Privacy Policy

NeuralCanvas Studio ("we", "us") operates this website and provides AI visual production services. We act as the data controller for personal data described in this policy. Our registered operating entity and address are [Legal Entity Name], [Registered Address].

• Contact data you submit through our enquiry form or by email: name, company, work email address and the content of your message.
• Client project material: reference imagery, brand guidelines, product photography and training datasets you provide for an engagement.
• Technical data collected automatically by our hosting provider: IP address, browser type, referring page and timestamps, retained in server logs.

• To respond to enquiries and prepare proposals and statements of work.
• To deliver contracted services, including dataset curation, model training and image production.
• To maintain security, prevent abuse and keep accurate business records.
• To send service-related communications. We do not send marketing email without your prior consent.

We process personal data on the basis of contract performance, our legitimate interest in operating and securing the studio, your consent where required, and compliance with legal obligations under the laws of [Jurisdiction].

Reference imagery and datasets supplied by a client are used only for that client's engagement. We do not use client material to train models for other clients, and we do not sell or license client material to third parties. Datasets and trained adapters are stored in access-controlled storage and deleted on request or at the retention period stated in the applicable statement of work.

We use third-party processors for hosting, storage, email and compute used in model training and inference. Processors act on our documented instructions under written data processing terms. A current list of processors is available on request via office@katalos.shop.

Where personal data is transferred outside [Jurisdiction], we rely on an appropriate safeguard such as standard contractual clauses or an adequacy decision, and apply supplementary technical measures including encryption in transit and at rest.

Enquiry correspondence is retained for [Retention Period] unless an engagement follows. Project material is retained for the term of the engagement plus [Retention Period] for reproduction and dispute-resolution purposes, then deleted. Financial records are retained for the statutory period required in [Jurisdiction].

Subject to the law of [Jurisdiction], you may request access to, correction of, or deletion of your personal data; object to or restrict processing; request portability; and withdraw consent. Submit requests to office@katalos.shop. You may also lodge a complaint with the supervisory authority in [Jurisdiction].

This website uses only cookies strictly necessary for delivery and security. If analytics or similar technologies are introduced, we will request consent and update this policy before activating them.

We apply role-based access control, encrypted storage, least-privilege credentials for compute environments, and periodic access reviews. No system is perfectly secure; we notify affected parties and authorities of a reportable breach within the timeframe required by [Jurisdiction].

We may update this policy to reflect changes in our services or legal obligations. Material changes will be announced on this page with a revised update date.