Privacy Policy

1Personal Data We Collect

• ♡Photos you upload: photos contain facial features, a special category of personal data (biometric data). We obtain your explicit consent each time before collection (the consent dialog before upload).
• ♡Account data: email address, name, and avatar (obtained via Google sign-in).
• ♡Technical records: IP address, upload and generation logs (for abuse prevention and security).
• ♡Payment data: processed by ECPay; the Service never handles or stores your credit card number.

2Purposes and Use

• ♡Photos are used only to: ① create story images/videos featuring you or consenting adults shown in the photo, and ② verify generation quality through face-similarity and photo-quality checks.
• ♡Your photos and generated content are NEVER used by the Service to train AI models, nor provided to third parties for model training.
• ♡Email is used for account identification, point records, and essential service notifications; IP is used for daily anti-abuse quota control.

3Third-Party Processors and Cross-Border Transfer

To complete generation, your photo is transmitted to the following third-party services for processing. Their servers are located outside Taiwan (mainly in the United States and Singapore), so your personal data is transferred across borders. Each service processes your data only to the extent necessary to complete that generation:

• ♡Google Gemini (United States): scene-composition image generation.
• ♡Kling / Kuaishou (Singapore API): image animation (video generation).
• ♡Segmind or fal.ai (United States): face-swap processing.
• ♡Modal (United States): face-similarity scoring (quality gate).
• ♡Vercel / Neon / Vercel Blob (United States): site hosting, database, and file storage.
• ♡Cloudflare (United States): human verification (Turnstile); processes IP and browser characteristics to prevent abuse.
• ♡ECPay (Taiwan): payment processing.

4Retention Period and Automatic Deletion

• ♡Original uploaded photos: automatically and physically deleted by the system within 7 days of upload (daily scheduled job).
• ♡Generated results: automatically and physically deleted by the system within 90 days of creation, or sooner when you delete your account or request deletion (whichever comes first).
• ♡Order and point records: retained for the periods required by tax and business accounting laws.
• ♡Anti-abuse counters (daily IP quota): only short-term records needed for statistics are kept.

5Your Rights (as a Data Subject)

Under Article 3 of Taiwan's Personal Data Protection Act, you may exercise the following rights at any time: inquire about or review your data, request a copy, request supplementation or correction, request cessation of collection, processing, or use, request deletion, and withdraw your consent.

To exercise these rights, submit a request in the "Data & account" section of your account page, or email customer support (support@stadiumme.com); we will complete the request and reply with confirmation within 7 business days. After you withdraw consent, generations not yet started will no longer process your photos.

6Cookies and Essential Records

The Service uses essential cookies to maintain your login session, plus anonymous identifiers for abuse prevention; it does not use third-party advertising or tracking cookies.

7Security Measures and Policy Updates

The Service protects your data with measures including access control, encrypted transmission (HTTPS), unguessable artifact URLs, and time-limited automatic deletion of uploaded photos.

Changes to this policy will be announced on this site; material changes to how biometric data is processed will require your renewed consent (the consent version number increases with the copy).