Cookie Policy

COOKIE POLICY

Last Updated: [03,26,2026]

Arcvideo Corporation, which is a part of global corporate group (“we”, “us”, or “our”), provides AI-powered creative tools including AI image and text generation, online audio/video editing, AI video generation, AI design tools, and AI color tools (collectively, the “Services”). This Cookie Policy explains how we use cookies and similar tracking technologies on our official website, desktop and mobile applications (iOS, Android, Windows, Mac) and all associated platforms (collectively, the “Platforms” ). This Policy is an integral part of our global Privacy Policy and shall be applied together with it for all users worldwide.

By continuing to use our Platforms and Services, you consent to our use of cookies and similar tracking technologies in accordance with this policy. If you do not agree to our use of cookies, please adjust your browser or our cookie settings accordingly, bearing in mind that this may limit the core and functional functionality of our Platforms and Services.

1. What Are Cookies and Similar Technologies?

Cookies are small text files that are placed on your computer, mobile device or other terminal equipment when you visit our Platforms. They are widely used to make Platforms work more efficiently, enhance user experience, and provide aggregated, anonymous information to us for Service optimization.

1.1 Similar technologies we may use include (all technologies comply with global data protection laws and will not collect your personal data without consent) :

a. Web beacons/pixels: Small graphic images embedded in web pages or emails that help us understand user behavior (e.g., page clicks, email opens) and measure the effectiveness of marketing campaigns

b. Local storage (Local Storage/ Session Storage): Tb.Used to store non-sensitive information locally on your device to improve Platform performance and remember your personalized preferences without additional server requests.

c. Embedded scripts: Code snippets that help us automatically collect aggregated, anonymous usage data (e.g., feature usage frequency, page loading speed) for Service improvement.

d. Device fingerprinting (limited use): Only used for security verification (e.g., account anti-fraud) with your consent, and will not be used for user tracking or profiling.

1.2 These technologies help us to provide and optimize our AI-powered Services, including but not limited to

a. Recognize your authenticated device when you return to our Platforms to avoid repeated login verification.

b. Remember your personalized preferences and settings (e.g., language, region, AI generation parameter defaults, color tool presets).

c. Understand how you interact with our Platforms and Services to improve performance and optimize AI model usability.

d. Deliver localized content and functional recommendations based on your regional information (no personalized advertising).

e. Manage your AI generation credits, usage quotas and subscription status accurately in real time.

2. Types of Cookies We Use

We categorize cookies based on their purpose and the source of placement, in line with the EU Cookie Law, U.S. sectoral norms and global industry practices. All non-necessary cookies will only be set after obtaining your informed, explicit consent; strictly necessary cookies will not collect any of your personal identifiable information:

2.1 Based on Purpose

2.2 Based on Source

We strictly distinguish between first-party and third-party cookies, and impose strict data protection obligations on third-party service providers to ensure compliance with our Privacy Policy:

a. First-Party Cookies: Set by us directly through our Platforms. We have full control over the collection, use and retention of data from these cookies, which will only be used for the purposes stated in this Policy.

b. Third-Party Cookies: Set by our authorized third-party service providers integrated into our Platforms (e.g., Google Analytics for analytics, cloud service providers for technical support). Their use is governed by their own privacy policies and our signed Data Processing Agreement (DPA), which prohibits them from using the data for any other purpose than providing the agreed services to us.

2.3 Children's Privacy and Age Restrictions

Our Platforms and Services are not directed to children, and we do not knowingly use cookies to collect personal information from children below the applicable age threshold in your jurisdiction:

If you are below the applicable age threshold for your jurisdiction, please do not use our Platforms. We will not set non-essential cookies for known child users, and we do not sell or share personal information of users under 16 for cross-context behavioral advertising.

Parental/Guardian Rights: If you believe we have inadvertently collected data from a child below the applicable age, please contact us immediately at support@totalmedia.ai. Complete children's privacy protections are detailed in Section 7 of our Privacy Policy.

3. Detailed List of Cookies

Below is a comprehensive, up-to-date list of cookies we use (we regularly use cookie scanning tools to verify and update the list). The specific cookies may vary by page, user region and Service usage, but will not exceed the categories stated in Section 2.1.

3.1 Strictly Necessary Cookies

3.2 Functional Cookies

3.3 Analytics and Performance Cookies

3.4 Marketing and Advertising Cookies

4. How We Obtain Your Consent (Primary Global Method)

When you first visit our Platforms, a prominent and non-intrusive cookie consent banner will be displayed. The banner provides the following options with equal prominence and without any misleading design (no dark patterns):

a. Accept All — Consent to all categories of cookies (Strictly Necessary, Functional, and Analytics Performance).

b. Reject All — Reject all non-essential cookies with a single click (only Strictly Necessary Cookies remain active).

c. Manage Preferences — Customize your cookie settings via granular controls.

We ensure that:

a. the "Accept All" and "Reject All" options are presented with equal visibility, size, and ease of interaction;

b. no pre-checked boxes or implied consent mechanisms are used;

c. all non-essential cookies are disabled by default until you provide explicit consent;

d. Your choice is recorded and can be modified at any time via the "Cookie Settings" link.

4.2 Global Privacy Control (GPC) Signal

Our Platforms recognize and honor Global Privacy Control (GPC) signal as a valid mechanism for users to opt out of:

a. non-essential cookies; and

b. any data processing that may be considered "sale" or "sharing" under applicable U.S. state laws.

When a valid GPC signal is detected:

a. all non-essential cookies will be automatically disabled; and

b. your preference will override any previously stored cookie consent settings.

4.3 Browser/Device System Controls (Global Universal Method)

You can manage, block or delete all cookies (excluding Strictly Necessary Cookies that are essential for Platform operation) through your web browser or device system settings. This is a global method that applies to all websites and platforms you visit.

Note that blocking Functional/Analytics Cookies will not affect the core use of our AI Services, but may result in the loss of personalized settings and prevent us from optimizing the Platform based on aggregated usage data.

Below are official, global valid links to cookie management guides for major browsers:

a. Google Chrome: https://support.google.com/chrome/answer/95647

b. Apple Safari (Mac/iOS): https://support.apple.com/en-us/HT201265

c. Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

d. Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/manage-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

e. Android System Browser: https://support.google.com/android/answer/96815

f. iOS Safari: https://support.apple.com/zh-cn/guide/safari/sfri11471/ios

4.4 Third-Party Analytics Opt-Out Tools (Targeted Method)

If you want to opt out of data collection by our third-party analytics service providers (e.g., Google Analytics), you can use their official opt-out tools (the opt-out will take effect globally for all websites using the corresponding analytics service):

a. Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

b. Microsoft Clarity Opt-out: https://privacy.microsoft.com/en-us/microsoft-clarity-opt-out

4.5 Withdrawal of Consent (Formal Legal Method)

a. For EU/EEA/UK users, you can also formally withdraw your cookie consent by sending an email to our Data Protection Officer (DPO) at support@totalmedia.ai, with the subject line "Withdraw Cookie Consent - [Your Account Email]". We will process your request and confirm the completion of the withdrawal via email within 7 business days, and in any event within the timeframe required by applicable law (e.g., GDPR).

b. For users in other regions, you can use the above Platform/browser settings to withdraw consent, or contact our privacy team at support@totalmedia.ai for assistance.

4.6 Consent Logging and Audit Trail

We maintain a secure and verifiable record of user cookie consent choices to demonstrate compliance with applicable data protection laws, including the GDPR, ePrivacy Directive, and relevant U.S. state privacy laws.

Such records may include:

a. the user's consent status (accepted, rejected, or customized preferences);

b. the date and time of the consent action;

c. the version of the cookie banner or policy presented at the time of consent;

d. a pseudonymous identifier (e.g., cookie ID or device identifier);

e. the user's general location (e.g., country or region) based on IP address.

We implement appropriate technical and organizational measures to ensure that:

a. consent records are securely stored and protected against unauthorized access, alteration, or deletion;

b. consent logs are retained only for as long as necessary to demonstrate compliance and resolve disputes;

c. access to consent logs is strictly limited to authorized personnel on a need-to-know basis.

Where required by applicable law, we may provide evidence of consent to regulatory authorities upon request.

Updating Consent Records: If you modify or withdraw your consent preferences, we will update our records accordingly and retain a history of such changes where necessary for compliance purposes.

5. How to Manage Your Cookie Preferences

We provide multiple, easy-to-use ways for you to manage your cookie preferences, which apply to all our global Platforms. Your choices will be stored in the cookie_consent cookie and take effect immediately.

You can withdraw or modify your consent at any time without affecting the lawfulness of cookie processing based on your prior consent.

See Section 4 above for the primary methods.

6. Specific Considerations for Our AI Service

Cookies and similar tracking technologies are tailored to support the unique functionality of our AI-powered creative tools, and all data collection is limited to the minimum necessary for Service provision (compliant with the data minimization principle in GDPR/PIPL/CCPA). Specifically, cookies support our AI Services in the following ways (note: user content may only be used for AI model training with your explicit opt-in consent as described in our Privacy Policy Section 11.2; and such training data is de-identified and anonymized before use):

a. Remember your AI generation/editing project state and history to avoid data loss and enable continuous editing

b. Optimize the processing speed and stability of AI tools based on aggregated, anonymous usage patterns (e.g., adjusting server resources for high-frequency AI video generation)

c. Personalize AI feature recommendations (e.g., recommending relevant AI design tools based on your usage history) without user profiling

d. Accurately manage your AI generation credits, processing hours and subscription status in real time to prevent unauthorized usage

e. Ensure the security of AI-generated content (e.g., verifying your account identity when downloading high-resolution AI images/videos)

To the extent that such processing constitutes Automated Decision-Making Technology (ADMT) under applicable law:

a. you have the right to request meaningful information about the logic involved;

b. you may object to or opt out of such processing;

c. you may request human review where decisions significantly affect you.

You can disable such features at any time via your account settings or privacy controls.

7. Data Transfers and Retention

7.1 International Data Transfers

Cookie-related data may be stored and processed in secure cloud infrastructure located in the United States, the European Union, and Singapore.

Where our affiliated entities (including our parent company in China) access such data, this access is:

a. limited to anonymized or de-identified data;

b. strictly necessary for technical support and system maintenance;

c. subject to strict access controls, audit logging, and data minimization principles.

We ensure that all cross-border transfers comply with applicable laws, including GDPR and relevant U.S. regulations, through appropriate safeguards such as SCCs and internal compliance mechanisms.

Data collected via cookies may be transferred to and processed in countries outside your residence (e.g., the United States, Singapore, EU) by us or our authorized third-party service providers. For cross-border transfers of personal data (if any) from the EU/EEA/UK/Switzerland/California, we use the following statutorily approved safeguards (consistent with our Privacy Policy Section 6):

a. EU Standard Contractual Clauses (SCCs) (Commission Implementing Decision (EU) 2021 914);

b. Data Processing Agreements (DPAs) compliant with local data protection laws;

c. Other lawful transfer mechanisms approved by local data protection authorities (e.g., Switzerland's FADP recognized safeguards).

All cross-border transfers of cookie data are limited to aggregated, anonymous data; no personal identifiable information is transferred across borders without your explicit consent.

7.2 Cookie Data Retention

We strictly adhere to the retention limitation principle (GDPR/PIPL/CCPA) and retain cookie data only for the minimum necessary period stated in the detailed cookie lists (Section 3). After the expiry date:

a. First-party cookies: Automatically deleted or anonymized on our servers and your device;

b. Third-party cookies: Deleted or anonymized in accordance with the third-party service provider's privacy policy and our DPA;

c. No cookie data is retained for longer than 2 years (the maximum expiry period of our analytics cookies).

Cookie data is not combined with other personal data you provide to us (e.g., account email, payment information) without your explicit consent.

8. Legal Basis for Processing (By Region)

We comply with the applicable cookie and data protection laws of all regions where we provide Services, and the legal basis for cookie processing is clearly defined in accordance with regional regulations (consistent with the legal basis stated in our global Privacy Policy).

8.1 European Union (EU) & European Economic Area (EEA) & United Kingdom (UK)

We fully comply with the EU e-Privacy Directive (2009/136/EC, "Cookie Law"), GDPR (Regulation (EU) 2016/679) and the UK's Privacy and Electronic Communications Regulations 2003 (amended 2011). The legal basis for cookie processing is as follows:

a. Strictly Necessary Cookies: Processed based on our legitimate interest (Article 6(1)(f) GDPR) to provide the requested Services and ensure the security and efficiency of the Platforms; this is exempt from the consent requirement under the EU Cookie Law Article 5(3).

b. Functional & Analytics / Performance Cookies: Processed exclusively based on your prior, explicit, informed consent (Article 6(1)(a) GDPR / EU Cookie Law Article 5(1)). We do not use implied consent (excluding regions where implied consent is explicitly permitted by local law, e.g., Denmark/Spain) and silence/inaction is not deemed as consent (compliant with Spanish AEPD's guidance).

c. Key Regional Compliance Rules: Cookie Law Across Europe

1. France/Italy/Netherlands/Portugal: Strict opt-in requirement - explicit click confirmation is mandatory for non-necessary cookies;

2. Germany: Opt-in for cookies collecting personal data, opt-out for anonymous analytics cookies (our analytics cookies are 100% anonymous, complying with this rule);

3. UK: Consent can be signified via browser settings or our Platform banner (compliant with ICO's guidance);

4. Finland/Luxembourg/Greece: Consent via browser settings is acceptable (we support both browser and Platform settings).

8.2 United States

We adhere to U.S. sectoral privacy norms and state-specific data protection laws (e.g., CCPA/CPRA (California), VCDPA (Virginia), CTDPA (Connecticut)):

a. General Rule: We provide clear notice and choice for non-necessary cookies through this Policy and our consent banner, in line with U.S. Federal Trade Commission (FTC) privacy guidelines.

b. California CCPA/CPRA Compliance: We do use Marketing/Advertising Cookies to deliver personalized advertisements and enable cross-context behavioral advertising. This may constitute "selling" or "sharing" your personal information under California Civil Code § 1798.100 et seq. (CPRA).

Your Rights:

• Click the "Do Not Sell or Share My Personal Information" link in our Platform footer to opt-out of interest-based advertising;

• Alternatively, enable the Global Privacy Control (GPC) signal in your browser to automatically communicate your opt-out preference;

• Use our "Cookie Settings" link to customize your preferences and disable marketing/Advertising Cookies.

We process personal information for behavioral advertising based on your consent (where required) or pursuant to the "opt-out" model under CCPA/CPRA. We do not knowingly sell or share personal information of consumers under 16 years of age without affirmative authorization.

State-Specific Rules: For states with specific cookie notice requirements (e.g., Virginia, Colorado), we comply with the local notice and choice rules through our global consent mechanism.

8.3 Asia Pacific (Including China, Singapore, Japan, South Korea)

We comply with the cookie and tracking technology regulations of all Asian Pacific regions, and align with the data protection rules stated in our Privacy Policy:

a. China (Hong Kong/Macao/Taiwan): Comply with the PRC Personal Information Protection Law (PIPL), Cybersecurity Law and the Hong Kong Personal Data (Privacy) Ordinance (PDPO). All non-necessary cookies are only set with your explicit consent; no cross-border transfer of cookie data without prior approval (if required by law).

b. Singapore: Comply with the Personal Data Protection Act (PDPA). Provide clear notice of cookie usage and obtain your consent for non-necessary cookies; comply with the PDPA's data minimization and purpose limitation principles.

c. Japan: Comply with the Act on the Protection of Personal Information (APPI). Cookie usage is disclosed in our privacy-related documents; non-necessary cookies are set with your voluntary consent.

d. South Korea: Comply with the Personal Information Protection Act (PIPA) and the Act on Consumer Protection in Electronic Commerce. Provide a 7-day cooling-off period for consent withdrawal; all cookie data is stored and processed in compliance with Korean data protection rules.

8.4 Oceania (Australia & New Zealand)

We adhere to the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020:

a. All non-necessary cookies are set only with your explicit consent; clear notice of cookie usage is provided on our Platforms;

b. Cookie data is treated as "personal information" under Australian/New Zealand law and is protected by the same security measures as other personal data (as stated in our Privacy Policy).

8.5 Other Global Regions (Canada, Switzerland, Latin America, Middle East)

a. Canada: Comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws (e.g., Quebec's Act Respecting the Protection of Personal Information in the Private Sector); provide clear notice and choice for cookie usage.

b. Switzerland: Comply with the Swiss Federal Data Protection Act (FADP). Non-necessary cookies are set with your explicit consent; cross-border transfer of cookie data complies with Swiss FADP safeguards requirements.

c. Other Regions: We strive to comply with the applicable cookie and data protection laws of all other regions (e.g., Brazil's LGPD, India's DPDP Act); our global consent mechanism is designed to meet the minimum compliance requirements of all regions.

8. Global Cookie Usage Rules (Consistent with Global Regions)

8.1 Update & Revision Rules (Consistent with Privacy Policy Section 12)

This Cookie Policy may be updated from time to time to reflect:

a. Changes in applicable local cookie laws (e.g., EU GDPR, U.S. state privacy laws, Chinese regulatory requirements);

b. Changes in our service offerings (e.g., new tools that require additional functional cookies);

c. Feedback from our global users and recommendations from data protection authorities.

Revision Rule: The "Last Updated" date at the top of this Policy will be updated to indicate the effective date of the revised version. For material changes (e.g., changes to cookie categories, consent mechanisms, data retention rules), we will provide advance notice through pop-up reminders on our Platforms, email alerts, or appropriate means (in compliance with local laws).

8.2 Contact & Complaints (Global Privacy Inquiries)

For any questions, concerns, or requests regarding this Cookie Policy, our cookie practices, or to exercise your privacy rights:

a. Contact our dedicated privacy team via support@example.com;

b. For EU/EEA/UK users, you have the right to lodge a formal complaint with your local data protection authority (if we fail to comply with your requests);

c. Response time: 7-10 business days (in accordance with global data protection laws).

8.3 EU/EEA/UK User Complaint Channels

If you believe our cookie practices violate the EU Cookie Law (GDPR), UK PECR, or other applicable laws, you can lodge a complaint through the following official channels:

a. European Data Protection Board (EDPB): https://edpb.europa.eu;

b. Information Commissioner's Office (ICO) (UK): https://ico.org.uk;

c. German BfDI: https://www.bfdi.bund.de;

d. Italian Garante: https://www.garanteprivacy.it.

We will fully cooperate with all local authorities to resolve any complaints about our cookie practices in a timely and compliant manner.