Privacy Policy

Last updated: September 2, 2026

1. Information We Collect

We collect information you provide directly to us when you:

  • Create an account (email, name, password)
  • Upload product images for AI generation
  • Make a purchase (processed securely by Waffo Pancake — we never store payment details)
  • Use our service (usage data for quota management)
  • Contact our support team at support@rewarx.com

2. How We Use Your Information

  • To provide and maintain our AI photography generation service
  • To process payments through our payment provider (Waffo Pancake)
  • To send service-related communications (account verification, billing)
  • To detect and prevent abuse of our platform
  • To comply with legal obligations

3. Image Data Policy

We take your privacy seriously, especially regarding your product images:

  • We do not use your uploaded images to train AI models
  • Uploaded images are processed only for the requested generation service
  • Images are stored securely and deleted upon your account deletion request
  • Generated images are associated with your account and accessible only to you

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Waffo Pancake - Our Merchant of Record and payment processor (transaction data)
  • DeepSeek - AI image generation provider (images are processed, not stored)
  • Service providers - Email delivery, hosting infrastructure
  • Legal authorities - When required by law

5. Data Retention

We retain your data for as long as your account is active. The following table describes our retention periods:

Data TypeRetention PeriodDisposal on Expiry
Account informationActive period; 90 days after account cancellationDeleted or anonymized
Transaction recordsAs required by law (typically 7 years)Deleted or archived
Uploaded imagesUntil account deletion or immediate upon user requestPermanently deleted
Generated imagesUntil user requests deletionPermanently deleted
Support records2 yearsSecurely deleted
Security audit logs12 monthsSecurely deleted

6. Cookies & Tracking

TypePurposeCan Be Disabled
Strictly necessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes
Marketing (if applicable)Targeted advertising and performance measurementYes

You can adjust cookie preferences through your browser settings or our cookie management center. Disabling non-essential cookies may affect some features.

7. International Data Transfers

Our servers and service providers may be located in various regions, including Singapore and the United States. When data is transferred internationally, we ensure adequate protection through:

  • Data processing agreements incorporating Standard Contractual Clauses (SCCs) where required
  • Transfers only to recipients providing equivalent protection levels
  • Other safeguards as required by applicable data protection laws

8. Children's Privacy

Our service is intended for users aged 18 and above. We do not knowingly collect personal information from individuals under this age. If you believe a minor has provided us with personal information, please contact us immediately at privacy@rewarx.com and we will promptly delete the data.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

RightDescription
Right to be informedKnow what data we collect and how we use it
Right of accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest deletion of your data under certain conditions
Right to restrict processingPause data processing under certain conditions
Right to data portabilityReceive your data in a machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for processing based on consent at any time

To exercise any of these rights, contact us at privacy@rewarx.com. We aim to respond within 30 calendar days. If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

10. Data Security

We implement the following security measures:

  • Transmission encryption: TLS/HTTPS for all data in transit
  • Storage security: Sensitive data (e.g., passwords) is encrypted or hashed
  • Access control: Principle of least privilege; employees sign confidentiality agreements
  • Regular security audits: Periodic vulnerability scans and security reviews

In the event of a data breach affecting your rights, we will notify you and relevant regulators within 72 hours of discovery, in accordance with applicable law.

11. Third-Party Links

Our service may contain links to third-party websites or integrate with third-party services. This policy applies only to data we directly collect. We are not responsible for the data practices of third parties; please review their privacy policies before use.

12. Policy Changes

We may update this policy periodically. Material changes will be communicated at least 15 days in advance via email or site notice. The "Last updated" date at the top of this page reflects the effective date. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries, contact us at:

  • Privacy inquiries: privacy@rewarx.com
  • Customer support: support@rewarx.com
  • Company name: ShotAtelier
  • Service hours: Monday to Friday 09:00–18:00 UTC+8