Privacy Policy

Scope

This policy applies to AI Face Swap Live. “We” and “us” refer to the operator of the Service. It explains what information the application handles, why it is needed, and your choices. For purchase and usage rules, see our Terms of Service and Refund & Cancellation Policy.

Information we handle

• Account and sign-in information: name, email address, profile image, password hash for email/password accounts, session records, and linked sign-in-provider identifiers when applicable. We do not store your password in plain text.
• Live-session information: reference portraits, camera input submitted for generation, generated output, prompts or settings, moderation results, timestamps, connection events, and credit usage.
• Payment records: order and subscription identifiers, billing contact information supplied by the payment processor, amounts, currencies, payment status, receipts, and credit transactions. Stripe handles card details; our application does not store full card numbers or card security codes.
• Support information: ticket messages, replies, and screenshots or files you choose to attach.
• Technical information: IP address, browser and device details, request and error logs, and local preferences needed for operation, security, and troubleshooting.

Only submit images and other personal information that you have permission to provide. Do not put passwords, full payment-card details, or identity documents in support tickets or reference images.

Camera, reference images, and AI processing

Opening camera preview requests browser permission and displays the camera locally; it does not by itself submit a paid AI generation session. Starting live generation sends camera video, the selected reference, and relevant settings to our AI provider, XMAX. The current integration uses its China-region service, including 22duck/XMAX China. Reference images are also submitted to XMAX China and SEEAPI for moderation. Review can occur before generation or when changing a portrait, independently of whether paid output starts.

We temporarily store images used for review in private Cloudflare R2 storage and provide time-limited download links to the services that need them. Review links expire after at most 10 minutes. Link expiration does not itself delete an object or recall a copy already downloaded by a provider.

When session still sampling is enabled, the application captures one input still and periodic output stills, approximately every 20–30 seconds, for session review and troubleshooting. This feature does not record continuous video or audio on our server. Reference and sample files held by our application are scheduled for deletion after 10 minutes; cleanup retries or outages can delay physical deletion. Moderation decisions and session metadata have separate retention rules, described below.

Private references and captured stills are not automatically published to our public gallery. Deletion from our storage does not guarantee simultaneous deletion from a provider's systems. Provider processing and retention depend on the applicable arrangements and provider policies; do not assume that all processing stays on your device or in your country.

Browser library and optional recordings

The My Images library stores reference images locally in the browser, separated by account. Removing a local image does not erase a review already sent to a provider. Clearing browser data or using another device may make local images unavailable.

Record AI video records up to 90 seconds per clip in browser memory. Microphone audio is included only when you enable it and grant permission. The recording feature does not upload clips or microphone audio to our servers. The AI video being recorded has already been processed by the generation provider. Download a clip before leaving the page or replacing it with a new recording. Downloaded files remain on your device until you remove them.

Profile images and support attachments

Uploaded profile avatars use public asset storage. Anyone who obtains an avatar's public URL may view it; do not use a private or sensitive image as your avatar.

Support attachments use private storage. The ticket owner and authorized support administrators can access submitted attachments through authenticated application links. Downloads use short-lived signed links: anyone you share an unexpired signed link with may access that file until it expires.

Unsubmitted attachment drafts are scheduled for cleanup after 24 hours. Attachments submitted with a ticket remain with its history and are not automatically deleted just because a ticket is closed.

Purposes and legal bases

We use information to operate your account, generate requested output, review references, maintain credit balances, process purchases, and answer support requests. Where data-protection law requires a legal basis, processing necessary to deliver these services is based on performing our agreement with you. Relevant security, abuse-prevention, troubleshooting, and dispute processing is based on legitimate interests where applicable. Some financial and other records are processed to meet legal obligations.

Where processing requires consent, we will seek it for that purpose. Camera or microphone permission controls access to those devices; it is not consent to unrelated uses. You can stop generation and revoke device permissions in your browser. Revocation does not undo processing already carried out.

Service providers and international processing

We share information needed to operate the Service with AI and moderation providers (XMAX/22duck, XMAX China, and SEEAPI), storage and delivery providers such as Cloudflare R2, hosting providers, and Stripe for payments. Authorized support personnel can access relevant records to resolve requests. Optional sign-in providers receive information when you choose their login option.

Providers may process data outside your country, including in China for the current AI integration. Local laws and protections can differ. Where applicable law requires safeguards for international transfers, those safeguards must apply to the relevant processing. Contact us for information about your data and the services involved.

We may disclose relevant information to comply with a lawful obligation, investigate misuse, or protect legal rights. We do not sell personal information. This policy does not promise that providers have the same retention periods as our application.

Cookies and local storage

We use session cookies for authentication and browser storage for preferences and local features such as the reference library. Blocking essential storage may prevent sign-in or other features from working. Device permissions can be managed separately in your browser.

We use Google Tag Manager to manage analytics tags, including Google Analytics when configured, and Microsoft Clarity to understand page visits, traffic sources, device and browser characteristics, and interactions such as clicks and scrolling. Clarity provides heatmaps and session replays of website interactions. These providers may use cookies or similar identifiers and process technical information such as IP addresses. We do not send passwords, payment card details, or camera and microphone streams as analytics event parameters.

For details about provider processing and available controls, see Google's privacy information and Microsoft's Privacy Statement. Browser privacy settings and tracking blockers may restrict these tools. Acceptance of the Terms is not blanket consent to non-essential tracking.

Retention and account deletion

Account information is kept while your account is active. Temporary image files, draft support attachments, local images, and recordings follow the different rules above.

Billing, credit-usage, moderation, security, and support records may be retained after a session ends or an account is deleted where needed to resolve disputes, investigate abuse, maintain financial records, or meet legal obligations. Retention depends on the record's purpose, applicable requirements, and whether a dispute remains open. These records do not use the 10-minute image cleanup rule and are not all automatically deleted on account closure. You may request review or deletion of information that no longer needs to be retained.

The Delete account control in Profile removes sign-in credentials and personal profile fields, signs out devices, and forfeits unused credits. Cancel recurring subscriptions and stop live generation first. Deletion does not automatically issue a refund. Order, usage, and support records may remain linked to an internal account identifier and may still contain billing contact details or personal information in messages; they are not necessarily anonymous.

An uploaded avatar that is not shared with another profile is queued for removal. An external avatar is unlinked, not deleted from its source. The deleting browser also attempts to clear its local reference library, but cannot erase downloaded files or storage on other devices. Provider-held records and legally retained records require separate consideration.

Your choices and rights

Depending on the law that applies to you, you may request access, correction, deletion, a copy of your data, restriction of processing, or object to certain processing. Some rights have exceptions, including obligations to keep financial or dispute records. Account settings do not provide an automatic export of every record; use Support to request assistance. We may ask for information necessary to verify that a request concerns your account.

You may also have the right to complain to a relevant data-protection authority. Exercising a privacy right does not waive mandatory consumer rights.

The Service is intended for adults aged 18 or over. If you believe a child has supplied personal information, contact us so we can investigate and handle it appropriately.

Security, updates, and contact

We use access controls, encrypted connections when transmitting data to external services, and restricted storage for private uploads. No service can guarantee absolute security. Keep your credentials secure and avoid sharing signed private download links.

We update this policy when practices change, revise the date above, and provide notice of material changes through the Service where appropriate.

For privacy questions or requests concerning your account, open a Support ticket. This channel requires sign-in. Keep access to your account while a request is being resolved where possible.