Privacy Policy

Last updated: March 2026

VideoFaceSwap.net ("the Service", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered face swap service. By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Account Information

When you sign in via Google OAuth, we collect:

• Email address
• Display name
• Profile picture URL
• Google account ID (for authentication purposes only)

We do not collect or store your Google password.

1.2 Uploaded Media Files

When you use the face swap service, you upload:

• Face photos (JPEG, PNG, WebP)
• Source videos (MP4, MOV)
• Source GIFs
• Source photos for face replacement

These files are processed temporarily and automatically deleted after processing is complete. We do not permanently store your uploaded media. Temporary storage during processing uses encrypted servers.

1.3 Usage Data

We collect non-personal usage data including:

• Task type (video, GIF, or photo face swap)
• Task status (processing, completed, failed)
• Credits consumed
• Timestamps of actions
• Browser type and device information (via standard HTTP headers)

1.4 Payment Information

Payment processing is handled entirely by Stripe. We do not collect, store, or have access to your credit card numbers, bank account details, or other financial information. We only receive confirmation of successful payment, the amount paid, and the associated Stripe transaction ID.

2. How We Use Your Information

• Service delivery: To process your face swap requests and deliver results
• Account management: To manage your account, credits balance, and transaction history
• Authentication: To verify your identity and maintain session security
• Service improvement: To analyze aggregate usage patterns and improve service quality (no individual files are used)
• Customer support: To respond to your inquiries and resolve issues
• Legal compliance: To comply with applicable laws, regulations, and legal processes

We do NOT use your uploaded images or videos to train AI models. We do NOT sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

3.1 File Processing and Deletion

• Uploaded files are processed on secure, encrypted cloud servers
• All uploaded source files (videos, photos, GIFs, face images) are automatically deleted after processing is complete
• Generated result files are available for download for a limited period and then automatically deleted
• We do not create permanent copies or backups of your uploaded media

3.2 Security Measures

• All data transmission uses TLS/SSL encryption (HTTPS)
• JWT-based authentication with short-lived access tokens
• Database connections use encrypted channels
• Server infrastructure protected by enterprise-grade firewalls
• Regular security monitoring and incident response procedures

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Google OAuth: Authentication — Google Privacy Policy
• Stripe: Payment processing — Stripe Privacy Policy
• Cloudflare: CDN and DDoS protection — Cloudflare Privacy Policy
• Vercel: Hosting and serverless infrastructure — Vercel Privacy Policy
• Google Cloud Vision API: Face detection for automatic face cropping — Google Cloud Privacy Notice

We share only the minimum data necessary with each service. For example, Stripe receives only the payment amount and metadata — not your uploaded files. Google Cloud Vision API receives a compressed, temporary copy of your face photo solely for face detection, which is not stored.

5. Cookies and Local Storage

We use browser local storage (not cookies) to store:

• Authentication tokens (access token and refresh token)
• Cached user profile data (name, email, credits balance)

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. We do not participate in any advertising network.

6. Your Rights

Depending on your location, you may have the following rights under applicable data protection laws (including GDPR, CCPA, and similar regulations):

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Deletion: Request deletion of your account and all associated data
• Right to Restriction: Request restriction of processing of your personal data
• Right to Data Portability: Request a machine-readable copy of your data
• Right to Object: Object to processing of your data in certain circumstances
• Right to Withdraw Consent: Withdraw your consent at any time by ceasing to use the Service

To exercise any of these rights, contact us at privacy@videofaceswap.net. We will respond to verified requests within 30 days.

7. Data Retention

• Uploaded media files: Deleted automatically after processing (typically within minutes)
• Generated result files: Available for download for up to 7 days, then automatically deleted
• Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request
• Transaction records: Retained for 7 years as required by financial regulations
• Server logs: Retained for up to 30 days for security and debugging purposes

8. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete such data. Additionally, users must not upload images or videos depicting minors for face swap processing.

9. International Data Transfers

Your data may be processed in the following regions: Japan (Vercel serverless functions), Singapore (database), and the United States (Stripe payments, Cloudflare CDN). By using the Service, you consent to the transfer of your information to these locations. We ensure that all transfers comply with applicable data protection regulations, including GDPR standard contractual clauses where applicable.

10. Biometric Data Disclosure

Our Service uses AI to analyze facial features (facial landmarks, geometry, skin tone) in uploaded photos and videos for the sole purpose of performing face swap processing. This facial analysis data is:

• Generated and used only during the active processing session
• Not stored, retained, or associated with any individual's identity
• Not used for facial recognition, identification, or surveillance purposes
• Not shared with any third party
• Automatically discarded upon completion of processing

If you are located in a jurisdiction with biometric data protection laws (such as Illinois BIPA, Texas CUBI, or Washington state law), please review this section carefully. By using the Service, you consent to the temporary processing of facial geometry data as described above.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

12. Contact Us

For privacy-related inquiries, data requests, or concerns, contact us at:

• Privacy inquiries: privacy@videofaceswap.net
• Data deletion requests: privacy@videofaceswap.net
• General support: support@videofaceswap.net
• Legal matters: legal@videofaceswap.net