Privacy Policy

IAFT Limited ("IAFT," "we," or "us") places a high value on the protection of your personal data. This Privacy Policy explains how we collect, use, store, transfer, and protect your personal data when you use the i-Search service (the "Service").

Please read this Policy carefully before using the Service. By using the Service, you acknowledge that you have read and understood the contents of this Policy.

1. Data User

The data user of your personal data is:

• IAFT Limited

• Registered Address: Room 2705, 27th Floor, China Resources Building, 26 Harbour Road, Wanchai, Hong Kong

• Data Protection Contact Email: [email protected]

2. Personal Data We Collect

2.1 Account Data

When you register for and use the Service, we collect: email address, nickname or name, and login password (stored in encrypted form). If you choose to log in via Google account authorization, we will collect the basic information provided by Google with your authorization (name, email address, and profile picture).

2.2 Payment and Transaction Data

Payments are processed through the third-party payment processor Stripe. Your payment card information is collected and processed directly by Stripe, and we do not store your complete payment card details. We retain only order records, transaction receipts, and subscription and credit accounting information.

2.3 User Content

Content you submit and generate in the course of using the Service, including: the instructions (prompts) you input, session records, and task records.

2.4 Technical and Log Data

To safeguard the security and stability of the Service, we automatically collect: IP address, device type and operating system, browser type, access time, operation logs, and crash diagnostic information.

2.5 Cookies and Similar Technologies

We use cookies and similar technologies to maintain login status, remember preferences, and conduct basic service statistical analysis. You may manage cookies through your browser settings, but certain functions may not operate properly as a result.

3. Purposes of Collection

We collect and use your personal data solely for the following purposes:

3.1 To provide, maintain, and improve the Service (including processing your instructions and invoking AI capabilities to generate content);

3.2 Account registration, identity authentication, and login management;

3.3 Billing, settlement, and accounting management for subscriptions and credits;

3.4 Security safeguards, anti-abuse measures, and fraud prevention;

3.5 Customer service and notifications (including notifications relating to service changes, accounts, and security);

3.6 Compliance with applicable laws, regulations, and regulatory requirements.

If we need to use your personal data for any new purposes beyond those listed above, we will obtain your prior consent (except where otherwise provided by law).

4. Data Storage Location and Cross-Border Transfer

4.1 Storage and Processing Location: You expressly acknowledge and agree that your personal data will be transmitted to and stored at a cloud computing data center in India for processing.

4.2 AI Processing: In order to provide you with AI capabilities, your instructions and content related to tasks will be transmitted to third-party AI model service providers for processing. We transmit data on a minimum-necessary basis and will not proactively provide such providers with account identity data that is unrelated to task processing.

4.3 Safeguards for Cross-Border Transfer: We implement technical and organizational measures for cross-border data transfers, including transmission encryption (TLS), encryption at rest, and access control, and enter into contractual clauses containing data protection obligations with the relevant service providers, so as to ensure, to the extent reasonably practicable, that your personal data is afforded protection no less than that committed to in this Policy.

4.4 Data protection laws in India and other data-receiving jurisdictions may differ from those of your jurisdiction. Your continued use of the Service constitutes your understanding of, and consent to, the above cross-border transfer arrangements.

5. Third Parties to Whom We Disclose Data

We only disclose your personal data to third parties in the following circumstances:

5.1 Infrastructure Service Providers: cloud computing service providers, for hosting and data storage of the Service;

5.2 Payment Processors: Stripe, for completion of payment and settlement;

5.3 Identity Authentication Providers: Google, for the account authorization login you have chosen;

5.4 AI Model Service Providers: for processing your instructions and generating content (on a minimum-necessary basis as set out in Section 4.2);

5.5 Professional Advisers: lawyers, auditors, and other professional service organizations (within the necessary scope);

5.6 Law Enforcement and Regulators: disclosure made in accordance with the lawful requirements of applicable laws, court orders, or regulatory authorities.

Save as described above, we will not sell, rent out, or otherwise provide your personal data to any third party.

6. Data Retention

6.1 During the existence of your account, we will retain the personal data necessary to provide the Service to you.

6.2 Following the deregistration of your account, we will delete or anonymize your personal data within 30 days, except in the following circumstances:

(a) data required to be retained by applicable laws, accounting, or tax requirements (such as transaction receipts);

(b) data reasonably required to be retained for the resolution of disputes, enforcement of agreements, or prevention of fraud.

6.3 Security and audit logs will be retained for the period required by applicable laws, regulations, or industry practice, and will be deleted or anonymized after such retention period expires.

6.4 You may delete your sessions and files within the product; upon deletion, the relevant content will be removed from active systems within a reasonable period (with backup copies to be purged after the expiry of the backup cycle).

7. Data Security Measures

We adopt the following measures to protect your personal data: encryption in transit and at rest, access control based on the principle of least privilege, desensitization of sensitive information, security audit logs, and periodic security assessments. Notwithstanding the reasonable measures we have taken, no absolute security exists in the internet environment; please safeguard your account credentials properly.

8. Minors

The Service is not directed to persons under 18 years of age (or the age of majority in the relevant jurisdiction). We do not knowingly collect personal data from minors; if any such data has been inadvertently collected, we will delete it promptly upon verification.

9. Data Breach Notification

In the event of a personal data breach that may have a material impact on your rights and interests, we will notify you and/or the relevant regulatory authorities within a reasonable period in accordance with the requirements of applicable laws, and will take remedial measures.

10. Updates to this Policy

We may update this Policy from time to time. The updated Policy will be published through in-product notice or other reasonable means and will take effect from the effective date published. For material changes (such as substantive changes to data storage location or scope of sharing), we will notify you by more prominent means.

11. Contact Us

If you have any questions, comments, or complaints regarding this Policy or our personal data processing practices, please contact: