Effective · Governed by Hong Kong law

Privacy Policy

How Farvis collects, uses, shares, protects and retains personal data across its AI services.

Version
1.0
Effective
28 July 2026
Last updated
28 July 2026
This agreement is effective from the date shown above.The English and Simplified Chinese versions of this document have equal legal effect.

1. Who is responsible for your data

Starlight Internet Technology Co., Limited is the data user or controller for personal data described in this policy, except where Farvis processes enterprise customer data solely on that customer’s documented instructions.

Registered address: RM03, 24/F, HO KING COMM CTR, 2-16 FAYUEN ST, MONG KOK, HONG KONG. Privacy contact: starlightinternet@yeah.net.

2. Data we collect

  • Account, profile and contact information.
  • Authentication, device, log, usage and security information.
  • Orders, payments and transaction records, excluding full payment-card credentials.
  • Support communications, legal acceptance and person-authorisation evidence.
  • Content you upload or generate, including scripts, images, video, audio, facial images, voices and related metadata.
  • Moderation, fraud-prevention and service-reliability signals.

3. Why we use data

We process data to provide and secure the service; authenticate users; generate requested content; administer payments; prevent fraud and abuse; moderate content; respond to support and privacy requests; maintain records; comply with law; and improve service reliability.

Depending on applicable law, processing is based on contract, legitimate interests, consent or legal obligation. Consent may be withdrawn for future processing without affecting prior lawful processing.

4. AI processing and model training

Customer Content is sent only to providers needed for the feature you request. Farvis does not use Customer Content to train or improve generative models unless a separate, explicit opt-in is offered and accepted.

5. Sharing and service providers

We share data with contracted providers for hosting, storage, AI generation, digital-human and voice processing, payments, messaging, security and support. Current categories are listed in the Subprocessor List.

We may also disclose data to professional advisers, transaction counterparties or authorities where required by law or necessary to protect rights and safety. Farvis does not sell personal data or share it for cross-context behavioural advertising at launch.

6. Cross-border processing

Farvis intends to operate its primary overseas production environment in Japan. Requested functions may require onward transfers to providers in other locations. We use contractual restrictions, access controls, transfer assessments and other safeguards appropriate to the data and applicable law.

7. Retention

  • Authentication and security logs: generally up to 180 days.
  • Failed or temporary generation artefacts: generally up to 30 days.
  • Active Customer Content: until deletion, account closure or contract expiry.
  • Deleted content in recoverable backups: generally up to 90 additional days.
  • Payment, tax and accounting records: generally up to 7 years.
  • Legal acceptance, authorisation, fraud, moderation and dispute evidence: for the applicable limitation period and any active claim or legal hold.

8. Security

We use role-limited access, encryption in transit, credential controls, private object storage, logging, backups and incident procedures appropriate to the risk. No system is completely secure. Report suspected incidents to the privacy contact.

9. Your choices and rights

Subject to applicable law, you may request access, correction, export or deletion of personal data, object to certain processing or withdraw consent. We verify identity and may limit a request where lawful, including to protect another person or preserve required records.

You may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong, or another competent authority where applicable.

10. Children

Farvis is not directed to children and may not be used by anyone who lacks legal capacity to agree to the Terms. We do not knowingly solicit children’s biometric, voice or likeness data.

11. Changes and contact

We record policy versions and effective dates, provide reasonable notice of material changes and request renewed acceptance where required.

Starlight Internet Technology Co., Limited · RM03, 24/F, HO KING COMM CTR, 2-16 FAYUEN ST, MONG KOK, HONG KONG · starlightinternet@yeah.net