Privacy Policy

Adopted: October 1, 2026

This Privacy Policy (“Policy”) describes how YGGSIL (合同会社YGGSIL, referred to as “we,” “us,” or “our”) handles information about users of Putto AI (“Service”).

---

1. Information We Collect

We may collect and use the following information to provide the Service.

1-1. Authentication and Account Information

• Email address
• User identifiers, such as a user ID (UID)
• Authentication provider information, such as Google sign-in or email and password authentication

The Service may use third-party services such as Firebase Authentication.

1-2. Service Usage Data

• Service credit data, such as balances and update timestamps
• Image generation and editing data, including metadata such as generation type, aspect ratio, size, tags, and style IDs
• Prompt-related data
  • Shared prompts, background prompts, and product photography style prompts saved through administrative features
  • Prompts (templates) used during generation and saved in the generation history

1-3. Image Data

• Input images (images uploaded by users)
  • For image generation or editing, the Service may send input images to our servers and to third-party services, such as image generation APIs.
  • As a general rule, the Service is designed to process input images in memory for generation without storing them permanently. This design may change for operational reasons.
• Generated images
  • Generated images may be stored in cloud storage, such as Google Cloud Storage, to support the image history feature available to users.
  • Stored generated images may be made available for a limited time through authenticated access mechanisms, such as signed URLs.

1-4. Logs, Device Information, and Related Data

• Access logs and error logs, including timestamps, IP addresses, user agents, and portions of request data
• Cookies, local storage, and similar technologies, which may be used to maintain authentication status or improve the user interface

2. How We Use Information

We use the information we collect for the following purposes:

• Providing and operating the Service, including authentication, image generation and editing, displaying image history, and managing credits
• Preventing misuse and maintaining security
• Resolving technical issues and improving service quality and features
• Analyzing usage and compiling statistics, including aggregated data that does not identify individuals
• Responding to inquiries
• Addressing violations of our terms and related issues

3. Third-Party Services, Data Sharing, and Outsourcing

To provide the Service, we may use the following third-party services and send them user information to the extent necessary:

• Firebase, including Authentication and Firestore
• Google Cloud Storage
• Google image generation APIs, such as Gemini and Imagen
• Stripe for payment processing

We may entrust third-party service providers with the handling of personal information to the extent necessary. When we do so, we take appropriate steps to select and oversee those providers.

Please refer to each provider’s privacy policy and related documents for information about how that provider handles data.

4. Data Retention

We retain information for as long as necessary to fulfill the purposes for which it was collected. Examples of our retention practices include:

• Generated images (history): Up to 500 images per user are stored. If this limit is exceeded, older images may be deleted first.
• Signed URLs for generated images: These may expire after a set period, such as one hour. Expiration of a URL does not mean that the image itself is deleted from storage.
• Information after account deletion: Some information is deleted when an account is deleted, while certain information, such as initial registration records, may be retained to prevent misuse or for other purposes.

5. Account Deletion and Your Rights

You may delete your account by following the procedures available within the Service or another method we specify.

5-1. Examples of Information Deleted When You Delete Your Account

• Your authentication account (the user account in Firebase Authentication)
• Service credit data, such as your balance

5-2. Examples of Information That May Be Retained After Account Deletion

• Initial registration records used to prevent misuse, such as preventing credits from being improperly granted again when a user registers a new account
• Generated images (history): These may not be deleted immediately for technical or operational reasons. Please contact us if you would like them to be deleted.

The specific information deleted and the procedures for deletion may change as the Service’s implementation or operations change.

6. Security Measures

We take reasonable security measures, such as access controls, authentication, encryption, and log audits, to prevent the unauthorized disclosure, loss, or corruption of the information we collect.

7. Requests for Disclosure, Correction, or Suspension of Use

In accordance with applicable law, you may request disclosure, correction, suspension of use, or other action regarding your retained personal data. For information on how to submit a request, please contact us using the details in Section 10, “Contact Information.”

8. Use by Minors

If you are a minor, you must obtain consent from a parent or other legal representative before using the Service.

9. Changes to This Policy

We may update this Policy in response to changes in laws, the Service, or other circumstances. We will notify users of changes by posting the revised Policy on the Service or by other means.

10. Contact Information

For inquiries about this Policy, please contact us using the details below:

• Operator: YGGSIL (合同会社YGGSIL)
• Email: info@yggsil.com
• Address: We will disclose our address without delay upon request.

Last updated: October 1, 2026