Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information: name, username, email, phone number, and country provided at registration;
• Payment records: amount, provider, and payment reference for every transaction — never full card numbers or payment credentials, which are handled entirely by our payment providers;
• IP address: recorded at registration, login, and payment time, used for security, fraud prevention, and the device-lock system described below;
• Device fingerprint: a non-reversible hash used to enforce one-account-per-device access and detect account sharing;
• Upload metadata: filename, file type, and size for any reference image you upload during a session (the file itself is stored securely; metadata is retained for abuse-prevention purposes even if the file is later removed);
• Session logs: engine selected, session duration, timestamps, and IP/device used for each realtime session;
• API usage logs: which internal engine and provider handled each session, for support and cost/abuse monitoring;
• Transformation history: a record of which sessions you've run and when, visible to you in your dashboard's session history.

We use this information for: fraud prevention (detecting account sharing, payment fraud, and abusive usage patterns); abuse investigation (responding to reports of Platform misuse under our Terms & Conditions); service improvement (understanding how the Platform is used so we can improve it); and legal compliance (responding to lawful requests from authorities).

2. Camera & Video Data

Your camera feed is used only to power your live realtime transformation session. We do not record or store your video stream — only session metadata (duration, engine used, timestamps) is retained.

3. How We Use Your Information

We use your information to provide the Platform's services, process payments, prevent fraud, provide support, and improve our engines and infrastructure.

4. Data Security

Sensitive credentials such as API keys and payment provider secrets are encrypted at rest. Passwords are hashed. Access to admin systems is role-restricted and logged.

5. Third-Party Services

We use third-party payment providers (Paystack, Flutterwave) and AI providers (including Decart AI) to deliver our services. These providers process the data necessary to complete payments and transformations under their own privacy policies.

6. Data Retention

We retain account, payment, and session data for as long as your account is active and as required for legal and accounting purposes.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us via our contact page.

8. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or an in-app notice.