Privacy Policy

1. Information we collect

We collect account details; the images, photos, voice recordings, prompts and results you provide or create; order contact and delivery details; and payment status and transaction references. The information processed depends on the service you use.

2. Why we use it

We use this information to operate accounts and enabled tools, store files and results, process orders and payments, deliver prints, prevent misuse and respond to support requests and content reports. Mona Studio does not use customer files to train models. Marketing requires separate, optional permission.

3. Processors and processing abroad

Some data is processed outside Mongolia. We use Supabase for databases and storage, Render for hosting, Runware, OpenAI, Google Gemini and Replicate for AI processing, and QPay for payments. The provider used depends on the tool; every provider does not receive every file. This does not mean QPay processes all payments abroad. Print and delivery partners receive relevant order details. Naming providers and asking uploaders for permission does not establish consent or a legal basis for overseas transfers.

4. Faces and voice recordings

Enabled face tools process uploaded photos. PhotoShoot uses Google Gemini to compare a generated face with the uploaded photo for likeness; it does not verify identity or permission. Lip sync paid runs are currently unavailable; that tool is designed to process face media and voice recordings. Upload another person’s identifiable face or voice only with the necessary permission. For paid PhotoShoot, Collaborations and edits with fresh uploaded media, the service checks a rights acknowledgement and records the acknowledgement, tool, wording version, scopes and execution reference; an edit may also record the uploader’s declared preset. The associated credit record identifies the account and records the database time. This records the uploader’s statement; it does not verify another person’s permission or certify legally valid consent.

5. Retention today

We keep account details while the account exists. Order, payment, order-refund and credit-transaction records currently have no fixed automatic expiry in the app. Accounting documents and financial statements must be kept for at least 10 years under Accounting Law, section 11.1, unless archives and official-documentation legislation provides otherwise. That rule does not set a 10-year period for photos, voices, prompts or personal data in general.

Generation records include prompts, settings, results and file references. Uploaded files, generated media, thumbnails and prepared print files are stored without a fixed expiry; there is no automatic media-deletion schedule. Some failed jobs remove their own files, which does not delete all stored media. You can request deletion through support. Where account deletion is enabled and completes, it removes generation and upload records and the associated stored files; cleanup failures can leave files pending removal. Required financial records and deletion-request records remain, as described in section 6. We have not set a fixed retention period for deletion-request records.

6. Requests and deletion

For access, correction or deletion requests, contact support@monastudio.mn. We verify account ownership before acting. Where account deletion is enabled, signed-in customers can use Settings → Delete account; if it is unavailable or you cannot sign in, contact support from your registered email. Active print orders, open payments, refunds owed or paid AI jobs in progress can block account deletion; contact support to resolve the blocker.

The account-deletion process clears selected contact and delivery fields and removes generation, upload and paid-run records. It retains order, payment, order-refund and credit records, with selected free-text metadata cleared. Financial references and some refund evidence remain; these records are not guaranteed to be free of personal identifiers. A deletion-request record keeps a hashed email, request and completion times, channel, requester reference, any support reference and cleanup counts; cleanup references may remain. Cleanup can remain pending if file or account removal fails. Section 5 explains the retention periods currently set.

7. Security and incidents

We use access controls and private storage for customer media. No system is completely secure. Report suspected unauthorized access or a data incident to support@monastudio.mn. We investigate incidents, take containment steps and notify affected customers and competent authorities when applicable law requires.

8. Children and policy changes

This service is for people aged 18 or older. Children under 18 must not create an account or use the service. If you believe an under-18 account or upload is present, contact support@monastudio.mn so we can investigate and handle the account and data. We will update this policy when practices change and publish the revised date here.