Privacy Policy

1. Introduction

Clean Jewel Beyond Limited ("Caratzon," "we," "us"), a company incorporated in Hong Kong operating the Caratzon platform, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Caratzon platform ("Platform"), including the website at caratzon.com, the trade catalog, designer studio, and all related services.

By using the Platform, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Platform.

2. Data Controller

The data controller responsible for your personal data is:

Clean Jewel Beyond Limited
Hong Kong
privacy@caratzon.com

3. Information We Collect

3.1 Information You Provide

• Account data — name, email address, password, role (Designer, B2B Buyer, Manufacturer, Production Manager), business name, and business address
• Profile data — designer biography, portfolio images, brand description, and professional credentials
• Design assets — CAD files, reference images, design descriptions, and metadata uploaded by designers
• Transaction data — order details, customization briefs, licensing selections, proposed fees, and negotiation communications
• Payment data — billing information processed through Stripe Connect (we do not store full card numbers on our servers)
• Communications — messages exchanged through the Platform's messaging system, support requests, and feedback

3.2 Information Collected Automatically

• Device and browser data — IP address, browser type, operating system, device identifiers, and screen resolution
• Usage data — pages visited, features used, search queries, designs viewed, time spent on pages, and interaction patterns
• Analytics data — design view counts, save events, scroll depth, and engagement metrics used to improve the Platform
• Cookies and similar technologies — session cookies, authentication tokens, language preferences, and optional analytics cookies (see our Cookie Policy)

3.3 Information from Third Parties

• Payment processors — transaction confirmations and payout status from Stripe
• Authentication providers — identity verification data if you sign in through a third-party provider

4. How We Use Your Information

We use your personal data for the following purposes:

• Platform operations — to create and manage your account, authenticate sessions, and provide access to role-specific features
• Design presentation — to display designs in the catalog, generate AI-enhanced stories and lookbook imagery, and create editorial content
• Transaction facilitation — to process orders, manage licensing workflows, route production to manufacturers, and handle payments
• Communication — to send order updates, system notifications, and respond to support requests
• Analytics and improvement — to understand usage patterns, improve Platform features, and optimize the user experience
• Security — to detect and prevent fraud, unauthorized access, and other security threats
• Legal compliance — to comply with applicable laws, regulations, and legal processes

5. AI Processing

The Platform uses artificial intelligence services (currently Google Gemini) to process design assets for the following purposes:

• Generating design stories and editorial narratives from uploaded images and metadata
• Creating lookbook and catalog imagery for design presentation
• Enhancing catalog and portrait photographs
• Analyzing jewelry designs and CAD renders for manufacturing specifications
• Translating messages between platform users

Design assets sent to AI services are processed solely for the purposes described above. We do not use your designs to train third-party AI models. AI-generated content derived from your designs is used exclusively within the Platform.

6. How We Share Your Information

We may share your personal data with the following categories of recipients:

• Other platform users — designer profiles and design information are visible to buyers; buyer identity is shared with designers and manufacturers as part of order workflows
• Manufacturing partners — production specifications, CAD files (under NDA), and order details are shared with vetted manufacturers assigned to fulfill orders
• Payment processors — Stripe receives payment and billing information necessary to process transactions
• Cloud infrastructure providers — data is stored and processed using cloud services (including AWS S3 for asset storage and PostgreSQL for application data)
• AI service providers — design assets are processed by Google's Gemini AI services as described in Section 5
• Legal and regulatory authorities — when required by law, regulation, or legal process

We do not sell your personal data to third parties. We do not share your data with advertisers.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Role-based access controls limiting data visibility by user type
• Time-limited, signed URLs for design asset access — preventing unauthorized redistribution
• Production CAD files accessible only to vetted manufacturers under NDA
• Regular security reviews and monitoring

While we take reasonable precautions, no system is completely secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data — retained for the duration of your account plus 12 months after deletion
• Design assets — retained while the design is listed on the Platform; upon removal, assets are deleted within 90 days unless subject to an active license agreement
• Transaction records — retained for 7 years to comply with financial record-keeping requirements
• Analytics data — aggregated and anonymized within 24 months
• Audit logs — retained for 3 years for security and compliance purposes

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data, subject to legal retention requirements
• Restriction — request that we limit processing of your data in certain circumstances
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@caratzon.com. We will respond within 30 days.

10. International Data Transfers

Caratzon operates from Hong Kong with offices in Shanghai and London. Your data may be transferred to and processed in jurisdictions outside your country of residence, including Hong Kong, China, the United Kingdom, and the United States (for cloud infrastructure and AI processing).

Where data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements with our service providers.

11. Cookies

The Platform uses cookies and similar technologies for authentication, language preferences, and analytics. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@caratzon.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The "Effective date" at the top of this page indicates when the policy was last revised. Continued use of the Platform after changes constitutes acceptance.

14. Contact

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Clean Jewel Beyond Limited
Data Protection Enquiries
privacy@caratzon.com