Last updated September 30, 2026
This Privacy Notice for duoself, operated by Altra Technology Co., Limited ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Visit this website, or any website of ours that links to this Privacy Notice
Download and use our mobile application (duoself), or any other application of ours that links to this Privacy Notice
Use duoself, an all-in-one AI platform that enables creators to generate images and efficiently manage their fan communities
Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our services.
Altra Technology Co., Limited is the data controller of your personal data for the purposes of the Platform. Our data protection contact is: +852 46885713
SUMMARY OF KEY POINTS
(This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.)
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process.
Do we collect any information from third parties? We may collect information from third parties such as referral information, identity verification and fraud prevention services, and advertising or analytics platforms.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties. Learn more about when and with whom we share your personal information.
How do we keep your information safe? We have adequate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us at +852 46885713. We will consider and act upon any request in accordance with applicable data protection laws.
Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.
1. WHAT INFORMATION DO WE COLLECT?
We collect and process the following categories of personal data depending on how you use the Platform:
Data you provide directly
Identity data (e.g. name, date of birth, nationality)
Contact data (e.g. email address, phone number)
Payment data (e.g. card or bank details, billing address)
Creator verification documents (e.g. ID, liveness scans)
Communications (e.g. support messages, complaints)
Data we collect automatically
Usage data (e.g. login times, clicks, viewed Content, messages)
Technical data (e.g. IP address, browser type, device model)
Location data (based on IP or device permissions)
Session activity (e.g. navigation, interactions)
Data from third parties
Referral information
Identity verification and fraud prevention services
Advertising or analytics platforms
We may combine this data to improve our services, protect users, and detect misuse.
Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we may also process sensitive personal information such as biometric data for verification purposes.
Payment Data. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by secure payment processors like Stripe. You may find their privacy notice link(s) here:: https://stripe.com/privacy.
CHILDREN'S PRIVACY
Our Services are not intended for use by children under the age of 18 ("Children"). We do not knowingly collect personal data from Children. If you are under 18, you must not use our Services or provide any personal data to us. If you become aware that a Child has provided us with personal data without parental consent, please contact us immediately at +852 46885713. If we learn that we have collected personal data from a Child without verification of parental consent, we will take steps to delete that information from our servers.
AGE VERIFICATION DATA
To comply with global age verification laws, we process additional data for users in regulated jurisdictions. This includes government ID details, biometric matching data, and verification documents for creator verification purposes. Age verification is performed by approved third-party providers under strict data processing agreements. We store only the minimum data necessary for compliance, such as verification status (pass/fail) and timestamp. For Creative Users, we may retain document data as required by applicable laws (e.g., USC 2257 requirements). Age verification data is processed based on legal obligation and legitimate interest, retained for the duration required by law or your account status, subject to enhanced security measures, and never used for marketing purposes.
2. HOW DO WE PROCESS YOUR INFORMATION?
We process your personal data for the following purposes:
| Purpose (Processing Purpose) | Legal Basis |
| To create and manage your Account | Contractual necessity |
| To verify creator identities and ensure age compliance | Legal obligation and legitimate interest |
| To process transactions, deliver Paid Services, and securely handle payments via third-party providers (e.g., Stripe, PayPal) | Contractual necessity |
| To enforce Platform rules and prevent abuse | Legitimate interest and legal obligation |
| To improve and personalise your experience | Legitimate interest and/or consent |
| To respond to support or complaints | Contractual necessity or legal obligation |
| To deliver marketing (where permitted) | Consent or legitimate interest |
| To comply with laws and respond to authorities | Legal obligation |
| To generate AI images in response to your requests, and improve our AI image-generation functions using anonymized data | Legitimate interest and/or consent |
| Identity verification and fraud detection (e.g., Onfido, Socure) | Legal obligation and legitimate interest |
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests.
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
Consent. We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you.
Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.
Legitimate Interests. We may process your information when we believe it is necessary to achieve our legitimate business interests, provided that your interests and fundamental rights do not override those interests.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.
We only share your personal data where necessary and for legitimate purposes. This includes sharing with:
Payment processors
KYC and fraud tools
Analytics providers
Marketing platforms (only with your consent)
Customer support tools
Legal authorities, where required by law or court order
Wherever possible, we enter into data processing agreements with these providers to ensure your data is handled securely.
The categories of third parties we may share personal information with are as follows:
Payment Processors
Data Analytics Services
Cloud Computing Services
Data Storage Service Providers
User Account Registration & Authentication Services
Government Entities (where required by law)
We also may need to share your personal information in the following situations:
Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Affiliates. We may share your information with our affiliates.
Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
Our Services may contain links to external websites or services not operated by us. We are not responsible for the content, privacy practices, or data use policies of those third parties. We recommend reviewing their privacy notices before submitting any data.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We currently do not use cookies or similar tracking technologies to collect or store your information.
While we reserve the right to use such technologies in the future to enhance user experience, improve platform performance, or provide additional functionality, we are not currently utilizing any cookies, web beacons, or other automated data collection methods. Should this change in the future, we will update this Privacy Notice accordingly and provide clear information about the types of technologies used and how you can manage your preferences.
6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In Short: We may transfer, store, and process your information in countries other than your own.
Our servers are located in Singapore. Regardless of your location, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information, including facilities in the United States, Japan, and other countries.
Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:
Adequacy decisions by the relevant authorities
Standard Contractual Clauses (SCCs)
UK Addendum to SCCs (if required)
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.
We retain your personal data only for as long as necessary for the purposes outlined in this Policy, including:
While you maintain an active Account
For legal, regulatory, tax, or audit purposes
For a limited period after account closure, as required by law
After this period, your data is securely deleted or anonymised.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organisational and technical security measures.
We take the protection of your personal data seriously. We implement appropriate technical and organisational measures to prevent accidental loss, unauthorised access, or misuse of personal data. These include:
Secure servers and encryption of sensitive data;
Access restrictions and confidentiality agreements for staff;
Breach detection and notification procedures, in line with legal obligations.
You are responsible for keeping your account credentials confidential and must not share them with others.
9. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.
You have the following rights under applicable data protection law:
Right to access -- Request a copy of your personal data
Right to rectification -- Correct inaccurate or incomplete data
Right to erasure -- Ask us to delete your data under certain conditions
Right to restrict processing -- Limit how we use your data
Right to data portability -- Receive your data in a structured format
Right to object -- Stop certain types of processing
Right to withdraw consent -- Where processing is based on consent
Right to lodge a complaint -- With your local data protection authority
To exercise your rights, contact +852 46885713.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.
10. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may contact us by post at:
Altra Technology Co., Limited
UNIT 903D, 9/F., CAMERONCOMMERCIAL CENTRE, 458-468HENNESSY ROAD, CAUSEWAY BAYHK
Or by phone at: +852 46885713
11. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please submit a request to +852 46885713.
12. DO WE MAKE UPDATES TO THIS NOTE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice.