LEGAL — LAST UPDATED 02 SEPTEMBER 2026

Privacy Policy

This policy explains what we collect, how we use it, and your choices when you use Gumball Studio.

Who we are

Gumball Studio is operated by Gumball. Contact: support@gumball.fashion. If we add a dedicated privacy contact, we will update this page.

What we collect

• Account info: email address you use to sign in, workspace name, verification codes (hashed, short-lived).
• Product content: product URLs, uploaded product photos, generated images, photoshoot configs.
• Usage data: quota, credits, subscription status via Dodo Payments, rate-limit counters.
• Technical data: IP address, user agent, session cookies (KV), and basic logs for security and abuse prevention.

How we use it

• To create and maintain your workspace and sign you in (passwordless email codes).
• To store products and generate photoshoots using PhotoRoom's Virtual Model API.
• To process payments and enforce quota through Dodo Payments webhooks.
• To secure signed image URLs, prevent abuse, and provide support.

We do not sell your personal data. Product photos you upload are used only to generate images for your workspace.

PhotoRoom processing

When you create a photoshoot, your product image and optional additional angles are sent to PhotoRoom (image-api.photoroom.com) to generate the model scene. PhotoRoom processes the image under their terms. We do not share your email or billing data with PhotoRoom.

Payments

Payments are handled by Dodo Payments. We receive subscription status, webhook events and metadata (workspace ID) — not your full card details. See Dodo's privacy policy for their handling.

Storage and retention

• Workspace, product and photoshoot data stored in Cloudflare D1 & R2 until you delete it or your account is removed.
• Sessions stored in Cloudflare KV and expire automatically.
• Rate-limit logs retained briefly for security.
• Backups follow Cloudflare's retention.

Cookies

We use essential cookies for authentication (session). No advertising or third-party tracking cookies.

Your rights

Depending on your location you may have rights to access, correct, or delete your data. To exercise them, email support@gumball.fashion. We will verify your workspace ownership before acting.

International transfers

Data is processed on Cloudflare's global network (Workers, D1, R2, KV) and may be stored in the US or other regions where Cloudflare operates.

Changes

We will update this page and change the date above if the policy changes. Continued use after changes means you accept the updated policy.