Privacy Policy

We collect the following types of information strictly to facilitate your experience and your communication with your Jeweler:

• Identity Data: Full Name.
• Contact Data: Email address and Phone Number.
• Design Data: The generated jewelry designs you create, view, or save on our platform.
• Preference Data: Specific jewelry-related inputs such as ring size, metal style, gemstone color, cut preferences, and other design specifications.
• User-Uploaded Media: Personal images, photos, sketches, or inspiration files you upload to the platform (e.g., a photo of a ring you like or a photo of your hand).
• Biometric Disclaimer: While you may upload photos of your hand for visual reference, we do not use facial recognition technology or extract biometric identifiers (such as mathematical hand geometry scans) from your images. Your photos are stored solely as standard visual files.
• Technical Usage Data: Information automatically collected when you access the platform, such as your IP address, browser type, and device information. We use "cookies" and similar tracking technologies strictly to maintain your login session, remember your preferences, and ensure the platform functions correctly.
• Age Restriction (Minors): Our platform is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If we discover that a minor has provided us with personal data, we will delete it immediately.

We use your information solely for the following purposes:

• Visualization & Design: To generate hyper-realistic AI jewelry images and renderings based on your specific inputs, Uploaded Media, and preferences.
• Reference: To store your Uploaded Media as a visual reference for your Jeweler to guide the manufacturing process.
• Service Provision: To maintain your account and history of design iterations.
• Communication: To facilitate design feedback loops between You and the Jeweler.
• Transactional Messaging: To send security alerts, password resets, and status updates (e.g., "Render Complete").

By providing your Email Address and Phone Number, you consent to receive the following types of communications from Us:

• Transactional Messages: Notifications about your account, security, password resets, and updates regarding your specific jewelry designs.
• Marketing & Promotions: We may send you emails or SMS messages about new features, jewelry trends, special offers, or promotions that we believe may interest you.
• Opt-Out Rights:
• Emails: You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link found at the bottom of every promotional email. You cannot opt out of essential transactional emails (like password resets).
• SMS: You may opt out of marketing text messages by replying "STOP" to any message you receive. Standard messaging and data rates may apply.

We operate as a software interface for the jewelry industry. Your information is shared in the following ways:

• With Your Jeweler: We share all collected information (Name, Phone, Email, Designs, Preferences, and Uploaded Media) with the specific Jeweler you have chosen to work with.
• Automated Integrations: Please note that Jewelers frequently utilize automated webhooks or API integrations to export your data from our platform directly into their own customer relationship management (CRM) software, point-of-sale systems, or communication tools.
• Transfer of Liability: Once your information is successfully transmitted to your Jeweler or their designated third-party systems, it becomes subject to that Jeweler's own privacy practices, security policies, and communication terms. We do not control, and are not responsible for, how your Jeweler uses, stores, or protects your data once it has been delivered to them.
• With AI Service Providers: We utilize a proprietary artificial intelligence model and may also utilize third-party artificial intelligence APIs including but not limited to Google Gemini, OpenAI Codex, and Claude to process your Uploaded Media and text preferences into hyper-realistic images. By using our tool, you acknowledge that your inputs and images are transmitted to these third-party providers solely for the purpose of generating your requested designs.
• No Third-Party Sale: We do not sell, rent, or trade your personal information to outside marketing companies or advertisers.

We retain your personal information, Generated Designs, and Uploaded Media for as long as your account is active. We may also retain this information to comply with legal obligations, resolve disputes, or enforce our agreements.

We implement reasonable security measures to protect your Uploaded Media and personal contact information from unauthorized access or disclosure. However, no digital transmission or cloud storage is completely secure, and we cannot guarantee absolute security.

Our platform uses Generative Artificial Intelligence (AI) to create visual representations of jewelry.

7.1 Third-Party Segregation (No Public Training). We utilize proprietary AI models alongside enterprise-grade third-party AI providers (including but not limited to Google Gemini, OpenAI, and Claude) to generate visualizations. We strictly enforce contractual data segregation with these providers. We do not authorize, and contractually prohibit, our third-party AI providers from using your User Data (including uploaded images and text prompts) to train, fine-tune, or improve their foundational public models. Your data is processed ephemerally solely to fulfill your specific generation requests.

7.2 Internal Model Improvement. While we protect your data from third-party training, Jeweler Studio LLC reserves the right to use anonymized and aggregated User Data to train, fine-tune, and improve our own proprietary internal AI models and algorithms. This internal training is strictly limited to improving the quality, accuracy, and style of our Services and does not involve the exposure of your raw, identifiable designs to other users or the public.

Depending on your location (e.g., New York, California, etc.), you may have the right to request access to or deletion of your personal data. To exercise these rights, please contact us at Contact@jewelerstudio.ai.

We reserve the right, at our sole discretion, to modify or replace this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated Policy on our platform, and the "Last Updated" date at the top of this Policy will be revised accordingly. By continuing to access or use our Service after those revisions become effective, you agree to be bound by the revised Policy.

• "User Data": All raw inputs provided by You, including uploaded personal photos, text prompts, and contact details.
• "Output Data": The images, text, and visual concepts generated by the Platform in response to your User Data.
• "Derived Data": Anonymized, aggregated, and de-identified data generated by the System (e.g., aggregate statistics on metal preferences) that is not linked to your identity.

• Your Rights: You retain full ownership of the User Data you provide. We do not claim ownership of your uploaded photos or sketches.
• License to Process: By uploading User Data, you grant Us a non-exclusive, worldwide, royalty-free license to use, host, store, and process that data for the purposes of:
• (i) generating your requested designs;
• (ii) facilitating communication and feedback between You and your Jeweler; and
• (iii) maintaining the data as a visual reference for your Jeweler's business use.
• User Representation: You represent and warrant that you have the necessary rights to use any images you upload. You agree not to upload content that infringes on the intellectual property of others.
• Company Rights: We retain exclusive ownership of all Derived Data (anonymized insights) and the underlying AI algorithms.

• No Public Model Training: The Company warrants that it does not authorize its third-party AI providers (including but not limited to Google Gemini, OpenAI Codex, and Claude.) to use your User Data to train their foundational public models.
• Data Segregation: User Data processed by AI is logically segregated. We do not use your private uploads to generate outputs for other users.
• AI Nature: You acknowledge that AI-generated Output Data is probabilistic and conceptual. The Company makes no warranty regarding the physical manufacturability of AI outputs.

• Active Retention: User Data is retained for the duration of your active account to provide history and context for your designs.
• Termination: Upon account deletion, your User Data is marked for deletion after a grace period of 30 days, unless retention is required by law.
• Legal Hold: Certain account activity logs may be retained for up to 5 years strictly to comply with tax and legal regulations.

• Providers: Our platform is hosted on enterprise-grade cloud environments (e.g., Google Cloud Platform and/or Render).
• Certifications: Our infrastructure providers maintain industry-standard security certifications, including SOC 2 Type II and ISO 27001.
• Database Security: Data is managed in secure, cloud-native databases with strict security protocols to prevent unauthorized access.

• Encryption in Transit: All data transmitted between your device, our servers, and third-party APIs is encrypted using TLS 1.2 or higher (Transport Layer Security).
• Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256 (Advanced Encryption Standard).
• Key Management: Cryptographic keys are managed and rotated via secure Key Management Services (KMS).

• Role-Based Access Control (RBAC): Internal access to user data is restricted based on job function. Only authorized engineering and support staff have access to your data to provide support.
• Authentication: Multi-Factor Authentication (MFA) is enforced for all administrative access to the Company's cloud infrastructure.
• Audit Logging: We maintain logs of system access and data retrieval for security auditing purposes.

• Monitoring: We utilize automated monitoring tools to detect anomalous traffic or unauthorized access attempts.
• Breach Protocol: In the event of a confirmed data breach affecting your sensitive personal data, the Company will notify you within 72 hours of becoming aware of a confirmed breach, or sooner if required by applicable law:
• Notify you promptly in accordance with applicable state and federal laws.
• Provide specific information regarding the nature of the breach and the data involved.
• Take immediate remedial action to patch vulnerabilities and secure the system.

We vet all third-party vendors for security compliance. Our primary subprocessors include:

• AI Processing: We utilize a proprietary artificial intelligence model and may also utilize third-party artificial intelligence APIs including but not limited to Google Gemini, OpenAI Codex, and Claude.
• Cloud Hosting: Cloudflare & Render