Privacy Policy

Last updated: April 1, 2026  |  Wanfaka

1. Who We Are

Wanfaka ("we", "us", or "our") operates the wanfaka.com platform, providing AI-powered digital services including AI creative tools, enterprise API access, AI office automation, AI digital human solutions, and subscription plans. We are registered in Hong Kong and comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and applicable international data protection standards.

2. Data We Collect

We collect the following categories of personal data:

• Account information: Email address, name, and account credentials provided during registration.
• Payment information: Transaction records and billing details (processed securely by our payment providers — we do not store card numbers on our servers).
• Usage data: API call logs, feature usage statistics, and subscription activity to improve our services.
• Communication data: Emails and support messages you send to us.
• Technical data: IP address, browser type, device information, and cookies for platform security and performance.

3. How We Use Your Data

We use collected data to:

• Create and manage your account and subscription.
• Deliver AI services and process payments.
• Respond to support requests and communicate important service updates.
• Detect and prevent fraud, abuse, and security threats.
• Improve and develop our AI platform and services.
• Comply with legal and regulatory obligations under Hong Kong law.

4. Data Sharing

We do not sell your personal data to third parties. We may share data with:

• Payment processors — to securely process subscription and service payments (Visa/Mastercard networks and our authorised payment gateway).
• Cloud infrastructure providers — to host and deliver our AI services (subject to data processing agreements).
• Legal authorities — where required by applicable law, court order, or regulatory request.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account closure, we retain data for a period necessary to comply with legal obligations (typically 7 years for financial records in Hong Kong). You may request deletion of your data at any time by contacting us, subject to legal retention requirements.

6. Cookies

We use essential cookies to maintain your session and platform security. We may also use analytics cookies to understand how users interact with our platform. You can control cookie preferences through your browser settings; however, disabling essential cookies may affect platform functionality.

7. Your Rights

Under the Hong Kong PDPO and applicable regulations, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Delete your personal data (subject to legal retention requirements).
• Object to processing of your data for certain purposes.
• Data portability — receive your data in a structured, machine-readable format.

To exercise these rights, please contact us at the details below.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All payment data is processed through PCI-DSS compliant gateways. We do not store payment card information on our servers. Access to personal data is restricted to authorised personnel only.

9. International Data Transfers

Our AI services are delivered via cloud infrastructure which may involve data processing in jurisdictions outside Hong Kong. We ensure that any such transfers comply with applicable data protection laws and that recipient countries or organisations provide adequate levels of data protection.

10. Governing Law

This Privacy Policy is governed by the laws of the Hong Kong Special Administrative Region. Any disputes relating to this Policy shall be resolved in the courts of Hong Kong.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. Continued use of our services after changes constitutes acceptance of the updated Policy.

12. Contact Us