CyberLink

GDPR overview

No page collected mentions the GDPR by name: neither the acronym nor its full form appears anywhere in the thirteen pages gathered, in visible text or in the archived HTML. The framework is only partly visible. Both the terms of service and the privacy policy close on a designated EU representative for data protection issues, Perfect Corp., 55 Boulevard Pereire, 75017 Paris, contactable at privacy@cyberlink.com. Detailed data-subject rights are spelled out under Californian law rather than European law: rights to know, access, correct, delete and opt out, exercised by email, toll-free phone or written request to the Taiwanese head office, with a 30-day response commitment. Governing law is Taiwan and disputes go to arbitration in Taipei. Both policies were last updated in August 2026.

Who owns the data?

CyberLink's terms give ownership of generative outputs to the user: you own the content generated from your submissions, to the extent permitted by law, and you remain solely responsible for whatever you upload. CyberLink reserves the right to use both submissions and outputs to improve the generative AI experience, and warns that it guarantees neither your copyright ownership nor freedom from third-party infringement. Data is collected by CyberLink Corporation and may be stored, transferred and processed across the CyberLink Group in the United States, Taiwan and Japan. Using the generative features requires explicit consent to biometric data collection. The privacy policy states personal information is never sold or shared for commercial purposes.

Reuse rights

Outputs may be used commercially when they are photos or images; video outputs stay subject to the additional licence terms of sections 5(IV)(b) and 5(IV)(c). Stock assets from Getty Images and the Meta Sound Collection are pre-cleared royalty-free for commercial and personal use, and AI-generated music carries no licensing fee and no copyright claim. Reuse is nonetheless fenced in: NSFW output, malicious deepfakes, defamation and breaches of personality or privacy rights are prohibited, as is using the service to build datasets for training neural networks or templates for competing products.

Data retention & training

Hosting summary

CyberLink names no data centre and declares no hosting region. What the privacy policy does state is which group entities may hold the data: information collected through the websites, mobile apps and desktop software may be stored, transferred and processed by CyberLink.Com Corp. in the United States, CyberLink Corp. in Taiwan and CyberLink Inc. in Japan. The policy acknowledges that these three jurisdictions may have laws and data protection requirements different from those of the user's own country, and states that transfers comply with applicable law. Governing law is Taiwan and arbitration takes place in Taipei. On security, the policy claims encryption using TLS and SHA256, and access restricted to staff bound by contractual confidentiality obligations. For FaceMe specifically, CyberLink states that it keeps no global database, that each deployment is private, and that users may request deletion of their data at any time.