Who is responsible
Quguo Limited operates BlendCanvas and is responsible for personal data processed through our hosted service. This policy covers blendcanvas.com and app.blendcanvas.com. Independently operated deployments and services you connect have their own operators and privacy policies.
Data we process
Depending on the features used, we process account identifiers and authentication records; synchronized canvases, prompts, uploads and generated media; task status, model usage and credit records; support correspondence; and technical request logs such as IP addresses and timestamps. Payment records are processed only where you purchase a service from us.
Browser storage and provider requests
Guest content stays in browser storage unless you upload, synchronize or send it to a connected service. Direct-mode API keys are stored in your browser, and prompts and references are sent directly to the configured endpoint. Server-mediated channels can process the submitted content and usage records. Storage services you configure receive the files you send to them. Avoid submitting secrets or sensitive personal data unnecessarily.
Purposes and legal grounds
We use data to authenticate users, save and synchronize work, execute requested tasks, account for usage, respond to support and protect service security. Where applicable, processing relies on performing our agreement, legal duties, legitimate interests in operating and securing the service, or your consent for optional purposes. We do not sell personal data.
Recipients and international processing
Content may be shared with your selected model, workflow and storage providers, and necessary hosting or support providers. We may disclose data when legally required or necessary to address fraud, and in a business transfer subject to applicable protections. Providers may process data outside your country, including outside Hong Kong. Their retention and model-training practices follow their own terms; review them before sending content. Where required, we apply lawful transfer safeguards.
Retention and security
We retain hosted data for as long as necessary for the selected service, security, disputes and legal obligations, then delete or anonymize it. Local data remains until removed by you or the browser. We use reasonable protections but cannot guarantee absolute security or recovery. Deletion requests may be subject to lawful retention and backup rotation; local copies and independent providers require separate action.
Your choices and requests
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent for consent-based processing. Contact support; we may verify your identity and explain any legal limits. The service is intended for adults aged 18 or over. Contact us if a child has provided personal data. Material privacy changes will be announced through the website or account.
Questions about this policy? Contact [email protected] · Quguo Limited