Privacy Notice
TOC Studio (千纸鹤工作室, “TOC Studio,” “we,” “us,” or “our”) respects your privacy. This Notice applies to websites, Desktop Calendar, and future applications, AI services, and platforms that link to it (collectively, the “Services”). A product-specific notice controls where it provides more specific information.
Current website: This is a static informational website. It has no registration, sign-in, forms, advertising, analytics SDK, or online AI feature. It stores only your language preference in your browser. Our hosting and security providers may generate basic access logs.
1. Scope and roles
This Notice applies only where a TOC Studio Service links to it. The operator and contracting party for a particular product will be identified in its store listing, checkout page, or supplemental terms. Depending on the product and context, that operator may act as a controller/business or process information on behalf of an organization customer.
If your employer, school, or another organization provides the Service, that organization may control your account and information. Contact it first about its processing practices.
2. Information we handle
We limit collection to information reasonably necessary for disclosed purposes. Depending on the Service and your choices, this may include:
- Technical data: IP address, browser, operating system, device, app version, timestamps, diagnostics, security events, and basic usage events.
- Account and support data: name or alias, email, account identifier, authentication data, settings, subscription status, and communications with us.
- Content you provide: calendar entries, tasks, prompts, instructions, feedback, text, code, documents, images, audio, or other files, depending on the feature you choose.
- Generated content: responses, summaries, recommendations, classifications, and other output produced for you.
- Transaction data: order, subscription, invoice, and refund records. App stores and payment providers normally handle full payment credentials under their own notices.
- Connected-service data: information accessed from a calendar, cloud drive, email, or another service only when you connect it and within the authorization you grant.
Do not submit government identifiers, financial credentials, precise location, health, biometric, children’s data, confidential business information, or other sensitive data unless a feature clearly requires it and provides an appropriate notice.
3. Purposes and legal bases
We use information to provide requested features, maintain accounts and subscriptions, secure and troubleshoot the Services, respond to support requests, comply with law, and improve reliability and design. Where applicable law requires a legal basis, we rely on performance of a contract, consent, compliance with legal obligations, protection of vital interests, or our legitimate interests balanced against your rights.
Marketing is optional. We will provide an unsubscribe method and will not use consent for a new incompatible purpose without a new notice or consent where required.
4. AI services
When you choose an AI feature, we process the prompts, context, and files needed to produce and deliver output. Necessary content may be sent to disclosed model, cloud, and safety providers. Product notices will identify material processing details.
We will state whether content is used for model training or product improvement and provide legally required controls. We do not use identifiable private content to train a general-purpose model without appropriate notice and a valid legal basis. Limited human review may occur under access controls for support, abuse prevention, safety, or quality evaluation.
AI output can be inaccurate, incomplete, or biased. Do not rely on it as the sole basis for medical, legal, financial, employment, safety-critical, or other high-impact decisions. Unless expressly stated with appropriate safeguards, we do not make decisions producing legal or similarly significant effects solely by automated means.
5. Cookies and device storage
The current website does not use advertising or analytics cookies. It uses browser local storage only to remember your language choice. You may clear this preference in your browser; the site will then return to English. Future essential, preference, analytics, or advertising technologies will be disclosed and, where required, offered only after an appropriate choice.
6. Service providers, disclosure, and international transfers
We do not sell personal information for money. Some laws define “sale” or “sharing” more broadly. If a future activity falls within such a definition, the applicable product notice will disclose it and provide any required consent or opt-out before the activity begins. We may provide limited information to hosting, cloud, AI model, security, authentication, payment, notification, analytics, and support providers; to a third party you direct us to connect; during a lawful business reorganization; or when reasonably necessary to comply with law or protect rights and safety.
Providers are contractually limited to authorized purposes where required. Information may be processed outside your country. Before a product conducts such transfers, its notice will identify relevant destinations or recipient categories and safeguards, such as adequacy decisions, contractual clauses, certifications, consent, or another lawful mechanism.
7. Retention and security
We retain information only for as long as reasonably necessary for the disclosed purpose, account lifecycle, legal obligations, dispute resolution, and security. Product notices may provide specific periods or criteria. We then delete, de-identify, or securely isolate information unless continued retention is legally required.
We use proportionate administrative, technical, and organizational safeguards. No online system is completely secure. If a breach requires notice, we will notify affected people and regulators as required by applicable law.
8. Your rights and choices
Depending on where you live, you may have rights to know, access, correct, delete, restrict, object, withdraw consent, obtain a portable copy, opt out of certain sharing or targeted advertising, and request review of qualifying automated decisions. You may also complain to a competent regulator.
Use product controls where available or email [email protected]. We may verify your identity and may deny or limit a request where permitted by law, with an explanation. Authorized agents may submit requests where local law permits.
9. Children
The current website and our general-audience Services are not directed to children under 16, and we do not knowingly collect their personal information without required parental authorization. A product intended for children will provide age-appropriate information and obtain verified parental or guardian consent where required. A parent or guardian may contact us to request review or deletion.
10. Regional information
China: Product notices will separately identify sensitive information, entrusted processors, sharing, storage location, retention, and cross-border transfers, and obtain separate consent where required.
EEA and United Kingdom: Product notices will identify the controller, legal bases, recipients, transfer safeguards, retention, statutory rights, and supervisory authority. You may object to legitimate-interest processing and withdraw consent at any time.
United States: State-specific rights may include access, correction, deletion, portability, and opt-outs from sale, sharing, targeted advertising, or qualifying profiling. We will not discriminate against you for exercising applicable rights.
Japan and South Korea: Local notices will include required disclosures for overseas processing, entrusted processing, transfers, retention, and local contact or representative arrangements where applicable.
Canada and Australia: We apply accountability, meaningful consent, access, correction, security, and cross-border safeguards required by applicable federal, provincial, or Australian privacy law.
Southeast Asia: Before targeting Singapore, Malaysia, Indonesia, Thailand, the Philippines, Vietnam, or another ASEAN market, we will provide required local notices, lawful-transfer safeguards, contacts, and language support.
11. Changes and contact
We may update this Notice as our Services or laws change. We will post the date above and provide prominent or in-product notice of material changes where required.
Questions, complaints, or rights requests may be sent to [email protected]. Please identify the relevant product and request. We will respond within the period required by applicable law.
Service brand: TOC Studio (千纸鹤工作室)
Privacy email: [email protected]
Website: tocxlab.com
ICP filing: 沪ICP备2026005045号-1