Privacy Policy
Understand what happens to your photos and order details.
Sharing and campaign measurement
With analytics consent, we also record share and support-contact actions, their times and channels, example style and state, content-area visibility and visible duration, and the payment status displayed by our service (not payment credentials). We retain campaign labels utm_source, utm_medium, utm_campaign, utm_content and utm_id for the current tab after consent, excluding search terms, advertising click IDs and full URLs. Do not place personal information in campaign labels. We never collect your share caption or typed email through these events. These first-party records follow the 30-day analytics retention policy. Visibility does not prove reading, and opening a social platform or a browser share result does not confirm publication. Payment status views are not payment-webhook or revenue records.
Optional visitor analytics
If you allow analytics in Privacy settings, we record your IP address, approximate country/region/city supplied by Cloudflare, browser and operating system family, browser languages, device size category, referring hostname, page views, clicks on controls, scrolling, photo preparation, generation actions and order submission events. We do not record typed field contents, passwords or payment details. Analytics are stored on our AWS service and linked to generation tasks using a random session identifier; choosing Accept all additionally allows enabled Meta, TikTok and Google tags to receive product-view, checkout-start and generation events, and process IP, device and cookie identifiers for advertising measurement. We do not send customer photos, names, addresses or payment credentials to these tags. Tags do not load on payment pages. Earlier consent to first-party analytics alone does not enable advertising tags. Declining or withdrawing analytics does not prevent generation or ordering. Change your choice using Privacy settings at the bottom of any page. When you are signed in and allow analytics, subsequent visits are linked to your registered account so our team can see your last visit and related browser information. Guest visits are not retroactively attached to an account based on email or IP.
Generation records and retention
When you choose Generate, we privately retain the prepared reference photos, generated results when available, task status and timing for customer support and quality review. Only authenticated administrators can access these records. Analytics details and generation media expire after 30 days and are cleaned up hourly. Encrypted disaster-recovery backups rotate after 30 successful daily backups, so deleted records may remain there for approximately another 30 days; they are not used for routine analysis. Selecting a photo alone does not upload it. Page visibility and departure signals are best-effort and cannot prove when a browser was closed. Order records and order photos follow the separate fulfillment retention described below.
Photos and generation
Photo preparation and subject suggestions run in your browser. Choosing Generate sends your prepared reference photos through our service to Meshy for AI processing. Submitting an order request uploads your reference photos to WowFigure for review. Avoid uploading information that is not needed for your figure.
Order and service information
We collect your email before 3D generation to create a customer contact record and reuse it at checkout. Contact details, shipping addresses, photos and notes are used for generation, order communication and fulfillment. Shipping details are saved with the order and update the associated customer record where session ownership checks permit. Providing an email for the service is not consent to promotional email. Payment providers receive information needed to process payment; card credentials are entered on their hosted pages. AWS hosts the service and Cloudflare provides delivery and security. Postal-code lookup sends your country and postal code to Zippopotam.us, not your name or street address. These providers and Meshy may process data outside your country.
Preferences, cookies and storage
We use language and session cookies and browser storage for preferences, generation access and retry protection. Guests may generate 2D previews; continuing to 3D requires an email, not a password. A necessary signed HttpOnly contact cookie remembers your email for up to 30 days; it does not grant access to an existing account or order history. Generation access uses a separate session. Existing password-based account sessions, where used, remain separate. Order photos are private and available to the order team. We keep order and customer records as needed for fulfillment, support and applicable obligations; contact us about access or deletion. Clearing cookies or changing browsers may require entering your email again.
Your questions and requests
Contact [email protected] to ask about your information, request access, correction or deletion, or raise a privacy concern. Include enough information to identify your request, but do not email passwords or payment card details. Additional privacy rights may apply depending on your location.
Who is responsible for your information
WowFigure is operated by MKUP CO., LIMITED, registered in Hong Kong. Registered address: Unit B53, 2/F, Kwai Shing Industrial Building Phase 1, 36-40 Tai Lin Pai Road, Kwai Chung, N.T., Hong Kong Customer service email: [email protected] Company telephone: +86 153 7598 3736