Privacy Policy

1. Information We Collect

a) Information you provide directly:

• Account info: email address, username, password (hashed), and optional profile details.
• Payment info: handled by our PCI-DSS compliant payment processors. We do not store full credit card numbers.
• Generated content: text prompts, settings, and the images/videos you create.
• Uploaded content: face references or images you upload for face-swap or training.
• Communications: messages you send via our Contact form or email support.

b) Information collected automatically:

• Device data: browser type, OS, IP address, language settings.
• Usage data: pages visited, features used, generation counts, timestamps.
• Cookies & similar technologies for authentication, preferences, and analytics.

c) Information from third parties:

• If you sign in via Google or another identity provider, we receive basic profile info (email, name, avatar).
• Payment processors share transaction status, last 4 digits of card, and billing country.
• Affiliate referrals share the referring code and link.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service.
• Process payments, manage subscriptions, and track credit balances.
• Verify your age and prevent fraud, abuse, and unauthorized access.
• Communicate with you about your account, updates, and support requests.
• Moderate content and enforce our Terms of Service.
• Comply with legal obligations, respond to lawful requests, and protect our rights.
• Personalize your experience (e.g., recommended characters, gallery sorting).

3. Legal Bases for Processing (GDPR / UK)

If you reside in the EEA, UK, or another jurisdiction with similar laws, we rely on the following legal bases: (a) Performance of a contract to deliver the Service; (b) Consent for marketing communications and certain cookies; (c) Legitimate interests in operating, securing, and improving the Service; and (d) Legal obligations such as tax and content moderation laws.

4. Data Storage & Security

Generated content and uploaded files are stored in encrypted cloud storage operated by reputable providers (e.g., Amazon Web Services). Account data is stored in encrypted databases. We use industry-standard measures including TLS encryption, hashed passwords, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure.

5. Sharing Your Information

We do not sell your personal information. We share data only with:

• Service providers (payment processors, cloud hosting, AI inference, email delivery, analytics) under confidentiality agreements.
• Legal authorities when required to comply with valid legal process or to investigate suspected illegal activity (especially child safety).
• Successors in the event of a merger, acquisition, or sale of assets, with notice to you.
• Other users only when you choose to make a generation public, share via the explore feed, or publish a public Companion.

6. AI Training & Your Content

We do not use your private generations or face-reference uploads to train third-party foundation models. We may use anonymized, aggregated usage data to improve our internal moderation, search, and recommendation systems.

7. Cookies & Tracking

We use essential cookies for login sessions, security, and remembering your preferences. We may also use limited analytics cookies to understand aggregate usage patterns. You can disable cookies in your browser, but parts of the Service may not function correctly.

8. Your Rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and personal data (right to be forgotten).
• Export a copy of your generated content.
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Retention

We retain your account and generated content while your account is active. After account deletion, we delete or anonymize your data within 30 days, except where retention is required by law (e.g., tax records, fraud prevention, or evidence relating to abuse investigations).

10. International Transfers

Your data may be processed in countries outside your home country, including the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect international transfers.

11. Children's Privacy

The Service is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover such data, we will delete it immediately and terminate the account. If you believe a minor is using the Service, contact us right away.

12. California & U.S. State Rights (CCPA / CPRA)

California residents and residents of other U.S. states with similar laws have the right to know what personal information we collect, request deletion, opt out of any sale or sharing of personal information (we do not sell), and not be discriminated against for exercising these rights.

13. Changes to This Policy

We may update this Privacy Policy occasionally. Material changes will be communicated via email or by a notice on the Service. The "Last updated" date below reflects the most recent revision.

14. Contact Us

For privacy questions or requests, email [email protected] or use our Contact page.