Back to home

Privacy Policy

Last updated: 15 November 2026

1. Who we are

Koh Studio ("we", "us", "our") is an AI-powered jewellery photography tool operated by Pythcap Limited, a company registered in England and Wales (company number 14083496). Pythcap Limited is the data controller for the personal data described in this policy. Our website is kohstudio.app. You can contact us at hello@kohstudio.app.

2. What data we collect

We collect the following personal data:

  • Account details — your email address and password, or your name, email address and profile picture from Google if you choose to sign in with Google
  • Payment information — processed securely by Stripe on our behalf. We do not store your card details directly.
  • Images you upload — jewellery photos, and any photo of a person you choose to upload as a model reference. Only upload a photo of a person if you have their permission; we keep a copy as a record of that upload.
  • Images and videos you create — the results you generate, edit or resize, together with the tags and descriptions added to organise them in your library
  • Brand details — collections, campaigns, colours, style notes and presets you save
  • Connected shop details — if you connect an Etsy shop or Shopify store: the shop's name and address, the listings or products you send images to, and the access the platform grants us (stored encrypted). See section 6.
  • Feedback — messages, ratings and screenshots you send us through the app
  • Referrals — whether you joined through a referral link, and who you referred
  • Usage data — which modules you use, how many images and videos you generate, and when
  • Technical data — IP address, browser type, device information, and cookies

3. Why we collect it

We use your data to:

  • Provide the Koh Studio service: generate, edit, store and organise your images and videos, and send them to your shop when you ask us to (performance of our contract with you)
  • Process your subscription payments (performance of our contract with you)
  • Monitor usage to enforce fair use and subscription limits, prevent abuse and automated sign-ups, and keep the service secure (our legitimate interests)
  • Understand how the site is used and improve the service (our legitimate interests)
  • Send you product updates and launch notifications if you asked for them — you can unsubscribe at any time (your consent)
  • Comply with legal obligations, such as keeping payment records

4. Who we share your data with

We share data with the following third parties solely to operate our service:

  • Stripe — payment processing (stripe.com/privacy)
  • Supabase — our database, sign-in and file storage, hosted in the European Union (supabase.com/privacy)
  • Google — AI image and video generation via the Gemini API, sign-in with Google, and Google Analytics (policies.google.com/privacy)
  • OpenAI — AI image generation and text, used as a backup provider (openai.com/policies/privacy-policy)
  • Cloudflare — website hosting, protection against automated sign-ups, and AI tagging of your library images (cloudflare.com/privacypolicy)
  • Etsy and Shopify — only if you connect a shop, and only the images you choose to send (see section 6)
  • Mailchimp — email list management (mailchimp.com/privacy)
  • Lovable — application development and hosting infrastructure

Some of these providers process data outside the United Kingdom. Where they do, the transfer is covered by the safeguards those providers offer under UK data protection law, such as adequacy regulations or standard contractual clauses.

We do not sell your personal data to any third party.

5. Your uploaded images

Images you upload are sent to our AI providers only to produce the output you asked for, and to tag it for your library. We do not use your uploaded jewellery images to train AI models. Your uploads and results are kept in your private library so you can find, edit and download them, and may be deleted upon account closure.

6. Connected shops (Etsy and Shopify)

Connecting a shop is optional. If you connect an Etsy shop or a Shopify store, you approve the connection on that platform's own page and can remove it at any time in your Account.

  • What we access: your shop's name and your list of listings or products (titles and photos), so you can choose where an image goes. We add the images you send, and remove them if you ask us to.
  • What we do not access: your orders, your customers or their details, or your payouts. We do not request permission for these.
  • What we store: the shop's name and address, the access tokens the platform gives us (encrypted), and a record of which image was sent to which listing or product.
  • Disconnecting: when you disconnect a shop, or uninstall Koh Studio from your Shopify store, we delete its access tokens. Images already sent stay on your listings until you remove them.

Images you send become part of your listing and are then handled by Etsy or Shopify under their own privacy policies.

The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc. Shopify is a trademark of Shopify Inc. Koh Studio is not created by or endorsed by Shopify Inc.

7. Cookies

We use essential cookies to keep you logged in and remember your preferences. With your consent, we also use Google Analytics cookies to understand how the site is used; you can accept or reject these on our cookie banner and change your choice at any time. Stripe and Mailchimp may set their own cookies. You can also control cookies through your browser settings. See our Cookie Policy for details.

8. How long we keep your data

  • Account data: retained while your account is active and for 90 days after closure
  • Waitlist emails: retained until you unsubscribe or request deletion
  • Generated images: retained for 12 months or until account closure
  • Shop connections: access tokens are deleted when you disconnect the shop; the record of images you sent is kept until account closure
  • Payment records: retained for 7 years as required by UK law

9. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict our processing of your data
  • Data portability
  • Withdraw consent where we rely on it

To exercise any of these rights, contact us at hello@kohstudio.app. We will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

10. Data security

We take reasonable technical and organisational measures to protect your data. All data is transmitted over encrypted HTTPS connections. Your images are kept in private storage, and shop access tokens are encrypted. Payment data is handled entirely by Stripe and never touches our servers.

11. Changes to this policy

We may update this policy from time to time. We will notify registered users of significant changes by email. Continued use of Koh Studio after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions, contact Pythcap Limited at hello@kohstudio.app.