Privasi

Denver Creative OS — Private Studio
Effective date: 1 October 2026
Operator: Rommy Sunarto
Privacy contact: Rommysunarto@gmail.com

Denver Creative OS (“DCO”, “we”, “us”) is a private, project-scoped creative studio for turning product references into structured creative outputs. This Privacy Notice explains what personal data may be processed when you use the studio, why it is processed, how it may be handled, and the choices available to you.

1. Scope

This notice applies to the DCO website, invitation-based studio access, project workspaces, uploads, generated outputs, quality-assurance records, download flows, and related system logs.

A separate written project agreement may contain additional terms for a particular client or engagement. If there is a conflict, the written project agreement will apply to the extent stated in that agreement.

2. Data we may process

Depending on how you use DCO, we may process:

• identity and contact information you provide, such as name, company, role, and email address;
• invitation and access information, including project identifiers, access tokens, and session records;
• product references, images, documents, 3D assets, prompts, instructions, and other files uploaded to a project;
• generated images, 3D proxies, planning artifacts, QA results, lineage records, and other project outputs;
• technical information such as browser type, device information, timestamps, IP-derived security information, error logs, and security events;
• communications you send to the studio operator.

Please do not upload personal data that is unnecessary for the creative task.

3. Why we process data

We process data only for purposes connected with operating the private studio, including:

• authenticating and authorizing project access;
• receiving and processing project references;
• generating requested creative outputs;
• maintaining product and project continuity;
• performing quality assurance and troubleshooting;
• preparing downloads and project delivery;
• preventing misuse, fraud, unauthorized access, or security incidents;
• maintaining system reliability and improving the operation of the studio;
• meeting applicable legal obligations.

Where consent is the appropriate legal basis, you may withdraw it subject to applicable law and technical or contractual limitations.

4. Client assets and AI processing

DCO may use external infrastructure or AI service providers when a project task requires them. This can include processing product references, prompts, images, video, or 3D assets in order to produce or evaluate a requested output.

DCO does not intentionally use client project assets to train a proprietary DCO model unless the client has separately and explicitly agreed to that use.

Third-party providers may process data under their own contractual terms and privacy commitments. Where practical, DCO will prefer provider settings that limit unnecessary retention, reuse, or model-training use.

Do not upload confidential, regulated, or highly sensitive personal information unless the project has been specifically approved for that data.

5. How long we keep data

DCO is designed around project-scoped access rather than permanent public accounts.

Project data may be retained while a project is active and for a limited period afterward for delivery, QA, security, recovery, or legal purposes. Retention may vary by project and by the third-party services used to complete the work.

Where a specific retention period applies to a project, it should be stated in the invitation, project agreement, or delivery note.

When data is no longer reasonably required, DCO will delete, anonymize, or allow it to expire where technically and legally appropriate.

6. Sharing and disclosure

We may share data only where reasonably necessary with:

• infrastructure, hosting, storage, security, or delivery providers;
• AI or creative-processing providers used to perform the requested project task;
• professional advisers where necessary;
• authorities where disclosure is required by applicable law.

We do not sell personal data to advertisers.

We do not provide client project assets to unrelated third parties for their independent marketing use.

7. International processing

Some infrastructure or AI providers may process data outside Indonesia. Where this occurs, DCO will take reasonable steps appropriate to the project and applicable law to manage cross-border processing and provider obligations.

8. Security

DCO uses project-scoped access controls and reasonable technical and organizational measures intended to reduce unauthorized access, alteration, loss, or misuse.

No online service can guarantee absolute security. Clients should avoid uploading information that is not required for the project and should protect invitation links, access credentials, and downloaded project files.

9. Your choices and rights

Subject to applicable law, you may request information about personal data associated with you and may ask for correction, access, deletion, withdrawal of consent where applicable, or other available data-subject rights.

Requests can be sent to:

Rommysunarto@gmail.com

We may need to verify your identity and project relationship before acting on a request.

10. Necessary browser storage

DCO may use browser storage, session information, or similar technology that is necessary for authentication, security, project continuity, and core functionality.

If DCO later introduces non-essential analytics, advertising technology, or additional tracking, this notice and any required consent mechanism should be updated before those tools are enabled.

11. Children

DCO is a professional private studio and is not intended for children. Do not provide access to minors or upload children’s personal data unless the project has been specifically reviewed and permitted.

12. Changes to this notice

We may update this Privacy Notice when the studio, providers, legal requirements, or data practices change. The current effective date will be shown at the top of this page.

13. Contact

Questions about privacy or data handling can be sent to:

Rommy Sunarto
Rommysunarto@gmail.com
Jl. Suprapto No.20, Mandonga, Kec. Mandonga, Kota Kendari, Sulawesi Tenggara 93112, Indonesia