JUSTPLUSHJUSTPLUSHAI STUDIO
Back to Studio

JUSTPLUSH · CREATE WITH CLARITY

Privacy Policy

Understand how JUSTPLUSH AI Studio handles account information, creative inputs and generated results.

01Scope

JUSTPLUSH AI Studio is operated by SOHOLLY. Its service and privacy contact is leoli@artall.com.

This policy describes JUSTPLUSH AI Studio at studio.justplush.art. Linked websites, AI services and recipients of files may have their own data-handling roles and terms. A private workspace is not a promise that no service provider processes your content.

02Information we handle

Account information includes email, display name, password hash, account/workspace identifiers and status, verification and terms-acceptance records, and session/authentication-token hashes and expiry. Session records include the network address seen by the application and browser user-agent.

Creative information includes prompts, reference images, filenames, types and sizes, generation settings, task status/errors, provider task IDs, output references, previews and favorites. We also handle credit, usage, attempt and audit records. An optional project brief may include dimensions, quantity, market, delivery expectations and an approved share link.

03Why information is used

Information supports registration and sign-in, account-security mail, requested generation, task recovery, result storage/delivery, the library, credits, security and support. It also supports sharing and inquiries you choose to initiate. The applicable processing basis depends on the purpose and governing law; accepting service terms is not blanket consent to unrelated data uses.

04Uploads and AI processing

Reference images upload to configured private object storage using short-lived signed links. The API checks file size, type and encryption metadata. To generate, Studio sends the prompt, selected settings and reference-image links to the configured model service, which can retrieve those images. Product-development instructions may be added to your prompt. Submitted job inputs and task/output metadata are saved.

Provider results can be copied to private result storage and delivered through temporary download links. A 3D preview may be derived from the original model and use neutral materials. Submit only information you are authorized to share for this processing.

05Service providers

Studio has integrations for Volcengine ARK image/video/3D processing, Amazon S3 storage and backups, and SMTP account mail. Enabled models and services depend on configuration. Model services receive the creative inputs needed for your request; mail services process the recipient address and security message/link. Their processing is also governed by the relevant service arrangements and provider terms.

Do not assume that private storage means provider zero-retention, no human access or exclusion from training. Provider retention and training rules are separate from Studio's own storage controls. Avoid submitting sensitive personal information or confidential third-party material without appropriate authority.

06Storage, security and international processing

The service separates account/job/credit records and uses configured object storage for media. Technical controls include password hashing, hashed tokens, workspace checks, rate limits, expiring links and server-side encryption on storage paths. No system can guarantee protection from every loss or unauthorized access.

Hosting, backups, models, mail delivery and technical support can involve different processing locations and network transfers. The location of a server or storage region alone does not establish every processing location or exclude cross-border handling.

07Cookies, local preferences and logs

The studio_session cookie supports sign-in. It uses HttpOnly and SameSite=Lax, with Secure and expiry controlled by configuration. Sign-out clears the cookie and revokes that session; password reset revokes existing sessions. studio_locale stores the language preference locally. Blocking these facilities may affect sign-in or remembered language.

Technical records include session network/browser metadata, hashed rate-limit subjects and task/security/credit events. Hosting logs may include request paths, time, status and network metadata. Authentication and share links are sensitive; do not include them in screenshots, public messages or diagnostics.

08Sharing a result

Sharing requires your explicit action and consent. A link allows anyone holding it to access one selected completed result for seven days without signing in, not your account, uploaded references or full library. The service stores a hash of the share secret. The secret is in the link fragment and is submitted in a request body when a recipient opens the file.

You can revoke or replace the link; deleting its job removes its share record. This does not recall downloaded copies or in-flight responses. Full links may remain in browser history, messages or an inquiry you approve, so share only with intended recipients.

09Retention and deletion

Signing out, credit expiry or removing a form reference does not automatically delete account records or uploaded files. Some technical records expire and are cleaned during application checks, while backups, provider copies and audit/credit records may follow different retention cycles.

Deleting a non-running job requests removal of its recorded results/previews and job/share records. Original uploaded references, ledger and attempt history, audits, backups, provider copies or object versions are not automatically erased by that action. It is not an immediate complete-erasure or account-closure operation.

10Your choices and requests

You choose whether to upload, generate, share or submit an inquiry. You can download available results, revoke links, delete eligible jobs, sign out and reset a password. The current interface does not offer self-service account deletion, a general profile-correction form or complete-account export.

Depending on applicable law, you may have rights to access, correction, deletion, portability, restriction, objection, withdrawal of consent or a complaint to a competent authority. You can raise account or information-handling questions with the team through the JUSTPLUSH website contact page. Do not send passwords or complete security links in an initial inquiry.

11Children's information

The current registration process has no age-verification or guardian-consent workflow; this does not establish suitability for children. Do not upload children's images or personal information without appropriate authority and safeguards. Contact the team if you believe such information was submitted improperly.

12Contact and updates

Send privacy or account-information requests to leoli@artall.com. Describe the request and the email associated with your account; do not include passwords, verification codes or complete security links. Additional information may be needed to verify an account-related request.

Contact the team through the JUSTPLUSH website contact page with questions about this policy. The page shows its version and last-updated date. Review changes before continuing activities affected by them, including sharing or submitting new creative inputs.

Clear expectations. Softer possibilities.

Contact JUSTPLUSH