Privacy Policy

Last Updated: July 13, 2026

Welcome to Qilune, an AI-powered platform available at qilune.art that allows users to generate, edit, and work with 3D models, textures, animations, images, and other digital content.

Qilune is operated by Vexiona Seven Two Ltd, company number 16982036, with its registered office at:

Office 9205
321-323 High Road
Chadwell Heath
Essex
RM6 6AX
United Kingdom

In this Privacy Policy, “Qilune”, “we”, “us”, and “our” refer to Vexiona Seven Two Ltd.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you access or use qilune.art and its related features and services, collectively referred to as the “Service”.

For the purposes of UK and EU data protection law, Vexiona Seven Two Ltd is the data controller responsible for the personal information described in this Privacy Policy.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Definitions

1.1 Personal Information

“Personal Information” or “Personal Data” means information relating to an identified or identifiable individual. This may include a name, email address, account details, online identifier, IP address, device information, or other information that can identify a person directly or indirectly.

1.2 Customer Input

“Customer Input” means prompts, text, images, files, instructions, data, or other materials that you upload, submit, or provide through the Service.

1.3 Customer Output

“Customer Output” means 3D models, textures, animations, images, files, and other content generated, edited, or otherwise produced through the Service.

1.4 Cookies

“Cookies” are small files stored on your device that allow websites to remember information about your browser, device, preferences, or activity.

1.5 Usage Data

“Usage Data” means technical and activity information collected when you use the Service, such as your IP address, device type, browser, pages visited, actions taken, session information, and error reports.

1.6 Service Providers

“Service Providers” are third-party companies or individuals that process information for Qilune or provide services needed to operate the platform. This includes hosting, security, analytics, payment, communication, technical, and AI service providers.

2. Information We Collect

We collect information that you provide directly, information generated through your use of the Service, and certain information collected automatically from your device.

2.1 Account Information

When you create or manage an account, we collect:

2.1.1 your email address;

2.1.2 your username or display name;

2.1.3 account authentication and verification information;

2.1.4 account preferences and settings;

2.1.5 profile information you choose to provide; and

2.1.6 information connected with your token balance, account status, usage thresholds, and access to Service features.

We use this information to create and manage your account, authenticate access, maintain account security, provide the Service, and communicate important account information.

2.2 Token Purchase and Transaction Information

When you purchase tokens or complete another transaction through Qilune, we may collect:

2.2.1 transaction identifiers;

2.2.2 the date, time, and value of the transaction;

2.2.3 the number of tokens purchased or added to your account;

2.2.4 payment status and confirmation;

2.2.5 billing information where required; and

2.2.6 information needed for accounting, fraud prevention, refunds, disputes, and legal compliance.

Payment details may be collected and processed directly by third-party payment providers. The information available to Qilune depends on the payment method and provider used.

2.3 Customer Input and Customer Output

We collect and process Customer Input that you provide through the Service, including prompts, images, files, instructions, and other materials.

We also process Customer Output created through the Service.

Customer Input and Customer Output are processed to:

2.3.1 perform the generation, editing, modification, conversion, or other action requested by you;

2.3.2 display and deliver the resulting content through your account;

2.3.3 operate and maintain the relevant Service features;

2.3.4 investigate and resolve technical problems;

2.3.5 protect the Service against fraud, abuse, unlawful activity, and security threats; and

2.3.6 comply with applicable law.

Qilune does not independently use Customer Input to train its own AI models.

Some Service features rely on third-party AI or technology providers. Customer Input and Customer Output may be transmitted to and processed by these providers where necessary to perform the action requested by you.

You should not include sensitive personal information in Customer Input unless it is necessary, lawful, and you have the right to provide it.

Where Customer Input includes personal information relating to another person, you are responsible for ensuring that you have the right to provide that information to Qilune.

2.4 Communications

When you contact us for support, submit a complaint, report a problem, respond to a survey, provide feedback, or otherwise communicate with us, we may collect:

2.4.1 your name and contact information;

2.4.2 the contents of your communication;

2.4.3 files, screenshots, images, or other materials you provide;

2.4.4 information about the relevant account, transaction, or Service activity; and

2.4.5 records of our response and any action taken.

Please do not send financial, identification, health, or other sensitive information through ordinary support channels unless we specifically request it and it is necessary to resolve your request.

2.5 Information About Other People

If you provide information about another person through the Service, you confirm that you have the legal right to provide that information and that its use is consistent with this Privacy Policy.

2.6 Information Collected Automatically

When you use the Service, we may automatically collect:

2.6.1 your IP address;

2.6.2 browser type and version;

2.6.3 device type, operating system, and device identifiers;

2.6.4 language, region, and approximate location based on your IP address;

2.6.5 session identifiers and login information;

2.6.6 pages, features, buttons, and tools you interact with;

2.6.7 the date and time of your activity;

2.6.8 token usage and feature activity;

2.6.9 referral URLs and the pages from which you accessed Qilune;

2.6.10 performance, diagnostic, and crash information; and

2.6.11 security and fraud-prevention signals.

We use this information to operate, secure, maintain, analyse, and improve the Service.

2.7 Cookies and Similar Technologies

Qilune and its Service Providers may use cookies, local storage, tracking pixels, JavaScript, and similar technologies.

These technologies may be used to:

2.7.1 keep you signed in;

2.7.2 remember your settings and preferences;

2.7.3 maintain account and platform security;

2.7.4 understand how the Service is used;

2.7.5 identify and resolve technical problems;

2.7.6 measure Service performance; and

2.7.7 support marketing where permitted and where any required consent has been obtained.

More information about the cookies used by Qilune may be provided in a separate Cookie Policy or cookie settings tool.

3. How We Use Personal Information

We use personal information only where we have a valid reason and legal basis to do so.

3.1 Providing the Service

We use personal information to:

3.1.1 create, authenticate, and manage accounts;

3.1.2 maintain token balances and record token usage;

3.1.3 process transactions and add tokens to accounts;

3.1.4 provide generation, editing, and other Service features;

3.1.5 process and deliver Customer Output;

3.1.6 provide access to features connected with usage or spending thresholds;

3.1.7 save account settings and preferences;

3.1.8 provide support and respond to requests; and

3.1.9 send important account, security, transaction, and Service notices.

Where UK or EU data protection law applies, this processing is generally necessary to enter into or perform our contract with you.

3.2 Security, Fraud Prevention, and Enforcement

We use information to:

3.2.1 protect accounts and the Service;

3.2.2 detect and prevent fraud, abuse, unauthorised access, and unlawful activity;

3.2.3 investigate suspected breaches of our Terms;

3.2.4 enforce usage restrictions;

3.2.5 protect Qilune, its users, and third parties; and

3.2.6 maintain the technical security and integrity of the Service.

We generally rely on our legitimate interests in protecting and operating the Service, complying with our legal obligations, or establishing and defending legal claims.

3.3 Service Maintenance and Improvement

We may use account, technical, Usage Data, support, and performance information to:

3.3.1 maintain and improve the Service;

3.3.2 identify errors and technical problems;

3.3.3 understand how features are used;

3.3.4 improve usability and performance;

3.3.5 plan and develop new features; and

3.3.6 produce aggregated statistics about the Service.

Where UK or EU data protection law applies, we generally rely on our legitimate interests in operating, maintaining, and improving the Service.

Where possible, we use aggregated or anonymised information for analytics and improvement.

3.4 Communications

We may use your contact information to send:

3.4.1 verification and authentication messages;

3.4.2 transaction and token balance confirmations;

3.4.3 security warnings;

3.4.4 changes to the Service, Terms, or Privacy Policy;

3.4.5 responses to support or legal requests; and

3.4.6 other important Service-related communications.

These messages are necessary for the operation of your account and are not marketing communications.

3.5 Marketing

Where permitted by law, we may send you information about Qilune features, updates, offers, or related services.

Where consent is required, we will send marketing communications only after receiving your consent.

You may unsubscribe from marketing emails at any time by using the unsubscribe option included in the message or by contacting us.

Unsubscribing from marketing does not prevent us from sending necessary account, transaction, legal, security, or Service-related messages.

3.6 Legal Compliance

We may process information where necessary to:

3.6.1 comply with laws, regulations, court orders, and legally binding requests;

3.6.2 maintain records required by law;

3.6.3 respond to lawful requests from government or law-enforcement authorities;

3.6.4 protect our legal rights;

3.6.5 investigate or defend legal claims; and

3.6.6 prevent or investigate unlawful activity.

4. How We Share Personal Information

Qilune does not sell personal information to advertisers.

We share personal information only where necessary for the purposes described in this Privacy Policy, where you direct us to do so, or where required by law.

4.1 AI and Technology Providers

Qilune uses third-party AI and technology providers to deliver certain generation, editing, processing, conversion, hosting, and technical features.

Customer Input, Customer Output, and related technical information may be transmitted to these providers where necessary to perform the feature requested by you.

These providers may process information under their agreements with Qilune and their applicable privacy and data-handling practices.

4.2 Hosting and Infrastructure Providers

We may share information with providers that supply cloud hosting, storage, databases, content delivery, backups, network infrastructure, and other systems required to operate the Service.

4.3 Payment Providers

We may share transaction and account information with payment processors, banks, fraud-prevention providers, and other parties needed to process token purchases, confirm transactions, prevent fraud, handle disputes, or issue refunds.

4.4 Security and Technical Providers

We may share device, session, Usage Data, crash, security, and account information with providers that help us:

4.4.1 protect the Service;

4.4.2 detect fraud and abuse;

4.4.3 monitor availability and performance;

4.4.4 identify technical problems; and

4.4.5 provide customer support.

4.5 Analytics Providers

We may use analytics providers to understand how users interact with Qilune and to measure performance.

Where required by law, non-essential analytics technologies will be used only after obtaining the necessary consent.

4.6 Professional Advisers

We may disclose information to lawyers, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary to operate the business, comply with legal obligations, or protect our rights.

4.7 Legal Authorities

We may disclose information to courts, regulators, law-enforcement agencies, government authorities, or other authorised parties where:

4.7.1 disclosure is required by law;

4.7.2 we are responding to a valid legal request;

4.7.3 disclosure is necessary to protect a person from serious harm;

4.7.4 disclosure is needed to investigate fraud, abuse, or unlawful activity; or

4.7.5 disclosure is necessary to establish, exercise, or defend legal rights.

4.8 Business Transfers

If Qilune or Vexiona Seven Two Ltd is involved in a merger, acquisition, restructuring, financing, sale of assets, insolvency process, or similar transaction, personal information may be disclosed to professional advisers, potential purchasers, investors, or the new owner.

Any recipient will be required to handle personal information in accordance with applicable data protection law.

4.9 With Your Permission

We may share information for another purpose where you ask us to do so or give us valid consent.

4.10 Aggregated and Anonymised Information

We may create information that has been aggregated or anonymised so that it no longer identifies an individual.

We may use and share this information for analytics, research, security, Service development, performance reporting, and other lawful business purposes.

4.11 Publicly Shared Information

Where the Service allows you to publish or share information publicly, the information you choose to publish may be visible to other users or members of the public.

You should not publish personal information that you do not want others to access, copy, save, or share.

5. Security

Qilune uses reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration, disclosure, and destruction.

These measures may include:

5.1 access controls;

5.2 authentication and account security measures;

5.3 encryption where appropriate;

5.4 system monitoring and logging;

5.5 backup and recovery procedures;

5.6 internal restrictions on access to personal information;

5.7 confidentiality requirements; and

5.8 security requirements for relevant Service Providers.

No website, internet transmission, or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping your account credentials secure and for notifying us promptly if you believe your account has been accessed without permission.

If you believe you have discovered a security vulnerability, please contact workshop@qilune.art.

6. Do-Not-Track Signals and Cookie Controls

Some browsers offer a “Do Not Track” setting. There is no single accepted technical standard for how websites must respond to these signals, and Qilune does not currently respond to browser-based Do Not Track signals.

You can manage cookies through the cookie settings provided through the Service, where available, and through your browser settings.

Blocking certain cookies may affect the operation of some Service features.

7. Storage and International Transfers

7.1 Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period depends on:

7.1.1 the type of information;

7.1.2 why it was collected;

7.1.3 how long your account remains active;

7.1.4 whether the information is needed to provide the Service;

7.1.5 security, fraud prevention, and dispute requirements;

7.1.6 legal, tax, accounting, and regulatory obligations; and

7.1.7 applicable limitation periods for legal claims.

When personal information is no longer needed, we will delete it, anonymise it, or securely restrict further processing, unless we are required or legally permitted to retain it.

Customer Input and Customer Output may be subject to separate technical storage limits or retention periods described through the Service or in the Terms.

You are responsible for downloading and backing up Customer Output that you wish to retain permanently.

7.2 Account Closure

Closing your account does not always result in the immediate deletion of every record.

We may retain limited information after account closure where necessary to:

7.2.1 comply with law;

7.2.2 keep financial and transaction records;

7.2.3 prevent fraud and abuse;

7.2.4 resolve disputes;

7.2.5 enforce agreements; or

7.2.6 establish, exercise, or defend legal claims.

7.3 International Transfers

Qilune and its Service Providers may process information in countries outside the United Kingdom or European Economic Area.

Where personal information is transferred internationally, we use measures required by applicable law. Depending on the destination and circumstances, these measures may include:

7.3.1 transferring information to a country recognised as providing an adequate level of protection;

7.3.2 approved standard contractual clauses;

7.3.3 the United Kingdom International Data Transfer Agreement or an approved UK addendum;

7.3.4 contractual and technical security measures; or

7.3.5 another lawful transfer mechanism.

You may contact us for more information about the safeguards used for applicable international transfers.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights.

8.1 Access

You may ask whether we process your personal information and request a copy of the personal information we hold about you.

8.2 Correction

You may ask us to correct personal information that is inaccurate or incomplete.

8.3 Deletion

You may ask us to delete your personal information where there is no valid legal reason for us to continue processing it.

The right to deletion is not absolute, and we may retain information where required or permitted by law.

8.4 Restriction

You may ask us to temporarily restrict the processing of your personal information in certain circumstances.

8.5 Objection

You may object to processing based on our legitimate interests.

You may object to direct marketing at any time.

8.6 Data Portability

Where applicable, you may request personal information that you provided to us in a structured, commonly used, machine-readable format or ask us to transfer it to another data controller.

8.7 Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing carried out lawfully before consent was withdrawn.

8.8 Automated Decisions

Where applicable, you may ask not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

Qilune’s generation of Customer Output in response to your instructions is not intended to make legal or similarly significant decisions about you.

8.9 Complaints

You may complain to the data protection authority responsible for your location.

If you are in the United Kingdom, you may complain to the Information Commissioner’s Office.

If you are in the European Economic Area, you may complain to the supervisory authority in the country where you live, work, or believe a data protection violation occurred.

We would appreciate the opportunity to address your concern directly before you contact a supervisory authority.

8.10 Exercising Your Rights

To exercise a privacy right, contact us at workshop@qilune.art.

Please provide enough information for us to understand and respond to your request.

We may ask for reasonable proof of identity before providing personal information or acting on a request. This helps protect your information from unauthorised access.

Privacy rights are subject to legal limits and exceptions. We may refuse or limit a request where permitted by law and will explain our decision where required.

9. Additional Information for Users in the United Kingdom and European Economic Area

9.1 Data Controller

The data controller is:

Vexiona Seven Two Ltd
Company number 16982036
Office 9205
321-323 High Road
Chadwell Heath
Essex
RM6 6AX
United Kingdom

Email: workshop@qilune.art

9.2 Lawful Bases

Where UK GDPR or EU GDPR applies, Qilune relies on one or more of the following lawful bases:

9.2.1 Contract

Processing is necessary to create and manage your account, maintain your token balance, provide requested Service features, process transactions, and deliver Customer Output.

9.2.2 Legitimate Interests

Processing is necessary for Qilune’s legitimate interests, including securing and operating the Service, preventing fraud, improving performance, providing support, understanding platform use, and protecting legal rights.

We rely on legitimate interests only where those interests are not overridden by your rights and freedoms.

9.2.3 Legal Obligation

Processing is necessary to comply with applicable legal, regulatory, accounting, tax, law-enforcement, or court requirements.

9.2.4 Consent

We rely on consent where required, including for certain marketing communications, non-essential cookies, and similar technologies.

You may withdraw consent at any time.

9.2.5 Legal Claims and Protection

Where permitted by law, we may process information where necessary to establish, exercise, or defend legal claims or protect the vital interests of an individual.

9.3 International Transfers

Where personal information belonging to users in the United Kingdom or European Economic Area is transferred outside the relevant region, Qilune will use a lawful transfer mechanism and appropriate safeguards as described in Section 7.3.

9.4 Supervisory Authorities

UK users may raise a complaint with the Information Commissioner’s Office.

European Economic Area users may raise a complaint with their local data protection supervisory authority.

10. Changes to This Privacy Policy

Qilune may update this Privacy Policy from time to time to reflect changes to the Service, our data practices, applicable law, or Service Providers.

When we update the Policy, we will change the “Last Updated” date at the top of the document.

Where a change significantly affects how we process personal information, we will provide reasonable notice through the Service, by email, or by another appropriate method where required by law.

We encourage you to review this Privacy Policy periodically.

11. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or Qilune’s handling of personal information, contact:

Vexiona Seven Two Ltd
Company number 16982036
Office 9205
321-323 High Road
Chadwell Heath
Essex
RM6 6AX
United Kingdom

Privacy and legal enquiries: workshop@qilune.art

General support: guidance@qilune.art