Revision dated 18 August 2026 (added processing for moderation and safety).
SelfyStudio (selfystudio.art) respects your privacy and collects only the data needed to operate. The personal data operator is Autónomo Viktoriia Sando (NIE Z3636484M), hereinafter the “Operator” or “we”.
You create profiles and upload source photos (selfies) reused for new generations. We process these data to provide the service, run the Service, and — for generation results — as described in Section 6 and the Public Offer.
1. Data we process
Identifiers — Telegram ID and/or e-mail, profile name, interface language.
Source photos (selfies) — you upload them for image generation. A facial image is personal data. We do not analyse facial features to establish identity, do not create biometric templates/vectors for identification, do not match faces across users, and do not use photos as a login method; therefore we do not process them as biometric personal data (Article 11 of Federal Law No. 152-FZ) or as special-category biometric data for unique identification (GDPR Article 9).
Generation results — generated images and creation parameters (mode, style, time), and publicity/hide flags.
Payment data — fact and amount of payment, selected pack or subscription. We do not receive or store card data.
Technical data — IP address, device and browser information, cookies.
2. Purposes
providing the service — creating images on request and storing source photos in the profile for repeat generations;
displaying generations, SEO/landings, promoting the Service, and allowing other users to repeat generations (Section 6), if not hidden;
payments, support, and security;
improving the Service and complying with law.
keeping the Service safe, enforcing acceptable-use rules, and handling abuse reports;
3. Legal bases
3.1. We process data primarily to perform the contract (public offer) you accept by using the Service (Article 6(1)(5) of Federal Law No. 152-FZ), and on the basis of your consent (including image publication under Article 152.1 of the Civil Code as set out in the offer) and our legitimate interests (operation and security).
4. Source photos (selfies)
4.1. You upload photos to profiles and reuse them for generations. We use them to create images on request, for support, and for security.
4.2. Source photos are not published, not used in advertising, and not included in public datasets. The Operator does not use them to train its own models. Only generation results may be public, and only if not hidden (Section 6).
4.3. Photos are stored in protected object storage in Russia (Yandex Object Storage, ru-central1). On request they are fully deleted within 7 days, unless longer retention is required by law.
4.4. To perform generation, the image may be temporarily transferred to AI services (including outside the Russian Federation) solely to provide the service, not for identification.
5. Images of other people
5.1. You may upload another person’s image only with their consent to processing and to creation, display, and use of results under the Public Offer. The uploader is responsible for such consent. On request of the depicted person we hide or delete the materials (@SelfyStudio_support, service@selfystudio.art).
6. Generations: publicity, advertising, hide
6.1. Generations are public by default: they may appear in the gallery, style pages, SEO pages, and other sections; be used to promote and advertise the Service (website, social media, messengers, contextual and targeted ads); and be repeated by other users with their own profile (remix).
6.2. Source selfies are not covered by Section 6 — they always remain non-public (Section 4).
6.3. You may request hide for specific or all generations in the cabinet (“Hide my photos from the public feed”) and/or via @SelfyStudio_support. After hide is applied: no public display, no remix, no use in new ads.
6.4. Materials already distributed before hide (including paid campaigns) may finish within the placement term, but no longer than 30 calendar days; no new placements of hidden generations. Unhide in the cabinet restores publicity.
6.5. Full license and image-consent terms: Section 8 of the Public Offer (selfystudio.art/offer).
6.6. Earlier generations. Accepting the Public Offer (including on login or when confirming updated terms) means Section 6 and the Service license for display and promotion also cover generations created before acceptance and on previous versions of the Service, if not hidden. Source selfies remain non-public. Details: Offer Clause 8.10. Hide remains available in the cabinet and via support.
7. Recipients
7.1. We do not sell your data. Transfers are limited to what is needed to provide the service:
AI generation services — the image is sent for the duration of the request; processing may occur outside the Russian Federation.
Payment providers (CloudPayments, T-Bank, Telegram) — only to process the transaction.
Hosting and infrastructure — storage in the Russian Federation (including Yandex Object Storage).
Advertising and analytics platforms — when generations are used to promote the Service and for cookies/analytics (e.g. Yandex Metrica); source selfies are never sent to ads.
Contractors — only as needed, under confidentiality.
8. Storage and security
8.1. Data are stored on protected servers and object storage in Russia (Yandex Object Storage, ru-central1) with organisational and technical safeguards.
8.2. Retention: source photos — until deletion on request (destruction within 7 days) or account deletion; account and generations — while the account is active and as needed to perform the offer, resolve disputes, and comply with law; payment records — as required by law.
9. Your rights
9.1. You may request access, rectification, export or deletion, withdraw consent where processing is consent-based, object where the law allows, and request hide of generations: in the cabinet, at service@selfystudio.art, or via @SelfyStudio_support. Deletion may make further service impossible.
10. Cookies and analytics
10.1. We use cookies for operation, auth, and analytics (including Yandex Metrica). You may limit cookies in the browser. See the on-site cookie notice if shown.
11. Users in the Russian Federation (152-FZ)
11.1. Processing complies with Federal Law No. 152-FZ. Main bases: contract performance and consent. We do not identify by image, so source photos are ordinary personal data, not biometric personal data (Article 11).
11.2. Primary storage is in the Russian Federation (Yandex Object Storage, ru-central1). Part of processing (generation) involves cross-border transfer of the image to AI services solely to provide the service. Data subject requests: service@selfystudio.art.
12. Users in the EU/EEA (GDPR)
12.1. For data subjects in the EU/EEA, processing follows the GDPR. Bases: consent (Art. 6(1)(a)), contract (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)). Facial images are not processed as special-category biometric data for unique identification (Art. 9), because the purpose is image generation, not identification.
12.2. You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority. Data may be transferred outside the EEA with appropriate safeguards. Requests: service@selfystudio.art.
13. Age
13.1. The Service is only for persons 18+. We do not knowingly process minors’ data; such accounts are blocked and materials deleted.
13.2. We may process uploaded images, generation parameters, and outputs as needed to verify age restrictions, detect prohibited content, meet payment- and infrastructure-provider requirements, and handle abuse reports. See selfystudio.art/acceptable-use and selfystudio.art/safety.
14. Changes to this Policy
14.1. We may update this Policy by publishing a new revision at selfystudio.art/privacy. Material changes are communicated via the Service and/or support. Continued use after publication means acceptance, unless the law requires otherwise.
15. Operator contacts
Autónomo Viktoriia Sando
NIE: Z3636484M
E-mail: service@selfystudio.art
Support: @SelfyStudio_support (Telegram)