Privacy Policy

1. Overview This Privacy Policy explains how GetDates.ai collects, uses, stores, shares, and deletes personal data when you use our website, app, AI photo generation tools, free previews, paid unlocks, and related services. Short version: - We generate AI photos using your uploaded selfies as identity references. - We use OpenAI's image model, including the Images Edit API, to generate photos. - We do not train a per-user model on your selfies. - We do not use your selfies to train our own AI models. - Based on OpenAI's API terms and data-use commitments for business/API services, OpenAI does not use API customer content to train or improve its models unless the API customer explicitly agrees to that use. - Uploaded selfies and generated photos are stored in a private Google Cloud Storage bucket. - Generated photos are not made public by default. - We do not sell your personal data. - You can request deletion of uploaded selfies and generated photos. 2. Personal Data We Collect We may collect the following categories of personal data. Account data: - Email address - Name, if provided - Login and authentication data - Profile settings, preferences, and account status Photo and likeness data: - Uploaded selfies and reference photos - Generated photos - Watermarked previews - Image metadata needed to operate the Service, such as file type, size, upload time, storage path, and generation batch information - Your face, likeness, and other visual characteristics shown in uploaded or generated photos Some laws may treat facial images, likeness information, or related processing as sensitive, biometric, or special category data. We use this information to generate photos, not to identify you in the real world, verify your identity, or run facial recognition. Generation data: - Prompts - Selected scenes, styles, interests, or tags - Generation settings - Model and provider information - Generation status, errors, and usage logs Payment data: - Purchase amount - Purchased package - Stripe customer ID, checkout ID, payment status, and transaction records - Billing details processed by Stripe We do not store your full payment card number. Device, usage, and security data: - IP address - Browser, device, operating system, and approximate location derived from IP address - Pages viewed, features used, buttons clicked, and generation or download events - Cookies or similar technologies - Rate limit, fraud prevention, and security logs Communications: - Support emails and messages - Feedback - Deletion, access, refund, or privacy requests 3. How We Use Personal Data We use personal data to: - Create and manage your account. - Let you upload photos. - Generate AI photos. - Show free watermarked previews. - Unlock and deliver clean full-resolution downloads after purchase. - Store your uploaded and generated photos privately. - Process payments and prevent payment fraud. - Provide customer support. - Debug errors and improve reliability. - Prevent abuse, security incidents, illegal use, and violations of our Terms. - Enforce our Terms. - Maintain records needed for tax, accounting, legal, dispute, and compliance purposes. - Send service messages, transactional emails, and support replies. - Send marketing messages only where allowed by law and your communication choices. - Create aggregate or de-identified analytics to understand and improve the Service. We do not use uploaded selfies or generated photos to train our own AI models. We do not sell personal data. 4. AI Processing and OpenAI When you generate photos, we may send the following to OpenAI: - Selected uploaded selfies or reference photos - Scene or style reference images - Prompts and generation instructions - Technical request data needed to receive the generated image OpenAI processes these inputs to generate outputs for the Service. This is third-party processing. OpenAI may process data in accordance with its API terms, data processing terms, security practices, and applicable law. We use OpenAI's image model at generation time. Your selfies are reference inputs for that generation request. They are not used by us to train a per-user model. 5. Legal Bases for EU, EEA, UK, and Swiss Users Where GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases: Contract: We process account data, uploads, prompts, generated photos, payments, and downloads to provide the Service you request. Consent: We rely on your consent for processing uploaded photos, face, likeness, and AI generation inputs where consent is required. Where facial or likeness data is treated as sensitive, biometric, or special category data, we rely on explicit consent or another valid legal basis under applicable law. You may withdraw consent, but this may prevent us from providing photo generation. Legitimate interests: We process limited data for security, fraud prevention, abuse prevention, support, analytics, Service improvement, and enforcing our Terms, where those interests are not overridden by your rights. Legal obligation: We process and retain data where needed for tax, accounting, regulatory, consumer protection, law enforcement, or legal compliance. 6. Consent for Photos and Likeness By uploading photos, you confirm that the photos are of you or that you have express permission from the person shown. You consent to GetDates.ai collecting, storing, using, and disclosing the uploaded photos to service providers, including OpenAI and Google Cloud, to provide AI photo generation and related Service features. You may withdraw consent by deleting your photos or contacting us at support@getdates.ai. If you withdraw consent, we may no longer be able to generate photos for you. 7. How We Share Personal Data We share personal data only as needed to operate, secure, and provide the Service. Service providers may include: - OpenAI, for AI image generation. - Google Cloud Storage, for private storage of uploaded and generated photos. - Supabase, for authentication, database, and account data. - Vercel or similar hosting providers, for website and app hosting. - Stripe, for payment processing. - Email and support providers, for service emails and customer support. - Security, logging, analytics, and fraud prevention providers, where used. We may also share information: - If required by law, subpoena, court order, or valid legal process. - To protect rights, safety, users, the Service, or the public. - To investigate fraud, abuse, illegal activity, or Terms violations. - In connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction. - With your direction or permission. We do not sell personal data. We do not share uploaded selfies or generated photos for cross-context behavioral advertising. 8. Storage and Security Uploaded selfies, generated photos, clean full-resolution images, and watermarked previews are stored in a private Google Cloud Storage bucket. Clean full-resolution images are not publicly available by default. Free previews are watermarked and downscaled. Paid clean downloads are delivered only after an entitlement or purchase is verified. We use technical and organizational safeguards designed to protect personal data, including private storage, access controls, authentication, signed URLs, and standard encryption in transit and at rest where provided by our vendors. No system is perfectly secure. You should use a strong login method and avoid uploading photos you are not comfortable processing through an online AI service. 9. Retention We keep personal data only as long as reasonably needed for the purposes described in this Policy, unless a longer period is required or allowed by law. Uploaded selfies: We keep uploaded selfies while your account is active and while they are needed to generate photos, unless you delete them sooner or ask us to delete them. Generated photos: We keep generated photos while your account is active so you can view, unlock, and download them, unless you delete them sooner or ask us to delete them. We may also apply storage limits and delete older generated batches as part of normal Service operations. Free preview session data: If you generate free previews without completing signup or purchase, we may retain the session data, watermarked previews, and related technical records for a limited period to operate the funnel, prevent abuse, and let you claim or purchase results. We may delete unclaimed free preview sessions after a reasonable period. Payment and transaction records: We retain payment, tax, accounting, refund, chargeback, and purchase records as long as needed for legal, accounting, tax, and dispute purposes. Security and abuse records: We may retain limited logs and enforcement records where needed to protect the Service, prevent fraud or abuse, resolve disputes, or comply with law. Deletion requests: When you request deletion of uploaded selfies or generated photos, we will delete active copies from our systems within a reasonable period, generally within 30 days, unless we need to keep limited information for legal, security, accounting, fraud prevention, dispute, or compliance reasons. Backup deletion may take longer according to provider backup cycles. 10. Your Privacy Rights Depending on where you live, you may have rights to: - Access personal data we hold about you. - Request correction of inaccurate data. - Request deletion of personal data. - Object to or restrict certain processing. - Withdraw consent where processing is based on consent. - Request a copy of your data in a portable format. - Opt out of sale or sharing of personal data, where applicable. - Appeal a denied privacy request, where applicable. - Lodge a complaint with a data protection authority. To exercise rights, contact support@getdates.ai. We may need to verify your identity before responding. Withdrawing consent or deleting photos may limit or disable photo generation features. 11. U.S. State Privacy Disclosures Some U.S. state privacy laws require additional disclosures. Categories of personal data collected: - Identifiers, such as email address, account ID, IP address, and Stripe customer ID. - Commercial information, such as purchases and transaction records. - Internet or network activity, such as device data, logs, and usage events. - User content, such as uploaded photos, prompts, generated photos, and support messages. - Sensitive personal data, where applicable, such as facial images or likeness data in uploaded photos. - Approximate location derived from IP address. Purposes: We use these categories for the purposes described in this Policy, including providing the Service, AI generation, payments, security, support, compliance, and analytics. Sale or sharing: We do not sell personal data. We do not share uploaded selfies or generated photos for cross-context behavioral advertising. Sensitive data: We use sensitive personal data only to provide the Service, secure the Service, comply with law, or as otherwise permitted by law. 12. International Transfers We and our service providers may process personal data in the United States, the European Economic Area, and other countries. These countries may have data protection laws different from your country. Where required, we use appropriate safeguards, such as data processing agreements, standard contractual clauses, or other valid transfer mechanisms. 13. Cookies and Similar Technologies We may use cookies and similar technologies to: - Keep you signed in. - Operate checkout and account features. - Remember preferences. - Measure usage and improve the Service. - Prevent fraud and abuse. Where required by law, we will request consent before using non-essential cookies. You can also control cookies through your browser settings. 14. Automated Processing AI photo generation is automated processing that creates images based on your uploads and prompts. We do not use automated processing to make decisions that produce legal or similarly significant effects about you. We may use automated systems to detect abuse, enforce usage limits, reject unsafe content, or protect the Service. 15. Children's Privacy GetDates.ai is only for adults 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor's personal data or image has been uploaded, contact support@getdates.ai and we will take appropriate steps to delete it. 16. Dating Apps and Third-Party Platforms GetDates.ai is not affiliated with Tinder, Bumble, Hinge, Match Group, Meta, TikTok, or other dating or social platforms unless expressly stated. If you upload generated photos to a third-party platform, that platform's own terms and privacy policy apply. You are responsible for following platform rules, including any rules about AI-generated or synthetic media. 17. Changes to This Policy We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date. If changes are material, we may provide additional notice. 18. Contact Questions, requests, or complaints about this Privacy Policy or your data can be sent to: Email: support@getdates.ai Website: https://getdates.ai