StyleMorph AI
Data Protection & Privacy

Privacy Policy

Effective Date: October 2026

1. Overview & Commitment

At StyleMorph AI, your privacy is our core priority. We believe AI creativity should never come at the expense of your personal privacy. This Privacy Policy details how we handle user accounts, uploaded images, payments, and generated artwork.

2. Information We Collect

  • Account Information: When registering via email or OAuth, we collect your email address and unique authentication ID managed securely by Supabase Auth.
  • Image & Content Data: Images you upload for style morphing. We process these strictly to execute your requested AI transformation.
  • Payment & Billing Data: Payment details (credit cards, PayPal, billing addresses) are handled directly by our Merchant of Record, Paddle.com. We never store, process, or have access to your full credit card numbers or banking secrets.
  • Technical Logs: Minimal operational logs (IP address, browser type, error traces) used strictly for rate-limiting, DDoS defense, and debugging.

3. AI Data Retention & Model Training Policy

Important: We do NOT use your uploaded photos or private creations to train or fine-tune public AI models.

Uploaded source images are held in secure, ephemeral memory solely for the duration required to complete image synthesis and return the output to your browser session. We do not maintain unencrypted public archives of your personal photos.

4. Third-Party Service Providers

We work with trusted industry-standard infrastructure providers:

  • Paddle.com: Merchant of Record and payment gateway. Operates under PCI-DSS Level 1 compliance.
  • Supabase: Encrypted PostgreSQL database and JWT session authentication.
  • GPU Compute Partners: High-performance isolated inference clusters that process style transformations without data persistence.

5. User Rights (GDPR & CCPA Compliance)

Depending on your jurisdiction, you have the right to:

  • Request an export of all personal data held about you.
  • Request full deletion of your account and associated credit records (“Right to be Forgotten”).
  • Rectify inaccurate personal details.
  • Withdraw consent at any time.

To exercise any of these rights, email us at xx458321936@gmail.com. We process all valid requests within 30 days.

6. Cookies & Local Storage

We use strictly necessary cookies and local storage tokens solely to maintain your signed-in session state and theme preferences. We do not sell your personal information or deploy invasive cross-site advertising trackers.

7. Contact the Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to:

Email: xx458321936@gmail.com