Privacy Policy

Information We Collect

When you use GESTEL, we may collect the following information for social login (Google, Kakao) and service provision:

• Uploaded Images — Used strictly to generate your requested outputs. We do not use uploaded images to train AI models.
• Usage Data — Anonymous analytics to help us improve the platform (pages visited, features used).
• Account Information (Required) — Email address, display name, and identifier (ID) provided when creating an account and logging in.
• Marketing Consent Data (Optional) — Phone number (only if you explicitly opt-in to receive marketing communications).
• Inquiry & Consultation Data (Required) — When you submit an onboarding or consultation request: name, work email, phone number, preferred contact method, and brand name. Used solely to respond to your inquiry, schedule a consultation, and follow up on your request.
• Inquiry & Consultation Data (Optional) — Instagram handle.

Notice at Collection (For California Residents)

We collect the following categories of personal information:

• Identifiers — name, email, phone, account ID.
• Commercial information — inquiry and consultation records.
• Internet activity — usage data, IP address, cookies.
• Inferences — preferences derived from your usage.

We do not sell or share your personal information. Retention periods, sources, and your rights are described below.

How We Use Information

The collected information is used for the following purposes:

• Platform Operations (Required) — To provide and improve the GESTEL platform, process image generation and editing requests, verify identity and authenticate users, send service updates and critical notices, and prevent abuse to ensure platform security.
• Marketing Activities (Optional) — To send promotional and marketing information, including updates on new GESTEL features, promotional benefits, discount coupons, and event details (via Email, KakaoTalk, SMS, etc.).

Telephone and Text Message Communications (TCPA)

By providing your phone number and selecting "Phone" or "Text" as your preferred contact method, you expressly consent to receive calls and text messages from GESTEL at the phone number you provided, including via automated technology, regarding your inquiry, consultation, or onboarding request.

• Consent is not a condition of using our services or making any purchase.
• Message and data rates may apply.
• Reply STOP to any text to unsubscribe. Reply HELP for help.
• You may revoke consent at any time by emailing privacy@gestel.studio or replying STOP. We will honor opt-out requests within 10 business days.

We do not share your phone number with marketing partners.

Data Storage and Retention

• Images — Uploaded images are stored temporarily for processing. Generated images are stored for a limited time to allow you to download them. We do not retain images indefinitely unless you explicitly save them to your account.
• Account & Personal Information — As a rule, personal information is destroyed without delay upon account deletion or withdrawal of consent for marketing communications. (However, if preservation is required by relevant laws and regulations, the information will be securely retained for the legally specified period).

Third-Party Services & Consignment of Processing

We use the following third-party services to operate our platform. Each service is strictly prohibited from using your data for purposes outside the scope of the entrusted tasks.

Currently, GESTEL does not entrust the processing of personal information to external parties for marketing delivery. If this changes, we will disclose the consignee and the entrusted tasks through this privacy policy.

International Data Transfers

GESTEL is operated by a company located in the Republic of Korea. By using our service, you understand that your personal information may be transferred to and processed in Korea, where data protection laws may differ from those in your jurisdiction.

Our service providers (Supabase, FAL.ai, Google) are located in the United States. We rely on industry-standard safeguards including encryption in transit and at rest for all cross-border transfers.

EU/UK residents: where applicable, we rely on Standard Contractual Clauses (SCCs) for transfers outside the EEA.

User Rights

You have the right to:

• Request the deletion of your data
• Access the personal information we hold about you
• Withdraw consent and opt-out of marketing and non-essential communications

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights:

• Right to Know — what personal information we collect, the sources, the purposes, and with whom we share it.
• Right to Delete — request deletion of personal information we hold about you (subject to legal exceptions).
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt-Out — of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit — the use of sensitive personal information. We do not use sensitive personal information beyond the purposes permitted under CCPA.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

How to exercise these rights: Email privacy@gestel.studio with "California Privacy Request" in the subject line. We will verify your identity using account credentials or other reasonable means and respond within 45 days (extendable by another 45 days if necessary). You may designate an authorized agent to act on your behalf with written permission.

Other US state residents: residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Kentucky, New Hampshire, New Jersey, Rhode Island, Tennessee, Minnesota, Maryland, and other states may have similar rights under their state laws. We honor equivalent requests on a best-efforts basis. Contact privacy@gestel.studio.

Personal Information Categories (Past 12 Months)

We have not sold or shared personal information for cross-context behavioral advertising in the past 12 months.

Sources of Personal Information

We collect personal information from:

• You directly — when you create an account, submit a form, or contact us.
• Social login providers — Google, Kakao (when you choose social login).
• Automatically — when you use our service (usage data, IP, cookies).
• Service providers — payment processors, analytics tools.

Cookies and Tracking Technologies

We use the following:

• Strictly necessary — login, security, and core functionality.
• Analytics — Google Tag Manager, Google Analytics 4.
• Marketing — Meta Pixel for ad measurement and retargeting.

You can manage non-essential cookies through your browser settings. Disabling certain cookies may affect functionality.

Email Marketing (CAN-SPAM Act)

Marketing emails will:

• Clearly identify themselves as advertising;
• Include our valid physical postal address;
• Provide a clear and conspicuous unsubscribe mechanism in every email;
• Honor opt-out requests within 10 business days.

To unsubscribe at any time, click "Unsubscribe" in any marketing email or email privacy@gestel.studio. Our postal address: 145 Anam-ro, Seongbuk-gu, Seoul, Republic of Korea (Korea University Business School Main Building, Room 217).

Children's Privacy (Under 13)

GESTEL is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. Parents who believe their child has provided personal information may contact privacy@gestel.studio.

Platform API User Data Policy Compliance (Google API Compliance)

• GESTEL's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• We do not sell, transfer, or share user data obtained through social login with third parties (such as data brokers or external advertising networks) for their own targeting or advertising purposes.

Contact

For any privacy-related inquiries, please contact us at privacy@gestel.studio.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to account holders and prominent notice on our website at least 30 days before taking effect. Non-material changes will be reflected by updating the "Last Updated" date above.