Privacy Policy

• Contact details: your name, email address, phone/WhatsApp number, delivery address.
• Your photograph(s): the image(s) you upload to generate a portrait.
• Order details: the style you chose, the renditions generated, your order history and payment status (not your card number — see clause 3).
• Marketing consent: whether you’ve opted in to receive marketing emails or messages from us.
• Technical data: standard website usage data (e.g. pages visited), if we use analytics tooling.

• To generate your portrait and fulfil your order.
• To communicate with you about your order — confirmations, delivery updates, problems.
• To send you marketing, only if you’ve opted in. You can withdraw this at any time (clause 6).
• To improve Such Character — for example, understanding which styles are popular.

We do not collect more than we need for these purposes, and we do not sell your data to anyone.

• Stripe, to process payment, including PayNow. We never receive or store your card or bank details ourselves.
• Our print partner, delivery details only, to produce and dispatch your physical piece.
• Magnific, our AI image generation platform, your photograph, solely to generate your portrait. Magnific’s own privacy policy states images uploaded to their platform are used only to produce your output and are not used to train their AI models. Magnific routes generation through third-party AI models (including Google’s image model) under Magnific’s own data processing agreements with them.
• WhatsApp Business Platform (Meta), if you choose to receive your files or updates over WhatsApp — your phone number and the files we send you pass through Meta’s platform as the messaging channel.

We do not share your data with anyone else, and we do not sell it.

Such Character runs on Base44, a third-party app platform, and our order and account data is stored on Base44’s infrastructure. Payment is processed by Stripe. Your photograph passes through Magnific for generation, which in turn uses third-party AI model providers under Magnific’s own agreements with them — Magnific states these images are deleted from its own systems immediately after your portrait is generated, and any copy held by the underlying model provider is limited to a short window (Magnific states a maximum of 30 days) before it too is deleted.

Some or all of these providers may process or store data outside Singapore. Where that happens, we rely on our providers’ own safeguards for international transfers (for example, Magnific uses Standard Contractual Clauses with its third-party model providers). This is standard practice for a business running on cloud infrastructure, and is consistent with PDPA’s transfer limitation obligation, which permits overseas transfer where comparable protection is in place.

We also use Claude (Anthropic) as a development tool to build and maintain our code. It does not process customer photos or personal data as part of fulfilling an order.

We keep order records (including the photograph used, to enable reprints or support a warranty claim) for as long as we reasonably need them for accounting, warranty and dispute purposes, and then delete them. You can ask us to delete your photograph sooner (clause 6) — we’ll only decline if we still need it to resolve an active order or dispute.

You can, at any time, email us at serene@ihaa.co to:

• ask what personal data we hold about you;
• ask us to correct it;
• ask us to delete it (subject to clause 5);
• withdraw your consent to marketing — every marketing message we send has an unsubscribe/opt-out option, and we action it immediately.

We’ll respond within a reasonable time and won’t charge you for a reasonable request.

We take reasonable technical and organisational steps to protect your data — for example, payment is handled entirely by Stripe rather than by us, which keeps card data off our systems entirely. No system is perfectly secure, but we do not store more sensitive data than we need to.

Such Character does not run analytics or advertising tracking (no Google Analytics, no Meta Pixel, no similar tools) as of this policy’s last update. We use only what’s technically necessary to run the site and your order. If that changes, we’ll update this policy first.

We may update this policy from time to time. We’ll post the “last updated” date above whenever it changes. If we make a material change to how we handle your data, we will take reasonable steps to let you know.