Privacy Policy

1. What we collect

• Email address — for order confirmation and delivery updates
• Name, address and phone number — to ship your order
• The photo you upload — to generate the preview and make the figure
• The generated preview image
• Order contents, amount and payment status
• Access logs and IP address — to prevent abuse
• Page-view records (pages visited, referring site, approximate country or region, device and browser type) — to measure how the site is used. We do not store the IP address itself; the identifier used for daily unique counts changes every day. Page-view records are deleted automatically after about 13 months
• Anonymous on-site actions (page transitions, internal links and key button clicks) are connected by a temporary tab session identifier. We do not record form input, email or payment details in these action records. Session links and actions are deleted after 30 days

2. Why we use it

• To make and ship your order
• To remake your figure or provide after-sales support
• To confirm your order and contact you about it
• To answer your enquiries
• To detect and prevent abuse
• To improve the service, using aggregate statistics that do not identify individuals

3. How we handle your photo (important)

We use your photo only to make your figure, remake it if needed, and provide after-sales support.

We do not use your photo to train AI models, and we do not sell or share it with third parties.

We keep uploaded photos and generated previews so we can remake a figure or answer questions about your order. They are stored with our cloud storage provider; photos sit in a private, access-restricted area that only authorised 01fig staff can view.

If you would like yours deleted, contact us. Once we have confirmed it is you, we will delete it promptly.

Previews previously shared with your consent may remain in our public gallery and on our official social media accounts. Your uploaded original photo is not included. Contact us to request removal from channels we control; we will respond promptly.

4. Processors and disclosure

We do not disclose personal information to third parties without your consent, except where required by law.

We do use the following processors to run the service. Each is bound by an appropriate contract and supervised by us.

• An image-generation AI provider — to create previews. Your uploaded photo is sent to them, and their servers are located outside Hong Kong.
• A payment processor — for card payments. We never hold your card number.
• An email delivery provider — for order and shipping notifications.
• An online chat support provider (Crisp, France) — to answer your enquiries via chat. Conversation content is stored on their servers.
• A shipping carrier — to deliver your order.
• A cloud infrastructure provider — to store data. Servers may be located outside Hong Kong.

5. Transfer outside Hong Kong

As stated above, generating a preview sends your uploaded photo to servers located outside Hong Kong, and your data may also be stored outside Hong Kong.

By using the service you consent to that transfer.

6. Cookies and local storage

We use cookies and browser local storage to remember your language and to keep your cart. To save you re-typing, the contact and shipping details you enter at checkout may also be kept in your browser's local storage — they stay on your device and disappear when you clear browser data.

To recognize purchases after a direct return visit, we keep ad click references and the most recent traffic source in browser local storage for up to 90 days. When a purchase is confirmed, relevant click references and order details may be sent to the measurement provider.

Cart and language storage support the service. For anonymous interaction analysis, we also keep a temporary identifier in tab session storage to connect actions in one visit; it is not used to identify people across devices.

Our own site statistics use no cookies and never store your IP address itself (see section 2).

We use Google Analytics (Google LLC) to measure visits. When enabled, Microsoft Clarity (Microsoft Corporation) helps us analyze clicks, scrolling and session replays. Clarity may collect page URLs, referral information and device details. Creation-page recordings may include customer-uploaded photos and generated previews. We mask personal information in form fields and do not record order-detail pages.

Microsoft Advertising UET (Microsoft Corporation) measures ad visits and confirmed purchases. It may use cookies and receive page URLs, referral information, device details, order IDs, purchase values and currencies. We remove customer email addresses from order URLs before sending purchase events. See the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).

Meta Pixel (Meta Platforms, Inc.) measures ad visits, cart additions, checkout starts and confirmed purchases. It may use cookies and receive page URLs, device information, purchase values, currencies and order IDs. We do not load it on order detail pages containing customer email addresses. See Meta's Privacy Policy (https://www.facebook.com/privacy/policy/).

You can block analytics cookies in your browser and use Google's opt-out add-on (https://tools.google.com/dlpage/gaoptout). Clarity recording is enabled only after we verify that sensitive URL parameters are protected.

The chat support feature (Crisp) also sets cookies to keep the conversation going.

7. Security measures

• All traffic is encrypted with TLS.
• Access to personal information is limited to the minimum number of staff.
• Exif metadata, including location, is stripped from uploaded photos.

8. Access, correction and deletion

You may ask us to disclose, correct, suspend the use of, or delete the personal information we hold about you.

Write to [email protected]. We will verify your identity and respond promptly.

9. Contact

NEOCORE INTERACTIVE CO., LIMITED — Data Protection

Email: [email protected]

10. Changes to this policy

We may update this policy as the law or the service changes. We will announce significant changes within the service.