Privacy Policy

1. Who is responsible

Creative Event Studio, Australia operates 3D Gift Studio at gggiftstudio.com. For privacy questions, access, correction or deletion requests, contact xiaomei4299@gmail.com.

This policy covers the overseas website. The China website operates a separate account and data system; logging in here does not merge accounts, memberships or private libraries.

2. Information we process

• Accounts: your email, display name where provided, verification status, account identifiers, account dates and a password hash used for authentication. We do not need you to send your password to support.
• Security and sessions: session identifiers, expiry information, IP address, browser/device information and rate-limit records needed for login and abuse prevention.
• Verification emails: your address, verification/reset message and delivery-related information when you request registration or password recovery.
• Support: messages and any screenshots, designs or purchase references you choose to send us.
• Technical requests: hosting and security providers may process request URLs, times, IP addresses, browser information and security events to deliver and protect the website.

Membership checkout is not open yet. When it opens, we will receive account-linked payment references, membership status and transaction information needed to provide access and handle billing. Payment details will be submitted to the payment provider through the configured checkout; do not send them by email.

3. Designs and storage on your device

Current design drafts, uploaded originals and local libraries are stored in browser storage on the device where you use the creation tools. These memberships do not include cloud backup or automatic cross-device design sync. Clearing site data can remove local copies.

Local storage does not mean that no information reaches the server: loading pages, logging in and receiving account emails involve network requests. If you send a file to support, it becomes part of your support correspondence. Any future server-side upload, AI or sharing feature must explain its data use when introduced.

4. Why we use information

We use information to provide and secure accounts, verify email ownership, recover access, deliver the website, prevent abuse, respond to support, provide purchased benefits when available and meet applicable legal obligations.

Where a legal basis is required, processing may be necessary to perform our agreement with you, meet legal obligations or pursue legitimate interests in operating and protecting the service, subject to your rights. Where consent is required, we will request it and you may withdraw it without affecting earlier lawful processing.

5. Service providers and sharing

The website is hosted through OpenAI Sites with Cloudflare infrastructure; hosting, security and database services process information necessary to operate the site. Resend is used for account verification and password-reset emails. Contacting our published Gmail address sends your message through Google's email services.

Stripe is the planned payment processor; checkout is not enabled yet. If enabled, Stripe will handle payment information under its own privacy terms as well as applicable service arrangements. If you choose Sign in with Apple when it is available on the account page, Apple processes your sign-in under its privacy terms. We receive the Apple account identifier and the profile information you authorize, such as your email address or an Apple private relay address and, when supplied, your name. We do not receive your Apple password. Provider identifiers are used to identify and link accounts; an email match alone does not merge accounts.

We may disclose necessary information to advisers, authorities or service providers where required to meet legal obligations, protect rights or respond to a valid request. We do not sell your personal information. A provider is not given a right to publish your private account data merely because it provides a service.

6. Cookies and similar storage

Essential session cookies keep you signed in and protect account requests. Browser storage retains local designs and settings, such as language preferences. Hosting/security services may also use cookies or similar technology for fraud and abuse prevention.

You can manage these through your browser. Blocking essential cookies may stop login from working; deleting browser storage may erase local designs. Optional analytics or marketing trackers that require consent will not be treated as essential merely to avoid requesting it.

7. Retention and international processing

We retain account information while needed to provide the account, and retain support, security or transaction records for the periods reasonably needed for their purpose and applicable legal obligations. Session and verification expiry controls access but does not necessarily mean every associated database record is immediately deleted. We will assess deletion requests and explain any records we must retain.

Our service providers may process information outside Australia or your country of residence. Cross-border handling is subject to applicable privacy obligations. Contact us for information about relevant providers or a particular privacy concern.

8. Your choices and rights

You can request access to or correction of account information, account closure, or deletion of personal information by emailing support. We may verify ownership before acting. Depending on the law that applies, you may also have rights to object to or restrict processing, obtain a portable copy, withdraw consent or complain to a privacy regulator.

Closing an account, deleting local browser data and cancelling a paid subscription are different actions. Tell us which you need. Removing cloud-held account information will not remotely delete every local file on your devices. If a legal retention obligation prevents deletion, we will explain it.

9. Security and updates

We use HTTPS, authentication controls and restricted access to help protect information. No online service is completely risk-free. Never send passwords, verification codes, secret reset links or complete card details to support.

We update this policy as the service and data handling change and will provide any notice or choice required by law. The updated date appears at the top of the page.