SOFI Personal Information Collection Statement

1. Who we are

This statement is issued by Sofi (“we”, “us”).

If you have any questions about how personal data is collected, used or retained, email sofifamventures@gmail.com.

2. What we collect

When you use the upload feature, we may collect:

• the artwork, photos and related files you upload;
• images of identifiable people within them;
• file name, format, dimensions and necessary technical data;
• the contact, order and delivery details you provide;
• the design previews and processed versions our system generates for you.

Please avoid uploading sensitive material that is not relevant or necessary to the service.

3. Why we collect it

We use this data to:

• generate and display personalised design previews;
• process images, designs and production files;
• check uploads for inappropriate content or possible third-party copyright issues;
• process orders, payment, delivery and after-sales service;
• respond to enquiries and resolve technical problems;
• keep the site and service secure;
• prevent fraud, abuse and unauthorised activity;
• meet applicable legal and regulatory obligations.

We will not use your photos or artwork for display on our site, advertising, social media, press or any other promotional purpose without obtaining your separate, explicit consent.

4. Is providing data mandatory?

Providing artwork or photos is voluntary.

However, if you choose not to provide the necessary files, we cannot generate a design preview, process the design, or complete the personalised service.

5. Who may process your data

To deliver the service, we may pass the necessary data to the following categories of service provider:

• website hosting and cloud storage providers;
• image processing, background-removal and AI design providers;
• content-screening providers — this includes reverse image search, which compares your image against publicly available images on the web to identify possible copyright issues;
• printing, production and quality-inspection providers;
• delivery and customer service providers;
• payment, information security and professional advisers;
• government, regulatory or law-enforcement bodies where legally required.

These providers may process the data only for the specified purposes and must meet applicable confidentiality and data-protection requirements. Some are located outside Hong Kong (cloud storage and image processing, for example, are in the United States), while production files may be stored on a Hong Kong cloud service. Where data crosses borders, we apply appropriate contractual and security safeguards.

6. How long we keep it

Content uploaded while signed out (as a guest) is deleted from our storage roughly 10 minutes after upload, unless you register or sign in and save the design within that window.

Artwork, photos, design previews and production files uploaded while signed in are kept in your account until you delete them, or until you ask us to delete them. We do not currently delete signed-in users' uploads automatically.

You can delete uploaded content on the site at any time, or contact us as described in section 10. We will act on such requests subject to applicable law, order status and necessary operational requirements.

Order, payment and accounting records are retained for the period required by applicable law, which may be longer than the above.

7. Image and AI processing

Uploaded content is processed by automated and AI tools to generate design previews, remove backgrounds, restyle images and prepare production files. These tools are provided by third parties, and your image is transmitted to their servers as part of that processing.

Automatically generated previews are for design reference only; manual or technical adjustment may still occur before production.

8. Children's data and permission to upload

If the uploaded content includes a child or any other identifiable person, you confirm that:

• you are at least 18 years old;
• you are the child's parent or guardian, or have appropriate authorisation;
• you have the consent of any other identifiable person in the image;
• uploading and using the content does not infringe anyone's privacy, copyright or other rights.

Where appropriate, we encourage parents to explain to their child how the photo will be used, and to respect the child's wishes.

9. Public display and promotional use

Processing your data to fulfil an order does not mean you have agreed to SOFI using that content publicly.

If we would like to feature any artwork, photo or finished product on our website, social media, advertising or marketing materials, we will tell you separately what specifically would be used, on which platforms, for what purpose, for how long, and how to withdraw consent.

Any such option is voluntary and will not be pre-ticked. Declining promotional use will not affect your order or service.

10. Partners

If you are a Sofi partner (taking part in the partner programme), we also collect your name, contact email and phone number, commission records, and the payment details you give when withdrawing. Details are set out in the Partner Terms.

Sections 1 to 9 of this statement cover the upload feature for general users and are unrelated to partner accounts.

11. Access, correction and contacting us

You have the right, under applicable law, to request access to and correction of the personal data we hold about you. You may also contact us to ask how your data is used and retained, or to request deletion of uploaded content.

Email sofifamventures@gmail.com. We will respond within 40 days of receiving your request.