OnSolo Privacy Policy
Thank you for using OnSolo. We respect your privacy and want to explain, in a clear way, how we collect, use, share and protect your personal information when you use OnSolo.
For the purpose of data protection laws, the data controller of your personal information in relation to OnSolo is Image Future Investment (HK) Limited (Image Future, we, us), with registered address at 29/F., Three Pacific Place, No. 1 Queen’s Road East, Wanchai, Hong Kong.
If you have questions about this Privacy Policy or want to exercise privacy rights, please see Section 8 (Contact).
Summary
| Topic | Summary |
|---|---|
| What information do we collect? | We collect information needed to provide OnSolo, including account and login information, age-confirmation information, prompts, scripts, uploaded or referenced materials, generated content, usage records, payment-related records, device and log information, cookies, and support communications. |
| How do we use it? | We use personal information to provide AI creative tools, manage accounts, apply the 18+ age requirement, process paid services, moderate content, secure and maintain the Service, respond to support requests, and comply with law. |
| Who do we share it with? | We share information only where needed with service providers, group companies, AI service providers, content moderation providers, payment providers, login providers, support providers, and authorities where legally required. |
| Where do we process it? | OnSolo-side data, logs, backups and moderation processing are located in Singapore. Depending on the feature, information may also be processed or accessed in other countries or regions where our providers or authorized teams operate, such as Mainland China, only for limited technical support where necessary, Hong Kong, for certain governance, operational or support functions. |
| How long do we keep it? | We keep personal information only for as long as needed for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. More detail is set out in Section 6 (Data Retention). |
| What choices do you have? | Depending on where you live, you may have rights to access, correct, delete, port, object to or restrict certain processing, withdraw consent, appeal a decision, or manage cookie choices. |
Welcome to OnSolo
OnSolo is an AI-native creative platform for individual creators. It helps users create, edit and manage creative content, including scripts, images, videos, short dramas, comics and other narrative materials.
This Privacy Policy explains the when, how and why of our processing of personal information in connection with the OnSolo website, web-based creative platform, AI-powered creative tools, paid services, customer support channels and related services (together, the “Service”).
If you do not agree with this Privacy Policy, please do not use the Service.
1. Cookies
We use cookies and similar technologies, such as local storage, pixels, web beacons, log files and browser storage (“Cookies”), to operate, secure, measure and improve the Service.
For more information about the Cookies used on the OnSolo website and web-based platform, including Cookie names, providers, purposes, choices and retention periods, please see our Cookie Policy.
Where required by law, we will provide a cookie banner, preference center or similar tool for non-essential Cookies. You can also manage Cookies through your browser settings. If you block or delete certain Cookies, some parts of the Service may not work properly.
2. Children
OnSolo is available only to users who are at least 18 years old.
Children must not use the Service for any purpose. By “children”, we mean users under the age of 18 years old, or, in a region where the minimum age for processing personal information differs, such different age.
We do not knowingly collect personal information from children under these ages for any purpose. If you believe that we have personal information of a child under these ages, please contact us as set out in Section 8 (Contact).
3. How We Process Your Personal Information
This section explains the main types of personal information we process and why. Where applicable law requires a legal basis, we rely on the legal bases shown below. To the extent the legal bases in the below table are not available in your jurisdiction, we rely on your consent to process the below personal information. Where we rely on legitimate interests as a legal basis, such as security, fraud prevention, dispute handling, we balance those interests against your rights and freedoms before relying on them.
Most of the personal information described in this section is collected directly from you, for example when you create an account, upload creative input or content or make a payment.
Providing certain personal information, such as account, age-confirmation and payment information, is necessary to enter into and perform our contract with you. If you do not provide this information, we may be unable to create your account, verify your age, process your payment or otherwise provide the Service.
| Personal information | How we use it | Typical legal basis where required |
|---|---|---|
| Account, login and age-gate information, such as third-party login information, account IDs, age-confirmation information and account security records. | To create and manage your account, authenticate login, confirm you meet the age requirement, secure the account, prevent abuse and communicate about the Service. | Performance of a contract; legitimate interests in security, fraud prevention and service protection. |
| Creative inputs and project content, such as prompts, scripts, text, images, videos, audio, reference materials, uploads and project files. | To provide AI creative generation, editing, transformation, project-management and related features you request. | Performance of a contract; legitimate interests for security, debugging and abuse prevention. |
| Generated, AI-derived and moderation information, such as generated outputs, edits, moderation results, safety labels and abuse-prevention signals. | To provide outputs, maintain project history, enforce terms and content rules, detect unsafe or abusive content, handle appeals and protect users and the Service. | Performance of a contract; legitimate interests in platform safety, service integrity and legal compliance. |
| Payment, points and transaction information, such as order IDs, transaction IDs, product/package information, points, payment status, purchase time, amount, currency and dispute records. | To process paid services, confirm payment status, credit entitlements, reconcile payments, handle refunds or disputes, prevent fraud and meet recordkeeping requirements. | Performance of a contract; legal obligation; legitimate interests in fraud prevention and dispute handling. |
| Device, usage, log and cookie information, such as browser/device information, IP address, network information, feature usage, error logs, security records and Cookie data. | To operate, secure, troubleshoot, maintain, measure and improve the Service, monitor reliability, respond to incidents and support privacy-protective analytics. | Performance of a contract; legitimate interests in operating, securing and improving the Service; consent where required for certain Cookies. |
| Support, feedback and complaint information, such as information you provide when contacting us, reporting a problem, submitting feedback or appealing a moderation decision. | To respond to your request, investigate issues, manage complaints or appeals, improve support quality and keep necessary records. | Performance of a contract; legitimate interests in support and dispute handling; legal obligation where applicable. |
| Legal and compliance information, including information needed for legal requests, claims, terms enforcement and safety. | To comply with law, respond to authorities, establish or defend legal claims, enforce terms and protect rights, property and safety. | Legal obligation; legitimate interests; performance of a contract where relevant. |
AI Processing and User Content
AI processing is initiated by you when you use OnSolo’s creative features. We process your prompts, uploads, reference materials and project content to provide the features you request.
Where we use model APIs or AI service providers, we take steps designed to send only the materials reasonably necessary for the requested processing, and not to include direct account identifiers or unrelated logs unless needed for the Service, security or legal purposes described in this Privacy Policy. Further information on model APIs you can use on OnSolo can be found here.
We do not use your OnSolo content to train OnSolo’s own models unless we provide any required notice and obtain any required consent. Where third-party AI service providers are used, we take steps designed to limit their processing of submitted materials to the requested service and related security or abuse-prevention purposes, and to ensure that your OnSolo content will not be used to train third-party models except where we provide any required notice and obtain any required consent.
Your uploaded images, videos, audio files or generated content may include faces, voices or other information that can identify individuals. We process this content to provide the AI creative, moderation, storage and support features described in this Privacy Policy, not for biometric identification or verification. If OnSolo later introduces a feature that extracts or uses biometric identifiers, such as biometric templates, face geometry or voiceprints, we will update this Privacy Policy and provide any additional notice, consent or controls required by applicable law.
Please do not upload any sensitive information or input such as ID numbers, financial information, information related to your health, religious information, or any information that you would consider sensitive or highly personal. If you upload information related to another person, it is your responsibility to inform and obtain consent from that person.
4. How We Store and Share Your Personal Information
We share personal information only as described in this Privacy Policy. We do not sell your personal information.
OnSolo-side data, logs, backups and moderation processing are located in Singapore. Depending on the features you use, your information may also be processed in or accessed from other countries or regions where our service providers, group companies or authorized personnel support the Service, including:
- countries or regions where AI service providers process materials needed for your requested AI features;
- countries or regions where payment service providers, card organizations, banks and settlement partners process payment information;
- countries or regions where infrastructure, security, analytics, support and operations providers process information;
- Hong Kong, where the data controller and certain governance, operational or support functions may be located; and
- Mainland China, only for limited technical support or troubleshooting where necessary and subject to access controls and no-export restrictions.
We may share personal information with:
- group companies and authorized personnel who help provide, secure, operate, troubleshoot or support the Service;
- cloud, hosting, storage, security, monitoring, logging and operations providers who help host and maintain the Service;
- AI service providers who help deliver AI generation, transformation, editing or related creative functions you request;
- content moderation and safety providers who help detect unsafe, abusive or prohibited content;
- payment providers, card organizations, banks and settlement partners who process transactions, confirm payment status, credit entitlements, reconcile payments, handle disputes and prevent fraud;
- third-party login providers if you choose to sign in through them;
- support, analytics and service improvement providers where needed to operate and improve the Service; and
- authorities, courts, regulators, legal advisers or transaction counterparties where required by law, to protect rights and safety, to enforce terms, or in connection with a corporate transaction.
OnSolo does not directly process complete payment card credentials. Payment methods, card information and related payment processing may be handled by payment service providers, card organizations, banks and settlement partners under their own privacy policies and terms where applicable.
When required by applicable law, we use appropriate safeguards for international transfers, such as standard contractual clauses, equivalent contractual protections, adequacy decisions, transfer assessments or other legally recognized mechanisms.
5. Security
We implement technical and organizational measures designed to protect personal information, including access controls, encryption where appropriate, security monitoring, audit logging, environment separation, vulnerability management and incident response procedures.
No method of storage or transmission is completely secure. You should also take steps to protect your account and devices.
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide and maintain the Service, comply with legal, accounting and regulatory obligations, resolve disputes, enforce agreements, protect security and prevent abuse.
| Category | Retention approach |
|---|---|
| Account data | Retained while your account is active, then deleted or anonymized after account deletion is completed, subject to legal, security or dispute exceptions. |
| Creative projects, prompts, uploads, reference materials and generated outputs | Retained until you delete the project, content or account, subject to backup rotation and legal, security or dispute exceptions, in which case the data may be retained up to 90 days. |
| Model/API logs and security/error logs | Retained for as long as necessary for service operation, security and troubleshooting, up to 7 days. |
| Moderation and safety records | Retained as needed for appeal, abuse prevention, audit, legal compliance and safety purposes, in accordance with applicable law. |
| Support, feedback, complaint and special-case email records | Retained as needed to respond to the request, manage complaints or appeals, resolve disputes, enforce terms and maintain audit records. |
| Product analytics and operational metrics | Aggregated or pseudonymized metrics may be retained for service improvement and operations, up to 180 days. User-level operational records are minimized where appropriate. |
| Payment, points and transaction records | Retained for as long as needed for service delivery, reconciliation, dispute handling, chargebacks, fraud prevention, accounting, tax and legal obligations. |
| Cookies | Retention varies by Cookie type and provider. Please see our Cookie Policy. |
After the applicable retention period ends, we delete, anonymize or otherwise de-identify personal information, unless continued retention is required or permitted by law.
7. Your Rights and Choices
Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information:
- access or receive a copy of personal information we hold about you;
- correct inaccurate personal information;
- delete personal information;
- receive certain personal information in a portable format;
- restrict or object to certain processing;
- withdraw consent where processing is based on consent;
- opt out of sale, sharing, targeted advertising or certain profiling where applicable;
- appeal a decision on a privacy request where applicable;
- lodge a complaint with the relevant data protection authority in your jurisdiction; and
- manage non-essential Cookies through the cookie preference tool where provided, or through your browser settings.
These rights are not absolute and may be subject to exceptions under applicable law. We may ask you to verify your identity before processing your request.
You can also exercise some choices directly in the Service, such as deleting projects or content, adjusting browser Cookie settings, or managing third-party login permissions through the relevant third-party service.
8. Contact
You can reach us through support@onsolo.ai to submit data subject rights requests and any questions or concerns related to privacy.
If you are an agent or official of a regulatory authority and have a specific data privacy inquiry, please cotact us by support@onsolo.ai.
We will make reasonable efforts to address your request promptly. This does not affect your right to file a complaint with a data protection authority in your region if you believe we have violated applicable data protection laws.
9. Third-Party Services and Links
The Service may contain links to, or integrations with, third-party websites, plugins, payment services, login services, AI service providers or other services. Those services are governed by their own privacy policies and terms, not this Privacy Policy.
When you authorize a third-party connection, such as a third-party login service or a payment method, the third party may process information in accordance with the authorization you provide and its own privacy policy. We will not process your information for such third-party connections and are not responsible for such processing.
10. Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. If we make material changes, we will provide notice as required by law.
The “Last Updated” date at the top of this Privacy Policy indicates when this Privacy Policy was most recently revised.
11. Language
This Privacy Policy is provided in English. If we provide translations for convenience, the English version will prevail in the event of any discrepancy, unless otherwise required by applicable law.
12. Supplemental Terms - Jurisdiction-Specific
The terms below apply in addition to the main body of this Privacy Policy for users in the named jurisdictions. If there is a conflict between the supplemental terms and the main body, the supplemental terms prevail for users in the relevant jurisdiction.
United States
This section applies to residents of the United States and provides additional disclosures required under applicable U.S. state privacy laws, including the California Consumer Privacy Act and similar laws passed in other states.
In the past 12 months, we may have collected and disclosed for business purposes the following categories of personal information: identifiers; internet or other electronic network activity; commercial information; audio, electronic, visual or similar information included in content you provide; inferences or AI-generated information; and sensitive personal information where included in content you choose to upload or generate. The sources, purposes and recipient categories are described in Section 3 and Section 4.
We do not sell personal information. We do not disclose personal information for cross-context behavioral advertising or other activities that constitute “sharing” under applicable U.S. state privacy laws unless we provide any notice and opt-out choice required by those laws. We do not have actual knowledge that we sell or share personal information of users under 16 years of age. We do not use or disclose sensitive personal information for purposes other than to perform the services reasonably expected by an average consumer who requests those services, or as otherwise permitted by applicable U.S. state privacy laws.
Depending on where you live, you may have rights to access, know, delete, correct, port, opt out, appeal and not be discriminated against for exercising your privacy rights. You may exercise these rights by contacting us as described in Section 8 (Contact). We may take steps to verify your identity and may decline a request where permitted by law.
United Kingdom
If you are located in the United Kingdom, we rely on the legal bases described in Section 3, including performance of a contract, legitimate interests, legal obligation and consent where applicable.
You may object to processing based on legitimate interests where applicable, and you may withdraw consent where processing is based on consent.
Your personal information may be transferred to or processed in countries outside your jurisdiction, including Singapore, Hong Kong, countries or regions where our service providers process data, and Mainland China only for limited technical support or troubleshooting where necessary. Where required, we use appropriate safeguards such as standard contractual clauses, equivalent contractual protections, adequacy decisions, transfer assessments or other legally recognized mechanisms.
Subject to applicable law, you may have rights to access, rectify, erase, restrict or object to processing, data portability, withdraw consent and lodge a complaint with a data protection authority. To exercise your rights or ask questions about our privacy practices, contact us as described in Section 8 (Contact).
Hong Kong
If you are located in Hong Kong, you may have rights to access and correct personal information we hold about you, subject to applicable law. A fee may be charged where permitted by law for complying with a data access request.
If we use your personal information for direct marketing in circumstances requiring your consent or opt-out choice, we will provide the notice and choice required by applicable law.
Singapore
If you are located in Singapore, our processing of your personal information is subject to the Personal Data Protection Act 2012 where applicable. By using the Service, you consent to the collection, use and disclosure of your personal data for the purposes described in this Privacy Policy, or as otherwise permitted by law.
You may request access to or correction of your personal data, subject to applicable law. For questions or complaints about our data protection practices, please contact us as described in Section 8 (Contact).
Canada
If you are located in Canada, we collect, use and disclose your personal information with your knowledge and consent, or as otherwise permitted by law. For processing necessary to provide the Service, consent may be implied by your use of the Service. For optional features or Cookies where express consent is required, we will ask for consent as required by law.
You may have rights to access your personal information, correct inaccurate or incomplete personal information, withdraw consent subject to legal or contractual restrictions and reasonable notice, and challenge our compliance with applicable privacy laws. You may contact us for information about our policies and practices regarding the use of service providers outside Canada.