Last updated: 2026-10-07 · AI Garden & Landscape Design (https://ai-garden-design.pages.dev), operated by KunStudio (쿤스튜디오).
1. What we collect
Usage analytics — we run Google Analytics 4 (measurement ID G-109DQ8DQF0) on this site. It records device and browser type, approximate region (Google Analytics 4 does not log or store IP addresses), pages viewed and interaction events, using cookies and similar identifiers.
Your photos — the photo(s) you upload and the images made from them. See “Your photos” below.
What you type — the details you enter into the form. See “What you type” below.
Order data — when you pay (and, if an order fails, what we record about it): PayPal order ID, the product, the time and the delivery status. See “Payments and orders” below.
Feedback, referral and share data — see “Feedback, referral and share buttons” below (the referral part runs on page load).
Server logs — our host (Cloudflare) keeps standard request logs for security and abuse prevention.
2. Why we use it
We use the data above to see which pages are useful and improve them, to deliver what you bought and to take payment through PayPal, and to keep the site available and secure. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
3. How long we keep it
Event-level analytics data is kept by Google for 2 months (currently the period set on our Google Analytics property) and then deleted automatically; aggregate reports remain. Our order and failure records expire after 400 days. Server logs are kept for a short period by our host. We keep no copy of your photos or text on our own servers; files that our image provider holds stay under its own settings (see “How long they are kept” below). We keep no copy of the text you type or of your result; our text provider keeps it under its own policy. Feedback and referral records are kept until we delete them (see “Feedback, referral and share buttons”). Email you send us is kept only as long as needed to answer you, and then deleted.
Your photos
Where they go. You choose the photo(s) in your browser. After you pay, your browser sends them to our server inside the generation request, and our server relays them to our image provider, fal.ai, to produce your images. Our own code does not save the photo to any database or disk of ours.
What is done with them. fal.ai's models process the photo(s) and return images, which are hosted by fal.ai; their links are returned to your browser for download.
Links are not private. The file links are plain web addresses without a password. Anyone who has a link can open that file, so do not post them publicly.
How long they are kept. Our servers keep no copy of your photos. We do not run any job that deletes files at fal.ai and we set no expiry on them, so the uploaded and processed files stay at fal.ai under fal.ai’s own storage settings, and we cannot state a deletion date. fal.ai’s documentation says stored files can be set to expire and that request inputs and outputs are kept for 30 days by default (fal.ai media expiration). To have your photos deleted, email us the order ID or tell us which photo, and we will request deletion from fal.ai.
What we do not do. We do not sell your photos, we do not use them to train AI models and we do not use them for anything except producing your result. We do not use faces to identify anyone.
What you type
Where it goes. The details you type into the form are sent from your browser to our server and on to Anthropic, which writes your result. This happens after you pay, to write your result. Please do not type anything into the form that you would not want a service provider to process.
What we keep. Our own code does not save the text you type or the result we return to your browser. Copy or download the result before you close the page.
What the provider keeps. Anthropic keeps the text under its own terms and policy (linked below); we cannot state its retention period. We do not use what you type for anything except writing your result.
Payments and orders
PayPal takes your payment through PayPal’s own buttons. We never receive or store your card number or PayPal password. PayPal sends us the order status.
Our failure record. If an order fails after payment we write one small entry in our hosting key-value store: the PayPal order ID, the product code, the time, the site host, a “not delivered” marker and a short technical error text (when a retry succeeds the entry is updated). It contains no photo, no text you typed and no email address. It is kept for 400 days and then expires automatically; we use it for support and refunds. Orders that succeed leave no entry of this kind.
Failure alerts. If an order fails after payment, our server sends the operator a Telegram message with the stage, product code, PayPal order ID and a short error reason (up to 300 characters). It contains no photo and no text you typed.
Purchase measurement. Once PayPal confirms a payment, our server sends Google Analytics one purchase event with the PayPal order ID, the amount, the currency and the product code, tied to your Google Analytics browser ID if your browser sent one (otherwise to a code derived from the order ID). This event is sent by our server and is not controlled by the cookie banner (where there is one).
Feedback, referral and share buttons
Feedback button. If you use it, the message you write, the optional email address you type, the feedback type, the page you were on, the first 160 characters of your browser’s identification text (User-Agent) and your country are sent to KunStudio’s own feedback endpoint (sajuapp.app, run by us). They are saved in a file in a GitHub Gist controlled by us (GitHub, Inc., United States) that keeps the most recent 500 entries with no other time limit, and the message, page and email are forwarded to the operator in a Telegram message. Do not put anything confidential in the message. To have an entry deleted, email us.
Referral code. This runs whenever a page with the referral widget loads, whether or not you click anything. Your browser creates a random visitor ID (kept in local storage as ks_vid; the referral code in the link you followed may be kept as ks_inbound_ref) and sends it with the product page to KunStudio’s referral endpoint (sajuapp.app). The endpoint combines the ID with your IP address and browser type into a one-way SHA-256 key (the IP address itself is not stored), issues you a referral code and records the code, the key, visits and conversions in a file in the same GitHub Gist. It holds no name or email. You can clear the ID in your browser; email us to have a record deleted.
Share buttons. When you press a share button the site sends a one-line ping (product and channel, no content) to KunStudio’s own endpoint (sajuapp.app) to count shares. The share itself goes to the service you pick.
4. Who else processes your data
These providers process data for us. Each entry says what is sent, to which country, why, and how to reach or read the provider.
fal.ai — To generate your images. What is sent: the photo(s) or text you provide and the images generated from them. Country: United States. Contact / policy:support@fal.ai · privacy policy.
Anthropic, PBC — To write your result. What is sent: the text details you type into the form. Country: United States. Contact / policy:privacy@anthropic.com · privacy policy.
PayPal — To take payment. What is sent: your payment (PayPal receives it directly from you; we receive the order status). Country: United States and other countries. Contact / policy:privacy policy.
Telegram — To alert the operator to paid or failed orders. What is sent: operator alerts about orders: product code, PayPal order ID, a short error text if an order failed (and the amount in sale alerts). Country: various (Telegram operates data centres worldwide). Contact / policy:privacy policy.
GitHub, Inc. (Gist) — Storage of feedback and referral records. What is sent: feedback messages and the referral ledger kept by KunStudio (see “Feedback, referral and share buttons”). Country: United States. Contact / policy:privacy policy.
Cloudflare, Inc. — Hosting, CDN, security and the storage of our short-lived records. What is sent: every request to this site (IP address, browser, pages) and the data our server functions handle while they run. Country: United States and other countries. Contact / policy:privacy policy.
Google LLC (Google Analytics) — Usage measurement. What is sent: device and browser type, approximate region (Google Analytics 4 does not log or store IP addresses), pages viewed, events, and (for a purchase) order ID, amount and product code. Country: United States. Contact / policy:privacy policy.
5. International transfers
KunStudio operates from the Republic of Korea. The providers in section 4 process data outside Korea (mainly in the United States) as shown above. Where required, transfers rely on the safeguards each provider describes in its own privacy policy. Korea (PIPA Article 28-8(1)3): these transfers are entrusted processing and storage that is necessary to carry out our contract with you, which we disclose here. The items, countries, recipients and purposes are the ones listed in section 4; the transfer happens over the internet at the moment you use the feature that needs it (upload, preview, payment, generation or email); the retention period is the one stated for each item above and in each provider’s own policy; and you may refuse the transfer by not using that feature — but the service cannot be provided without it.
6. Your rights
EU / UK (GDPR): you may request access to, correction of, deletion of, or restriction of processing of your personal data, object to processing, and request portability. Where we rely on consent (the cookie banner on this site, which you can reopen by clearing the ks_consent cookie), you may withdraw it at any time. You may also complain to your national supervisory authority.
California (CCPA / CPRA): you have the right to know, delete, correct, and to opt out of the sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of; you may also use your browser’s privacy controls.
Korea (PIPA): you may ask to view, correct, delete or suspend processing of your personal information, and may withdraw consent, by writing to the privacy officer below. We tell you the result within the period set by the Act.
Everyone else: we apply the same handling to all visitors regardless of where you are.
7. Cookies and automatic collection
This site involves analytics cookies set by Google Analytics; the ks_consent cookie that remembers your cookie-banner choice; a random visitor ID in your browser’s local storage (ks_vid). None of them are required for the pages to work — you can block or delete cookies and local storage in your browser settings and the content will still load.
A cookie banner (Google Consent Mode) asks for your choice. Where it applies, analytics storage stays off until you accept; in some regions it may be on by default and you can switch it off in the banner. The purchase event our server sends after payment (see “Payments and orders”) is not controlled by the banner.
8. Children
This site is not directed at children under 14 (under 16 in the EEA, under 13 in the United States) and we do not knowingly collect their personal information. If you believe a child has provided us data, write to the address below and we will delete it.
9. Security and destruction of personal information (PIPA Articles 29 and 30)
Our measures: Data is sent over HTTPS; we collect only what the service needs; payment details stay with PayPal; we keep no copy of photos or typed text on our own servers. Records in our hosting key-value store carry an automatic expiry where this policy states a period and are removed by the platform when it passes. Email we receive is deleted when no longer needed. Files at providers and feedback/referral records are deleted when you ask us, as described above.
10. Changes
If this policy changes we update the date at the top of this page. Material changes will also be noted on the home page.
11. Privacy officer and contact
Privacy officer (개인정보 보호책임자): Hong Deokhun (홍덕훈), KunStudio, 070-8018-7832, ghdejr11@gmail.com. We reply within a reasonable time and, where a legal deadline applies, within that deadline.
KunStudio (쿤스튜디오), operated by KunStudio · Representative Hong Deokhun (홍덕훈) · Business Registration No. 552-59-00848 · Mail-order business report No. 제2026-경북경주-0237호 (경주시장, 2026-05-20). 25-52, Jenaemosan-gil, Oedong-eup, Gyeongju-si, Gyeongsangbuk-do, Republic of Korea Tel: 070-8018-7832 (+82-70-8018-7832) · Email: ghdejr11@gmail.com
개인정보 처리방침 요약 (한국 이용자)
1. 처리 목적. 결제 처리, 주문한 결과물의 생성·전달, 환불·문의 응대, 서비스 보안 및 이용 통계. 개인정보를 판매하거나 광고 목적으로 제3자에게 제공하지 않습니다.
2. 처리 항목. Google Analytics 4 이용 통계 · 접속 정보(기기·브라우저·열람 페이지) · PayPal 주문번호·상품·시각 · 이용자가 올린 사진과 생성된 이미지 · 이용자가 입력한 텍스트 · (피드백·추천 버튼 사용 시) 메시지·이메일·방문자 식별 해시.
3. 보유 기간. Google Analytics 이용 통계는 2개월(현재 GA 속성 설정) 후 삭제; 실패 주문 기록은 400일 후 자동 만료(성공 주문은 기록을 남기지 않음); 우리 서버에는 사진을 저장하지 않으며, 이미지 업체(fal.ai)에 올라간 파일은 그 업체 설정을 따르고 당사는 만료를 설정하지 않았으므로 삭제 시점을 확정해 말씀드릴 수 없습니다(요청 시 삭제를 요청합니다); 입력한 텍스트는 우리 서버에 저장하지 않으며 텍스트 생성 업체가 자체 정책에 따라 보유; 피드백·추천 기록은 삭제 요청 시까지 보관. 이메일 문의는 응대에 필요한 기간 동안만 보관 후 삭제합니다.
4. 제3자 제공. 이용자의 동의가 있거나 법령에 근거가 있는 경우를 제외하고 제3자에게 제공하지 않습니다.
5. 처리 위탁 및 국외 이전(개인정보보호법 제26조·제28조의8 제1항 제3호). 서비스 제공(계약 이행)을 위해 아래 업체에 처리를 위탁·보관하며, 모두 국외(주로 미국)에서 처리됩니다. 이전 시기·방법은 해당 기능(업로드·미리보기·결제·생성·메일)을 이용하는 시점에 인터넷으로 전송됩니다. 이전을 원하지 않으면 해당 기능을 이용하지 않으시면 되며, 이 경우 서비스를 제공할 수 없습니다.
fal.ai — 이전 항목: 이용자가 올리거나 입력한 사진·텍스트와 그로부터 생성된 이미지 / 국가: 미국 / 이용 목적: 이미지 생성 처리 위탁·파일 저장 / 연락처: support@fal.ai (개인정보 처리방침)
Anthropic, PBC — 이전 항목: 이용자가 입력 양식에 적은 텍스트 / 국가: 미국 / 이용 목적: 결과물(텍스트) 생성 처리 위탁 / 연락처: privacy@anthropic.com (개인정보 처리방침)
PayPal — 이전 항목: 결제 정보(이용자가 PayPal 에 직접 입력, 당사는 주문 상태만 수신) / 국가: 미국 등 / 이용 목적: 결제 처리 / 연락처: 처리방침 참조 (개인정보 처리방침)
Telegram — 이전 항목: 주문 관련 운영자 알림: 상품 코드·PayPal 주문번호·실패 시 짧은 오류 문구(판매 알림에는 금액) / 국가: 여러 국가(텔레그램 데이터센터) / 이용 목적: 유료·실패 주문 운영자 알림 / 연락처: 처리방침 참조 (개인정보 처리방침)
GitHub, Inc. (Gist) — 이전 항목: 당사가 보관하는 피드백 메시지와 추천 원장(“피드백·추천·공유” 참조) / 국가: 미국 / 이용 목적: 피드백·추천 기록 저장 / 연락처: 처리방침 참조 (개인정보 처리방침)
Cloudflare, Inc. — 이전 항목: 이 사이트로 오는 모든 요청(IP 주소·브라우저·페이지)과 서버 함수가 실행 중 처리하는 데이터 / 국가: 미국 등 / 이용 목적: 호스팅·보안·단기 기록 저장 / 연락처: 처리방침 참조 (개인정보 처리방침)
Google LLC (Google Analytics) — 이전 항목: 기기/브라우저·대략적 지역(GA4 는 IP 주소를 기록·저장하지 않음)·열람 페이지·이벤트, 구매 시 주문번호·금액·상품 코드 / 국가: 미국 / 이용 목적: 이용 통계 측정 / 연락처: 처리방침 참조 (개인정보 처리방침)
6. 안전성 확보 조치·파기. HTTPS 전송, 필요 최소 수집, 결제 정보는 PayPal 이 보관, 호스팅 저장소 기록은 기간이 있는 항목에 자동 만료를 걸어 삭제합니다. 이메일은 필요 없어지면 삭제하고, 업체·피드백·추천 기록은 요청 시 삭제(업체 파일은 당사가 삭제를 요청)합니다.
7. 정보주체의 권리. 열람·정정·삭제·처리정지 및 동의 철회를 아래 책임자에게 이메일 또는 전화로 요청할 수 있습니다.
8. 자동 수집 장치(쿠키). Google Analytics 쿠키 · 쿠키 동의 선택 쿠키(ks_consent)를 사용할 수 있으며 브라우저 설정에서 거부할 수 있습니다.