Privacy

The workspace this notice covers

AIKO Labs is the studio platform at aikolab.ai. It is used by invited staff and collaborators for assigned productions. Its public homepage also offers a voluntary waitlist for people interested in AIKOLAB.AI. Submitting an email records that interest; it does not create an account or grant platform access. The separate aikolabs.ph portfolio website has its own data practices. There is no subscription checkout.

Information used in the studio

• Waitlist: the email address you submit and the associated interest record, including its timestamp and confirmation-send status. If configured, Resend receives the recipient address and the fixed confirmation message so it can process that email. The message confirms that your interest was recorded; it does not promise an account or access.
• Accounts and access: account identifiers, name, email, studio membership, role and project assignments. Authentication is handled by Clerk.
• Production work: uploaded media, prompts, references, generation settings, outputs, saved plans, project details and review comments. Media may include identifiable faces or voices.
• Costs and accountability: job status, usage, quotes, budget reservations, settled costs and audit records associated with the account that performed an action.
• Technical information: service requests and operational or security records, which may include IP addresses and browser information at the hosting or authentication service.

Use the minimum personal information necessary for the production. Do not put passwords, identity documents or unrelated sensitive information in prompts, comments or briefs.

Why information is processed

The workspace uses this information to authenticate staff, enforce studio and project access, perform requested production tasks, support collaboration, calculate costs and investigate operational or security issues. Production material is not published to the showcase automatically.

Signing in does not constitute blanket consent to unrelated marketing or use of a performer’s likeness. Production teams must obtain the permissions their contracts and applicable law require.

People and services with access

Studio records are available according to current membership, role and project access. Infrastructure services include Clerk for authentication, Vercel for hosting and private media storage, and Neon for the database. A requested job may send its necessary prompt, settings and selected references to BytePlus or Beeble when that connection is enabled. Director planning sends the submitted brief, selected conversation context and limited project metadata to the provider shown for the enabled model, including OpenAI or BytePlus ModelArk. Private Director uses BytePlus and keeps conversations separate from ordinary Director; access inside AIKO does not change the provider’s processing terms.

In projects configured for original fictional characters, your browser can check uploaded images and sampled video frames for face presence to prepare references automatically. This local check does not identify people or establish permission to use a likeness. Eligible references are registered with BytePlus for provider review; existing real-person registrations retain their approved route. Performer verification uses the provider’s verification flow when explicitly requested.

These services may process information outside the Philippines. Provider copies may remain after access to a project asset expires. BytePlus documents automatic prompt caching and retention of content-filter-triggered inputs and outputs for up to 180 days in Malaysia. Private Director is not a zero-retention service. See BytePlus data processing and prompt caching.

Retention and browser drafts

The current media access schedule is 12 calendar months from upload plus one calendar month of grace. Access expires after that deadline. Access expiry is not physical deletion: automatic media removal is currently disabled. Export downloads have shorter access deadlines. Accounting and audit history are preserved separately from media access. Closing a collection form does not erase information already collected.

Drafts, selected references and preferences can remain in your browser’s local storage until replaced or cleared. Some pending-request receipts last for the tab session. Sign out and clear site data before handing a shared device to someone else. Read the cookies and browser storage notice for details.

Questions and privacy requests

You may ask about your information, request access or correction, and request restriction or removal where applicable. Some records may need to be retained for a lawful purpose. Request handling must verify the requester and protect other people’s information.

Staff can raise a request through their studio administrator using the contact instructions. The Philippine Data Privacy Act describes data-subject rights; concerns may also be raised with the National Privacy Commission.