Cantian AI Privacy Policy

1. Information We Collect

We may collect the following categories of information, depending on how you use the Services:

• Account information, such as name, email address, login credentials, account ID, language, country or region, and settings.
• User-provided content, such as prompts, questions, profile inputs, uploaded materials, feedback, support messages, and other content you choose to submit.
• Service inputs needed to provide features you request, which may include dates, times, places, preferences, or other contextual information you choose to provide.
• Payment and transaction information, such as order records, subscription status, purchase history, product identifiers, invoice information, and payment channel details. We do not store full payment card numbers unless a payment provider makes this available to us for limited processing purposes.
• Device, log, and usage information, such as IP address, device identifiers, browser type, operating system, app version, pages viewed, actions taken, crash logs, diagnostics, referral information, and approximate location derived from IP or device settings.
• Communications information, such as support requests, complaint records, survey responses, and messages you send to us.
• Information from third parties, such as app stores, payment processors, analytics providers, fraud-prevention vendors, login providers, or partners, where permitted by law and their policies.

Please do not submit sensitive personal information unless it is necessary for the feature you choose to use. Under some laws, sensitive information may include health data, biometric data, precise location, government IDs, financial account details, racial or ethnic origin, political opinions, religious beliefs, sex life or sexual orientation, or information about children. If you submit sensitive information voluntarily, we will process it only as needed to provide the requested Service, protect safety, comply with law, or as otherwise permitted by applicable law.

2. How We Use Information

We use personal information for the following purposes:

• To provide, operate, personalize, and maintain the Services.
• To generate, display, store, and deliver AI-assisted content and other requested outputs.
• To create and manage accounts, authenticate users, process transactions, provide subscriptions, and deliver paid services.
• To provide customer support, respond to inquiries, investigate complaints, and manage refunds or disputes.
• To secure the Services, prevent fraud, detect abuse, enforce our terms, and protect users, us, and third parties.
• To improve, debug, monitor, and develop the Services, including analytics, quality review, and product research.
• To send service notices, policy updates, security alerts, and other administrative messages.
• To send marketing communications where permitted by law or with your consent, and to let you opt out where required.
• To comply with legal obligations, respond to lawful requests, preserve records, and establish, exercise, or defend legal claims.

3. Legal Bases for EEA, UK, and Swiss Users

If the GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following legal bases:

• Contract, where processing is necessary to provide the Services you request, manage accounts, process orders, or deliver paid services.
• Consent, where required for optional features, certain cookies, marketing, or processing that legally requires consent. You may withdraw consent at any time.
• Legitimate interests, such as improving the Services, preventing fraud, securing the Services, understanding usage, and enforcing our rights, where those interests are not overridden by your rights and interests.
• Legal obligation, where processing is required to comply with laws, tax rules, accounting rules, consumer protection requirements, or lawful requests.
• Vital interests or public interest, where applicable and permitted by law.

4. AI-Assisted Services

The Services may use artificial intelligence, machine learning, rules-based systems, automated analysis, and human review to generate, organize, classify, moderate, or display content. AI-assisted content may be inaccurate, incomplete, repetitive, inconsistent, or unsuitable for your circumstances. We do not use AI-assisted outputs to make decisions that produce legal effects or similarly significant effects about you without appropriate notice and safeguards where required by law.

We may mark, label, log, review, or retain AI-generated or AI-assisted content where needed for transparency, safety, abuse prevention, quality control, legal compliance, or dispute handling. You should not submit content that you are not allowed to provide, and you should not remove or misrepresent AI-generated content labels where such labels are provided.

5. Cookies and Similar Technologies

We may use cookies, pixels, local storage, SDKs, and similar technologies to operate the Services, remember settings, measure usage, improve performance, prevent fraud, and deliver or measure marketing where permitted. Where required by law, we will ask for consent before using non-essential cookies or similar technologies.

More information may be provided in our Cookie Notice: /ja/cookies.

6. How We Share Information

We may share personal information with:

• Service providers and processors who help us host, operate, secure, analyze, support, and improve the Services.
• Payment processors, app stores, banks, and transaction service providers for purchases, subscriptions, refunds, fraud prevention, and accounting.
• Analytics, infrastructure, security, customer support, messaging, and content-safety vendors.
• Professional advisers, auditors, insurers, legal representatives, and regulators where needed.
• Business transaction parties if we are involved in a merger, financing, acquisition, reorganization, sale of assets, or similar transaction.
• Law enforcement, courts, public authorities, or other parties where required by law or necessary to protect rights, safety, users, or the Services.
• Other users or the public if you choose to publish, share, or otherwise disclose content through the Services.

We do not sell personal information in the ordinary sense of exchanging it for money. If a law defines "sale" or "sharing" more broadly, we will provide any required notices and choices.

7. International Transfers

We are a Hong Kong company, and we may process, store, or transfer personal information in Hong Kong, Singapore, the United States, the European Economic Area, and other countries where we or our service providers operate. These countries may have data protection laws different from those in your country.

Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses, data processing agreements, transfer impact assessments, consent, or other mechanisms recognized by applicable law.

8. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain accounts, complete transactions, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain security. Retention periods vary depending on the type of information, the reason for processing, legal requirements, and user choices. When information is no longer needed, we will delete, anonymize, or securely retain it only as permitted by law.

9. Security

We use reasonable technical and organizational measures designed to protect personal information. However, no internet transmission, storage system, or digital service is completely secure. You use the Services and submit information at your own risk, and you are responsible for keeping your account credentials secure.

10. Your Rights and Choices

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how your personal information is processed. You may also have the right to complain to a data protection authority.

To exercise privacy rights, contact us at support@cantian.ai. We may need to verify your identity before responding. We will respond within the time required by applicable law. Some information may be exempt from deletion or access where we must retain it for legal, security, fraud-prevention, dispute, or business reasons.

Where applicable law requires an EU, UK, or other local representative or data protection officer for a particular offering, we will provide the relevant contact details through the Services or another legally required notice.

11. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under 18 must use the Services only with involvement and consent of a parent or legal guardian where required by law. If you believe a child has provided personal information without appropriate consent, please contact us.

12. Region-Specific Notices

Users in certain regions may have additional rights under local privacy laws, including the GDPR, UK GDPR, Swiss data protection law, California privacy laws, and other national or state laws. Where required, we will honor those rights and provide additional disclosures or choices. Mandatory local consumer or privacy rights are not limited by this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a new "Last Updated" date. If changes are material, we may provide additional notice as required by law.

14. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our handling of personal information, please contact us at: support@cantian.ai