01.Who we are
Vowscent is a small independent studio operated by Yang Yaohui, an individual seller trading as Vowscent at wedding.vowscent.com. We are the data controller for the information described on this page. You can reach us at vowscent@163.com with any privacy question, including a request to access or delete your data; we answer within 30 days. We have no separate data protection officer, and we do not sell personal data.
02.What we collect, and why
Order data — the email address you enter at checkout, the package and styles you choose, your photo mode (one couple photo, or two individual photos), the consent box you tick, and the order reference we create for you.
Photo data — the one or two reference photos you upload, and the portraits generated from them.
Payment data — a payment reference and settlement status returned by our payment provider. We never see or store your full card number; card details are entered on the provider’s hosted checkout.
Technical data — essential cookies that keep your private order session alive, a short-lived hashed key used to rate-limit abusive requests, and first-party page-view and click events that carry no photos, email addresses, full URLs, order references or private links.
03.How we use it
To create and deliver the collection you bought; to confirm that a payment actually settled before any generation starts; to let you reopen your private gallery; to answer support and refund requests; to detect abuse and prevent fraud; and to keep the accounting records we are legally required to keep. We do not use your photos to train models, and we never use them in advertising, on our homepage, or in any public gallery.
04.Where your photos are processed
When generation is enabled, your reference photos and the chosen scene description are sent to our image provider, Volcengine Ark (Seedream), which processes them on servers in mainland China. This means your photos leave your country of residence. The provider returns the finished portraits, which we store in a private, non-public bucket and serve to you through short-lived signed links.
Our website, database, file storage and email delivery run on Cloudflare and a transactional email provider. Payments are processed by Paddle. We do not send your photos to any other third party, and we do not forward them between providers automatically.
05.How long we keep it
Your private gallery stays available for 30 days from the moment the order is created. After that the files are deleted and the links stop working. Gallery access links expire after 7 days; download links after 5 minutes. If you delete your photos yourself, they are removed immediately and cannot be restored.
We keep the minimum financial record of a transaction — order reference, amount, currency, date, tax and refund status — for as long as tax and accounting law requires. Usage events are deleted automatically after 90 days.
06.Your choices and your rights
You can download, delete and re-request access to your collection at any point while it exists. You can also ask for a copy of the personal data we hold, ask us to correct it, ask us to delete it, object to a specific use, or ask us to restrict processing. If you are in the EEA, the UK, Switzerland or another region with comparable law, you may also complain to your local supervisory authority. If you are a California resident, you have the right to know, delete, correct and opt out of sale or sharing; we do not sell or share personal information as those terms are defined by the CCPA. Send requests to vowscent@163.com from the email used at checkout, quoting your full order reference.
07.Cookies and tracking
We use only what the purchase needs: a session cookie that binds your browser to your draft order, and an access cookie that proves you may view a private gallery. There are no third-party advertising pixels, no cross-site trackers and no fingerprinting. Our own analytics are first-party, event-based and honour the Do Not Track signal — if your browser sends it, we do not record page events for you. Payment and order-status records are kept independently of analytics because they are required to run the service.
08.Security
Traffic is encrypted in transit. Private files sit in a non-public bucket reachable only through an authenticated, time-limited link; deleting, refunding or expiring an order revokes access on the very next request. Administrative access is password-protected and logged. No system is perfect: if a breach affects your data, we will notify you and the relevant authority as required by applicable law.
09.Children
Vowscent is for adults. You must be at least 18 to place an order, and every person shown in the photos must be an adult who has given you permission to submit them. We do not knowingly collect data from children. If we discover that an order involves a minor we cancel it, delete the files and refund any amount paid.
10.Changes and contact
We may update this policy when the service, our providers or the law changes. The revision date at the top of the page always reflects the current version, and material changes are announced here before they take effect. Questions, requests and complaints: vowscent@163.com, or write to Yang Yaohui, operator of Vowscent.