due to backups, legal requirements, or security needs.

7) INTERNATIONAL TRANSFERS

Our infrastructure and providers may process personal data in countries different from where you live (for example, the United States and Canada).

Where the GDPR/UK GDPR applies and data is transferred internationally, we rely on appropriate safeguards, such as:

  • the European Commission’s Standard Contractual Clauses (SCCs), and
  • for UK transfers, the UK International Data Transfer Addendum to the SCCs or the UK International Data Transfer Agreement (as applicable),

or other lawful transfer mechanisms recognized by applicable law.

8) YOUR RIGHTS

Depending on your location, you may have rights to:

  • Access your data
  • Correct your data
  • Delete your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent (where processing is based on consent)

EU/UK users: You may also have the right to lodge a complaint with your local supervisory authority.

California users: You may have additional rights under California privacy laws.

To exercise rights: support@uisatostudio.ai

9) SECURITY

We use reasonable administrative, technical, and organizational measures to protect data. However, no method of transmission or storage is 100% secure.

10) CHILDREN

The Service is not intended for anyone under 18. We do not knowingly collect personal data from children.

11) CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The most current version will be posted within the Service.

12) CONTACT

Privacy questions and requests: support@uisatostudio.ai