Privacy Policy | Gleam Star

1. Scope

This policy applies when you visit, register for, and use the platform's website, mobile pages, and related services. Third-party sites and services (including our model, payment, and SMS providers) have their own privacy policies, which this policy does not cover.

2. Information we collect

Account information: mobile number, SMS verification code, username, encrypted password, registration time, and account status.
Device and log information: IP address, browser type and version, operating system, device identifiers, access time, pages visited, operation records, and error logs. We use this to secure the service, diagnose faults, and prevent risk.
Creative content: reference images and materials you upload, prompts you enter, generated results, edit history, and project and canvas data.
Transaction and benefit information: quota, redeem codes, order and payment status, referral relationships, and reward records. If online payment is offered, it is processed by third-party payment institutions; we do not directly store your card number or payment password.
Communication information: information you provide when contacting us through support, feedback, or the user community group.
Cookies and similar technologies: used to maintain your sign-in session, prevent cross-site request forgery, remember language preferences, and produce basic statistics.

3. How we use information

to register you, sign you in, reset your password, and verify identity;
to provide, maintain, and improve AI generation, the design workspace, batch tasks, the inspiration community, and related features;
to settle quota, process orders, and provide after-sales support;
to protect account and platform security and detect fraud, attacks, and prohibited content;
to send service notices, verification codes, and security alerts according to your settings;
to perform statistics and analysis so we can improve the product, using de-identified or anonymized data where possible; and
to comply with law and regulation and cooperate with lawful requests from judicial or administrative authorities.

4. Cookies and local storage

We use essential cookies to maintain sign-in sessions, prevent CSRF attacks, and remember language and interface preferences. Disabling essential cookies may prevent you from signing in or using the services normally.

We may use browser local storage for drafts and interface state; you can clear it through your browser settings.

We do not currently use third-party advertising cookies. If that changes, we will tell you and obtain consent as required by law.

5. Sharing and entrusted processing

We do not sell your personal information.

To provide the services, we may entrust necessary information to the following types of partners under confidentiality and data-security terms: SMS and verification-code providers, cloud and object-storage providers, AI model and inference providers, content-delivery and security providers, payment providers, and customer-support and notification providers.

Except as required by law or with your separate consent, we do not provide your personal information to third parties. If personal information must be transferred due to a merger, split, acquisition, or similar event, we will require the recipient to remain bound by this policy.

We may lawfully disclose or provide information when cooperating with investigations by state security, public security, procuratorial, or judicial authorities; when necessary to protect the public interest or the safety or property of others; or in other circumstances provided by law.

Content you publish to the inspiration community (including works and prompts) is publicly displayed. Do not include personal information or trade secrets in public content.

6. Retention

Personal information we collect and generate in mainland China is stored in mainland China. If cross-border transfer is required, we will complete security assessment, standard-contract, or certification procedures as required by law and inform you separately.

We retain personal information only for as long as necessary for the purposes in this policy, unless law requires otherwise:

account information: while the account exists and for a reasonable period after closure where necessary to resolve disputes;
creative content: according to your settings and the platform's retention policy, entering the cleanup process after deletion;
logs and audit information: for a limited period under the platform's security and compliance policy, then deleted or anonymized; and
transaction and benefit information: for the period required by law.

After the retention period expires or your account is closed, we delete or anonymize your personal information, except where law requires retention.

7. Security

We use industry-standard safeguards, including HTTPS transport encryption, one-way password hashing, access controls, operation auditing, data backups, and least-privilege principles.

We regularly assess security risks. If a personal-information breach, tampering, or loss occurs, we will promptly take remedial measures as required by law, notify you through SMS or in-product notices, and report to regulators where necessary.

The internet is not absolutely secure. Keep your password safe, avoid signing in on untrusted devices, and never share verification codes.

8. Your rights

Access and copy: you can view account, creation, and transaction records, or contact us for a copy;
Correct and supplement: if information is inaccurate, you can update it yourself or ask us to correct it;
Delete: you can delete creative content and, where the law allows, ask us to delete personal information;
Withdraw consent: you can withdraw consent to non-essential processing, without affecting processing already carried out on the basis of consent;
Close your account: submit a closure request through in-product support and we will process it after verifying your identity; and
Complain: if you disagree with how we process personal information, contact support first; we will reply within 15 business days. You may also complain to the cyberspace administration, market regulator, or other authorities.

9. Minors

The services are mainly intended for adults and design professionals. Minors under 18 should use the services with their guardian's consent and guidance.

We do not intentionally collect personal information from children under 14. If we discover that we have collected a child's personal information without prior guardian consent, we will delete it promptly.

If you are a guardian and discover that a minor has used the services or provided personal information without consent, contact us.

10. Third-party services and links

The services may contain links to third-party sites or services. Their content and privacy practices are their own responsibility; read their privacy policy before visiting.

11. Updates

We may update this policy as laws change or the business adjusts. Updated versions will be published on this page, and material changes will be announced through in-product notices, pop-ups, or SMS. Continued use constitutes acceptance of the updated policy.

12. Contact us

If you have questions, comments, or complaints about this policy or our processing of personal information, contact us through in-product support or the user community group. We will respond within 15 business days.