Privacy Policy

Operator and contact

Guangzhou Yuedong Youpin E-commerce Co., Ltd. (广州悦动优品电商有限公司), operating as Tatvela. Registered address: Room A0322, 3rd Floor, No. 416 Fuhua East Road, Shiqiao Subdistrict, Panyu District, Guangzhou, Guangdong, China. (广州市番禺区市桥街富华东路416号3楼A0322房). Contact: [email protected].

Information and purposes

We process account details, prompts, uploaded reference images and body photos, generated assets, job status, Credits activity, transaction references, and security and diagnostic information. We use these to sign you in, perform requested inference, provide History and storage, administer payments, provide support, prevent abuse and maintain reliability.

Payment-card details are handled by Paddle. Tatvela receives transaction information needed to reconcile purchases and deliver Credits; do not send card details to support.

Local and cloud Preview

In Private local preview, a body photo selected from your device is composited in your browser. That body photo is not uploaded to Tatvela or sent to an AI provider. The composite can be downloaded to your device and is not automatically saved to History. The page can still make network requests, including loading an owned design from History.

Cloud AI preview sends the necessary prompt, design, reference images and uploaded body photo (or selected generic model image) to the AI provider for inference. Choose local preview if you do not want your body photo submitted for cloud inference.

Service providers and processing locations

Providers used to deliver the service include Paddle for checkout, Alibaba Cloud Model Studio (Qwen and Wan/Wanx) for AI inference, Cloudflare R2 for object storage, Railway for hosting and databases, and Resend for account email delivery.

The current cloud AI deployment uses a Beijing-region Model Studio endpoint. Other infrastructure and payment processing may involve locations outside your country. Provider processing, retention and international-transfer arrangements depend on the service and account configuration. Contact us for information applicable to your request; we do not promise zero data retention or immediate provider-side erasure.

Access and sharing

Account assets use owner access checks. Where needed, the service creates time-limited read links for storage or provider access; anyone with a valid signed link may be able to use it until it expires. Do not share private links. Access restriction is not the same as erasure from storage or backups.

The content license in our Terms is limited to providing and protecting the service. It does not authorize public marketing use or transfer ownership. This policy makes no blanket guarantee about AI providers' training practices; applicable provider terms and account arrangements must be considered.

Cookies, browser storage and diagnostics

Session and guest cookies support sign-in and guest continuity. Browser local storage remembers onboarding and generation-confirmation choices; session storage can retain form drafts and a pending checkout reference to resume your workflow. Clearing storage may remove these preferences and drafts but does not delete server records.

Service events, such as checkout, History and job activity, are recorded in application logs with restricted event fields for reliability and usage analysis. This implementation uses an internal log sink rather than a separate external analytics collector. Hosting, payment and email providers also operate their own necessary systems.

Processing grounds and your choices

Depending on applicable law, processing may be necessary to provide the service you request, meet legal obligations, protect legitimate interests in security and reliability, or rely on your consent where required. These grounds do not replace consent or other conditions that a particular jurisdiction requires.

You may contact [email protected] to request access, correction or deletion, withdraw consent where processing relies on it, or complain about data handling. Withdrawal does not affect earlier lawful processing and may affect features requiring that data. You may also complain to the competent data-protection authority where applicable. We may ask for proportionate verification, but do not send passwords or full card details.

Retention and deletion

Normal account information and saved works are retained as needed to provide the service. Deleting content or an account restricts access through the applicable deletion flow and schedules eligible content for cleanup. Legitimate references from retained designs, running tasks and necessary records can delay cleanup. Failed object deletions remain queued for retry.

Eligible content is cleaned from active systems within a reasonable operational period. Backup copies, logs and provider systems may retain information until applicable retention periods end. Account deletion does not guarantee that all stored copies or provider-held data have already been removed.

Transaction, refund, ledger, anti-fraud, audit, accounting and dispute records may be retained where necessary. The account-deletion flow removes account credentials and replaces identifying account fields, while pseudonymous financial and operational records remain. This is not a promise of complete anonymization of all historical records.

Adults only

The service is for people aged 18 and over. If you believe a minor's information was submitted, contact [email protected] so we can investigate, restrict access and arrange appropriate deletion, subject to necessary safety and legal records.

Policy changes

The revision date appears above. The service asks new and returning users to confirm the current policies before covered new actions. Material changes may require additional notice or consent. Earlier purchases retain their applicable transaction terms.