Privacy Policy
EPAIFA GENERAL TRADING L.L.C Last updated: 2026-08-14
This policy explains what LOCXAI collects, why, who it is shared with, and what you can do about it.
The data controller is EPAIFA GENERAL TRADING L.L.C, Office 504, Sheikha Nada Ahmed Ali Al Thani Building, Al Buteen, Deira, Dubai, United Arab Emirates (Trade Licence No. 1381714).
1. What we collect
Account data. Email address, password (stored only as a hash), display name, interface language, and — if you sign in with Google — the identifier Google gives us and the email on that account. We never receive your Google password.
Store data. The information you enter about your store: name, address, district, nearby landmarks and transit, opening hours, menu items and prices.
Uploaded material. Photos and videos of your store, your dishes, and anything else you upload for a video.
Biometric data — only if you use these features. If you create a digital presenter from a real person's likeness, or clone a voice, we process the facial images or voice samples you provide and the models derived from them. This is sensitive personal information. We only process it with explicit, separate consent, recorded per person, and we stop and delete on withdrawal. If you do not use these features, we never collect this.
Usage and technical data. Log records of actions in the app, generation jobs and their outcomes, IP address, browser and device information, and session records so that a session can be revoked.
Payment data. Order amount, currency, status and the payment provider's reference. We do not receive or store your card number, CVV or bank credentials — those go directly to the payment provider.
2. Why we use it, and on what basis
| Purpose | Data | Basis |
|---|---|---|
| Providing the Service — generating your videos | Store data, uploaded material | Performance of our contract with you |
| Digital presenter and voice features | Biometric data | Explicit separate consent |
| Account, login and session security | Account data, technical data | Contract; legitimate interest in security |
| Billing, invoicing and tax records | Account data, payment data | Contract; legal obligation |
| Fraud prevention and abuse handling | Technical data, audit records | Legitimate interest |
| Support | Whatever you send us | Contract |
| Improving templates and quality | Aggregated, non-identifying statistics | Legitimate interest |
We do not sell your data. We do not use your uploaded material to train general-purpose AI models.
3. Who we share it with
AI providers. Generating a video means sending material to third-party AI services — text, images, video, speech synthesis, lip-sync. Which provider handles a request depends on the job and can change.
Before any request leaves for an external provider, personal information that is not needed for the task is stripped: contact names, phone numbers, ID numbers and business-registration numbers never go out. Where a store name appears to contain a personal name, the request is routed to a provider that meets the stricter requirements for that data instead.
Payment provider. Order and amount data, so a payment can be taken and matched back to your order.
Infrastructure. Cloud hosting, database, object storage and email delivery, operated by our cloud provider in Hong Kong.
Authorities. Where we are legally required to.
We do not share your data with anyone else.
4. International transfers
We are established in the United Arab Emirates, our infrastructure runs in Hong Kong, and AI providers may be located in other countries. Your data therefore crosses borders.
How we handle that depends on where the data originated and how sensitive it is:
- Text only (scripts, translations, store descriptions with personal information removed) may be sent to the best-suited provider.
- Images and video of your store, and biometric data, are subject to stricter handling. Where the data originates in mainland China, the transfer mechanisms required by the Personal Information Protection Law are completed before any such transfer, and until they are, the request is routed to a provider that does not require them. Where it originates in Thailand or Vietnam, the equivalent local requirements apply.
If a provider has not met the requirements for a given category of data, that combination is refused rather than downgraded silently.
5. How long we keep it
| Data | Retention |
|---|---|
| Account data | While your account exists, then deleted or anonymised |
| Store data and uploaded material | Until you delete it, or your account is closed |
| Generated videos | Until you delete them, or your account is closed |
| Biometric data and derived models | Until consent is withdrawn or the account is closed — then deleted, including from backups on their normal rotation |
| Billing and tax records | As long as UAE tax law requires, regardless of account deletion |
| Security and audit logs | Limited period, for investigating incidents |
Deleting material in the app removes it from active storage. Backups are overwritten on their normal cycle.
6. Your rights
You can:
- access the data we hold about you,
- correct it,
- delete it, or close your account and have it deleted,
- withdraw consent for the digital presenter and voice features at any time — this is a single action in the app, and it deletes the derived models,
- object to processing based on legitimate interest,
- obtain a copy of the data you provided.
Contact support@locxai.com. We respond within 30 days. If you are not satisfied, you may complain to the data protection authority in your country.
Note that withdrawing consent does not undo videos already generated and downloaded — we cannot recall a file you already have.
7. Security
Passwords are hashed, never stored in readable form. Sessions can be revoked individually. Traffic is encrypted in transit. Access to production data is limited to staff who need it, and administrative actions on merchant data are logged.
No system is perfectly secure. If a breach affects your personal data, we notify you and the relevant authority as required by law.
8. Cookies
We use cookies and equivalent local storage for signing you in, keeping you signed in, and remembering your language. We do not use advertising cookies or third-party tracking pixels.
9. Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children. If you upload material featuring a minor, you are responsible for having the consent of their guardian.
10. Changes
We may update this policy. Material changes are announced in the app before taking effect, and the date at the top always reflects the current version.
11. Contact
EPAIFA GENERAL TRADING L.L.C Office 504, Sheikha Nada Ahmed Ali Al Thani Building, Al Buteen, Deira, Dubai, United Arab Emirates · P.O. Box 41264 Email: support@locxai.com
隐私政策
EPAIFA GENERAL TRADING L.L.C（易派发通用贸易有限责任公司） 最后更新：2026-08-14
本政策说明 LOCXAI 收集哪些信息、为什么收集、与谁共享，以及你可以做什么。
个人信息处理者为 EPAIFA GENERAL TRADING L.L.C，地址：Office 504, Sheikha Nada Ahmed Ali Al Thani Building, Al Buteen, Deira, Dubai, United Arab Emirates（营业执照号 1381714）。
1. 我们收集什么
账号信息。 邮箱、密码（仅以哈希形式存储）、显示名称、界面语言；若使用 Google 登录， 还包括 Google 提供的标识符和该账号的邮箱。我们不会拿到你的 Google 密码。
门店信息。 你填写的门店名称、地址、所在商圈、地标与交通参照、营业时间、菜品与价格。
上传的素材。 门店、菜品的照片和视频，以及你为制作视频上传的其他内容。
生物识别信息——仅在你使用相关功能时。 如果你用真人肖像创建数字人，或克隆音色，我们 会处理你提供的人脸图像或声音样本及其派生模型。这属于敏感个人信息。 我们仅在取得 逐人记录的单独明示同意后处理，同意撤回即停止使用并删除。不使用这些功能，我们就不会 收集。
使用与技术信息。 应用内操作日志、生成任务及其结果、IP 地址、浏览器与设备信息，以及 用于支持会话吊销的会话记录。
支付信息。 订单金额、币种、状态和支付服务商的单号。我们不接收也不存储你的卡号、 CVV 或银行凭证，这些直接由支付服务商处理。
2. 用途与依据
| 用途 | 涉及信息 | 依据 |
|---|---|---|
| 提供服务，生成视频 | 门店信息、上传素材 | 履行与你的合同所必需 |
| 数字人与音色功能 | 生物识别信息 | 单独明示同意 |
| 账号、登录与会话安全 | 账号信息、技术信息 | 合同履行；安全方面的正当利益 |
| 计费、开票与税务留档 | 账号信息、支付信息 | 合同履行；法定义务 |
| 反欺诈与滥用处理 | 技术信息、审计记录 | 正当利益 |
| 客户支持 | 你发送给我们的内容 | 合同履行 |
| 改进模板与质量 | 聚合后的、不可识别到个人的统计 | 正当利益 |
我们不出售你的信息。我们不使用你上传的素材训练通用 AI 模型。
3. 与谁共享
AI 服务商。 生成视频意味着将素材发送给第三方 AI 服务——文本、图像、视频、语音合成、 口型驱动。具体由哪家处理取决于任务类型，且可能变化。
在任何请求发往外部服务商之前，与任务无关的个人信息会被剥离：联系人姓名、手机号、身份证号、 营业执照号一律不出网。若门店名称疑似含有自然人姓名，该请求会改路由至满足更严格要求的 服务商。
支付服务商。 订单与金额信息，用于收款并与你的订单匹配。
基础设施。 云主机、数据库、对象存储与邮件发送，由我们的云服务商在中国香港运行。
主管机关。 在法律要求时。
除此之外，我们不与任何人共享。
4. 跨境传输
我们的主体在阿联酋，基础设施在中国香港，AI 服务商可能位于其他国家。因此你的信息会跨境。
处理方式取决于数据来源地与敏感程度：
- 纯文本（脚本、翻译、已剥离个人信息的门店描述）可发送给最合适的服务商。
- 门店的图像与视频，以及生物识别信息，适用更严格的处理规则。数据来源于中国内地的， 在任何此类传输发生前，会先完成《个人信息保护法》要求的出境机制；在完成之前，请求改由 无需该机制的服务商处理。来源于泰国或越南的，适用当地的对应要求。
若某服务商尚未满足某类数据的要求，该组合会被直接拒绝，而不是静默降级处理。
5. 保存多久
| 信息 | 保存期限 |
|---|---|
| 账号信息 | 账号存续期间，之后删除或匿名化 |
| 门店信息与上传素材 | 直至你删除，或账号注销 |
| 生成的视频 | 直至你删除，或账号注销 |
| 生物识别信息及派生模型 | 直至同意被撤回或账号注销——届时删除，备份按正常轮换周期覆盖 |
| 计费与税务记录 | 按阿联酋税法要求的期限保存，不因账号注销而缩短 |
| 安全与审计日志 | 有限期限，用于事件调查 |
在应用内删除素材会将其从活跃存储中移除，备份按正常周期覆盖。
6. 你的权利
你可以：
- 查阅我们持有的你的信息，
- 更正，
- 删除，或注销账号并要求删除，
- 随时撤回数字人与音色功能的同意——应用内一步操作，撤回即删除派生模型，
- 对基于正当利益的处理提出反对，
- 获取你所提供信息的副本。
请联系 support@locxai.com，我们在 30 天内答复。若你不满意，可向你所在国家的个人信息 保护主管机关投诉。
请注意：撤回同意不能撤销已经生成并被下载的视频——我们无法收回你已持有的文件。
7. 安全
密码经哈希存储，不以可读形式保存。会话可单独吊销。传输过程加密。生产数据的访问限于 确有需要的人员，对商家数据的管理操作留有日志。
没有系统是绝对安全的。若发生影响你个人信息的安全事件，我们会依法通知你和相关主管机关。
8. Cookie
我们使用 Cookie 及等效的本地存储，用于登录、保持登录状态和记住你的语言偏好。我们不使用 广告类 Cookie，也不嵌入第三方追踪像素。
9. 未成年人
本服务面向企业，不面向未满 18 周岁者。我们不会有意收集儿童信息。若你上传含未成年人的 素材，你需自行取得其监护人的同意。
10. 变更
我们可能更新本政策。重大变更会在生效前于应用内公告，页首日期始终反映当前版本。
11. 联系方式
EPAIFA GENERAL TRADING L.L.C Office 504, Sheikha Nada Ahmed Ali Al Thani Building, Al Buteen, Deira, Dubai, United Arab Emirates · P.O. Box 41264 邮箱：support@locxai.com