Privacy Policy

Effective as of 01/06/2026

Last updated:01/06/2026

About This Privacy Policy

GAIArt(hereinafter referred to as the "Product", "Service") is provided by Guangzhou Shikun Electronics Co., Ltd. (hereinafter referred to as "we", "us", or "our"). We highly value your privacy. This Privacy Policy (hereinafter referred to as the "Policy") describes how we collect, use, disclose, process and store any Personal Data that you provid to us or that we collect when you use our Product or Service. If you are under 16, or otherwise regarded as a minor in your jurisdiction, do not provide any Personal Data without your parent's or guardian's permission.

This Policy only applies to the GAIArt that references or links to this Privacy Policy. It also describes your rights and choices available to you regarding your Personal Data.

The Data Controller

The controller, for the purposes of applicable data protection laws, is:

Guangzhou Shikun Electronics Co., Ltd.
[No. 6, Liankun Road, Huangpu District, Guangzhou,China];
Contact for data protection matters: [gaiaos@cvte.com].

We recognize the importance of, and are committed to, safeguarding the privacy and security of the Personal Data we obtain from users and other individuals with whom we interact in the course of our business, including our partners and affiliates. We adhere strictly to applicable data protection regulations.

Please read this Privacy Policy carefully and thoroughly to ensure you fully understand our practices and can make informed decisions regarding your Personal Data before using our Services. Your access to and use of the Product or Service is governed by this Policy

Our Product or Service may include links to third-party websites. Please note that we are not responsible for the privacy policies or practices of those external websites.

The Privacy Policy only applies to the Personal Data we collect. 

The Privacy Policy will help you understand the following:

Index

1. Definitions

2. Collecting and Using Your Personal Data

3. Children's Privacy

4. How We Use Cookies and Similar Technologies 

5. How and When We Share Your Personal Data

6. How We Store Your Personal Data

7. Your Rights and Choices

8. Security

9. Other Sites and Services

10. How We Make Changes to This Policy

11. Contact Details

1. Definitions

"Collect" refers to the act of gaining control over Personal Data, including voluntary provision by the data subject, automatic collection through interaction with the data subject or recording the behaviour of the data subject, and indirect acquisition through sharing, transferring and collecting public information.

"Controller" refers to the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing Personal Data. As stated in the introduction, [Guangzhou Shikun Electronics Co., Ltd.] is the controller of the data covered by this Privacy Policy.

"Child" or "Children" is a term defined differently under various jurisdictions. For the purposes of this Privacy Policy, it refers to an individual under the age of 16. While we recognize that the legal age of digital consent may be lower in certain jurisdictions (e.g., 13 in the UK), we maintain a consistent high standard of protection.

"Delete" refers to the act of removing Personal Data from the system involved in the implementation of daily business functions, so that it cannot be retrieved and accessed.

"Personal Data" refers to any information relating to an identified or identifiable natural person (‘data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

"Processing" refers to any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Sell" refers to the act of selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating Personal Data to another business or third party in exchange for monetary or other valuable consideration.

"Share" refers to the process by which a Personal Data controller provides Personal Data to other controllers, with both sides retaining independent control over the Personal Data.

"Transfer" refers to the process of transferring Personal Data control from one controller to another.

"You" or "your" means the individual accessing or using the Product or Service, or the company, or other legal entity on whose behalf the individual is accessing or using the Product or Service, as applicable.

2. Collecting and Using Your Personal Data

GAIArt collects Personal Data to ensure efficient operation, enhance user experience, and deliver high-quality Product or Service.

Our Purposes and Legal Bases for Processing

We process your Personal Data in strict accordance with applicable Data Protection Laws. Every data processing activity we undertake is justified by a specific purpose and a corresponding "legal basis".

The primary legal bases we rely upon are:

• Performance of a Contract: This is our basis when we need to process your data to deliver the Services.

• Legitimate Interests : We may process your data when it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and interests. For example, we may record your data and analyze customer service interactions and market conditions to further enhance and improve our products and services, and for other purposes that are reasonable and lawful under laws and regulations.

The following sections explain in detail the Personal Data we process for each of our features and services, our purposes for doing so, and the specific legal basis for each activity.

2.1. Data Collection When Using Our Website

a. Upload Images  

b. Download Images

c. Customer Comments and Feedback

You can contact us via email. When you send us an enquiry or contact us for support, we process the information you provide solely for the purpose of resolving your issue effectively.

All access to these data is tracked and limited to the purposes of resolving technical issues or improving service functionality, and will be strictly controlled to ensure compliance with applicable data protection and privacy laws.

2.2. How We Use Your Information for Compliance and Protection

We may also process your Personal Data to ensure the safety and functionality of our Services at GAIArt, protect interests of our customers and GAIArt, and comply with legal and regulatory requirements.

Specifically, we may use your Personal Data based on following legal grounds :

• Legal Obligation: This applies when we need to process your information to comply with a law, regulation, or a binding legal request. This includes activities such as:

- Legal Compliance: We process Personal Data to comply with applicable laws, respond to lawful requests, and fulfill legal obligations. This may include responding to subpoenas, investigations, or requests from government authorities.

- Legal Proceedings: Personal Data may be accessed or used in connection with legal claims, litigation, or regulatory proceedings, as necessary to protect our rights or to comply with judicial or administrative processes.

• Legitimate Interests: This is the basis for processing data to protect our business and users, while balancing these interests against your data protection rights. This includes activities such as:

- Investigating Suspicious Activity: By analyzing log data and device information, we aim to identify and investigate behavior that may violate our policies, terms of service, or other agreements, such as unauthorized account access or misuse of shared features.

- Internal Audits: To ensure compliance with applicable laws, contractual obligations, and our internal policies, we may audit our internal processes and systems.

- Enforcing Terms and Policies: Personal Data may be used to enforce the terms, conditions, and policies that govern the use of the GAIArt Product or Service.

- Preventing Fraud and Harm: We are committed to preventing, identifying, and addressing fraudulent, harmful, unauthorized, or illegal activities. This includes efforts to combat identity theft, unauthorized use of shared devices, or attempts to compromise the security of GAIArt.

3. Children's Privacy

Our Product or Service is primarily designed for adults. We do not provide Product or Service directly to children, nor do we use children's Personal Data for marketing purposes. We define a "child" as anyone under 16 years of age (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly market to children.

4. How We Use Cookies and Similar Technologies

We use cookies, tracking technologies, and other similar technologies to enhance your experience with our Product or Service and to provide you with a more personalized, efficient, and secure browsing experience. Cookies are small text files stored on your device by your web browser.

4.1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They do not cause harm to your device and do not contain viruses. Cookies serve various purposes, such as enabling website functionality, remembering your preferences, and helping us analyze user interaction with our Product or Service.

4.2. Why We Use Cookies and Similar Technologies

We use cookies, tracking technologies, and similar technologies such as pixel tags, web beacons, and clear GIFs for the following purposes:

• Recording Images You Upload and Download: We use cookies and similar technologies to record images you have previously uploaded and downloaded.

4.3. Managing Your Cookie Preferences

You can control how cookies are used on your device. You can clear cookies or similar technologies by:

• Go to the GAIArt homepage - Menu button - Delete.

Please note: If you disable or clear existing cookies or similar technologies, certain features of our Product or Service may not function as intended,and we may not be able to provide an optimal experience.

5. How and When We Share Your Personal Data

At GAIArt, we are committed to protecting your privacy. We do not sell your Personal Data for monetary consideration. We only work with trusted third-party service providers and partners to operate GAIArt, deliver the Product or Service you request, and continually improve your experience.

All third parties are required to comply with applicable privacy laws and implement robust safeguards to protect your Personal Data. Below, we outline the categories of third parties with whom we share your Personal Data and the purposes of such sharing:

5.1. Service Providers and Third-Party Vendors (Our Data Processors)

We rely on trusted and reputable third parties to provide essential services for GAIArt, who act as our "Data Processors". This means they only process Personal Data on our behalf and in accordance with our strict contractual instructions to provide the Product or Service.

These include: 

Ÿ Customer Support: We may also share Personal Data with service providers that assist in customer support to provide a seamless user experience.

5.2. Regulators, Authorities, and Legal Obligations

We may disclose Personal Data to law enforcement agencies, regulators, government agencies, researchers, or other authorized parties if required by law or when we believe it is necessary to comply with applicable laws, rules, or regulations. The legal bases for these disclosures are our Legal Obligations or our Legitimate Interests. Such disclosures may occur under the following circumstances:

Ÿ Compliance with Legal Obligations: We may share Personal Data to comply with legal requirements, such as responding to subpoenas, court orders, or other lawful requests from authorities.

Ÿ Protecting Safety, Rights, or Property: We may disclose Personal Data to protect the safety, rights, or property of GAIArt, its users, or the public. This includes situations where disclosure is necessary to prevent harm, fraud, or unauthorized access to our systems.

Ÿ Fraud, Security, or Technical Issues: Personal Data may be shared to detect, prevent, or address fraud, security threats, or technical issues that could compromise our Product or Service or user data.

Ÿ Law Enforcement Requests: For example, we may receive requests for account information from law enforcement authorities, such as the police or courts. We only disclose such information when we believe that the disclosure is reasonably necessary to comply with a legal request or requirement.

Ÿ Emergency Situations: When we believe it is necessary to prevent imminent and serious bodily harm to a person, we may share information with relevant authorities or emergency responders.

We carefully evaluate all requests to ensure compliance with applicable laws and regulations. We also strive to protect user privacy by limiting the scope of information disclosed to what is strictly necessary for the purpose of the request.

5.3. With Your Consent

We may share your Personal Data with third parties when you have explicitly instructed us or provided your consent to do so.

5.4. Business Transferees

We may disclose Personal Data in the context of actual or prospective business transactions (e.g., investments in GAIArt, financing of GAIArt, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares). For example, we may share certain Personal Data with prospective counterparties and their advisers, solely as permitted by law and/or contract.

We may also disclose your Personal Data to an acquirer, successor, or assignee of GAIArt as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which Personal Data is transferred to one or more third parties as one of our business assets. The legal basis for this is our Legitimate Interests in ensuring continuity of services and compliance with applicable laws.

5.5. Business and Marketing Partners

We may also share your Personal Data with third parties under the following circumstances:

Ÿ Professional Advisors: Personal Data may be disclosed to professional advisors, such as lawyers, auditors, bankers, or insurers, as necessary in the course of the professional services they provide to us, based on our Legitimate Interests.

We make commercially reasonable efforts to ensure that all parties with whom we share Personal Data provide a level of protection consistent with the practices outlined in this Privacy Policy. However, third parties may use Personal Data as described in their own privacy policies.

We prioritize the protection of your Personal Data and strive to minimize data sharing and transmission whenever possible. If you do not agree to the data sharing practices described above, certain features of the GAIArt may not function as intended.  

6. How We Store Your Personal Data

6.1. Data Storage Location and International Transfers

Currently, we do not store your uploaded image information or device information; all such information is stored locally on your device.If future feature adjustments require us to store your Personal Data on our servers or involve international transfers, we will implement appropriate safeguards in compliance with applicable laws and update this Policy accordingly.

6.2. Data Retention

If we need to store your personal data due to future feature adjustments,we are committed to ensuring that your Personal Data is stored securely and in compliance with applicable laws and regulations. Personal Data will only be retained for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law, regulation, or your explicit consent.

Ÿ Our Retention Periods

1.We retain your Personal Data for the purpose of the information collection described in this Privacy Policy or required by the applicable laws, the requirements of laws and regulations, until you take the initiative to delete it. We will cease to retain and delete or anonymize Personal Data once the collection purpose is fulfilled, after termination of the relevant Product or Service, and/or after your confirmed request for erasure.

2. We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. When we no longer need to use your information, we will remove it from our systems and records and / or take steps to anonymise it promptly so that you can no longer be identified from it.

3. In determining appropriate retention periods, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

4. However, we may continue to retain certain Personal Data to the maximum extent permitted by applicable laws.

Ÿ Data Processing After Retention Periods

WhenPersonal Data is no longer needed for the purposes for which it was collected, we will either delete it or anonymize it so that it can no longer be used to identify you. If immediate deletion is not possible (e.g., due to technical constraints such as backup archives), the data will be securely stored and isolated from further processing until deletion is feasible.

Ÿ Legal Retention Requirements

Certain types of data may be retained for longer periods to comply with legal, regulatory, or contractual obligations, including but not limited to:

- Tax and Accounting Records: Retained to comply with applicable tax laws.

- Legal Compliance: Retained as required by local, state, or international laws.

- Evidence Preservation: Retained to comply with statutes of limitation or to resolve disputes.

- Service-Related Communications: Retained as necessary to provide ongoing customer support or respond to inquiries.

7. Your Rights and Choices

We offer you certain choices to control your data, and depending on your location, you may also have specific privacy rights under applicable data protection laws . It is important to note that these rights are not absolute and may be subject to certain exceptions or legal limitations.

To exercise these rights, please contact us directly at [gaiaos@cvte.com].

7.1. Your Data Protection Rights

You have the following rights regarding your Personal Data:

Ÿ Right to Know: We publish the Privacy Policy to inform you of how we handle your Personal Data. We are committed to transparency in the use of your Personal Data.

Ÿ Right of Access: You have the right to access your Personal Data and review the information we have collected about you.

Ÿ Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you may request that we correct it. Once your identity is verified, we will rectify the information accordingly.

Ÿ Right to Erasure (or "Right to be Forgotten"): You may request us to delete your Personal Data under the following circumstances:

- Our processing of your Personal Data violates applicable laws or regulations;

- We collect or use your Personal Data without your prior consent;

- Our processing of your Personal Data violates the agreement with you;

- You stop using our Product or Service;

- We no longer provide you with Product or Service;

- Other circumstances stipulated by the laws and regulations.

Ÿ Right to Restrict Processing: You may request GAIArt to restrict processing of your Personal Data under the following circumstances:

- You contest the accuracy of your Personal Data, for a period enabling us to verify the its accuracy;

- The processing is unlawful and you oppose erasure of your Personal Data but request restriction of use instead;

- We no longer need your Personal Data for the purposes of the processing, but it is required by you to establish, exercise, or defend legal claims;

- You have objected to processing, pending the verification whether our legitimate interests override yours.

This means we can store your Personal Data but cannot process it.

Ÿ Right of Data Portability: To the extent permitted by laws and regulations, you are entitled to obtain your Personal Data in a structured, commonly used, and machine readable format. For instance, if you change the service provider, this right enables you to reliably and safely move, copy or easily transfer your Personal Data between IT systems without affecting its use.

Ÿ Right to Refuse Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing (if any), including user profiling. If such decisions significantly affect your legitimate rights, you can refuse to be subject to automated decisions. We will respond to your request and take appropriate measures when necessary.

Ÿ Right to Withdraw Consent: Where we rely on your consent to process your Personal Data, you may withdraw your consent at any time, and we will stop processing your data by contacting us. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

Ÿ Right of Refusal: To the extent permitted by the applicable laws and regulations, you have right to refuse our processing for these purposes.

Ÿ Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority if you believe we are unlawfully processing your Personal Data. 

8. Security

The security of your Personal Data is important to us. We have taken safeguarding measures in accordance with industry standards to protect the Personal Data you provide and to prevent unauthorized access, public disclosure, use, modification, damage or loss.  

With regard to the security control of data access and use, we have implemented a strict data authorization control mechanism, adopted multiple identity authentication technologies, and continuously monitor the processing of your Personal Data to prevent illegal access and unauthorized use of data. We also monitor the entire lifecycle of Personal Data to protect it from unauthorized access, public disclosure, use, modification, and intentional or accidental damage or loss.

However, please note that, even if we undertake reasonable measures to protect your data, no website, internet transmission, computer system or wireless connection is completely safe. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. In case of Personal Data security incident likely to result in a high risk to the rights and freedoms, we shall communicate the Personal Data breach to you in accordance with the requirements of laws and regulations such as basic situations and possible influence of the security incident, response measures we have taken or will take, suggestions for you regarding self-prevention and risk reduction, remedial measures for you, etc.

The safety and security of your Personal Data also depends on you. We kindly recommend you to access our website only in secure environments and use strong authentication methods. Please follow device security best practices and regularly review privacy settings.

We will inform you in a timely manner via email, mail, telephone, or other appropriate channels, regarding the relevant circumstances of any incident. When it is difficult to notify each Personal Data subject individually, we will issue a notice in a reasonable and effective manner. In the meantime, we will take the initiative to report on the handling of any Personal Data security incident in accordance with regulatory requirements.

9. Other Sites and Services

The Services may contain links to websites, mobile applications and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations do not constitute an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

10. How We Make Changes to This Policy

We may change this Privacy Policy from time to time to comply with applicable laws and if we do, we will post any changes on this page and update the "Last updated" date at the top of this Privacy Policy. If the changes are significant, we may provide a more prominent notice, such as by sending you an email.

You are advised to review this Privacy Policy periodically for any changes. If you continue to use our website after such changes are in effect, the new policy will apply to you. Where required by law, we will obtain your necessary consent.

11. Contact Details

If you have any concerns, questions, or doubts about our Privacy Policy or practices, or if you wish to exercise your rights, you may contact us through the following channels:

Email: Send an email to [gaiaos@cvte.com].

Only you, or someone legally authorized to act on your behalf (i.e., your authorized agent), may make a request related to your Personal Data. We may require an agent to provide verification that they are authorized to act on your behalf when submitting a request related to your Personal Data.

To process your request, we require:

Ÿ Verification Information: You must provide sufficient information for us to reasonably verify your identity. This typically includes two to three pieces of Personal Data that we will match with the data we maintain in our records.

Ÿ Request Details: Your request must include sufficient detail to allow us to properly understand, evaluate, and respond to it.

Any review and processing will normally be completed within thirty (30) days after verifying your user identity. If it takes more time to respond to your request or we are unable to respond to your request if doing so would violate applicable laws, infringe on the rights of others, or if we cannot verify your identity to a reasonable degree of certainty, we will send you a notice and explain the reasons within the maximum timeframe required by law.

We are committed to addressing your concerns and ensuring that your rights are respected. If you have any further questions, please do not hesitate to contact us.