AIClothSwap
Privacy

Privacy Policy

Last updated: September 12, 2026

You can delete your results anytime

You are always in control of what you create here. Open your Gallery, click the trash icon on any swap, and confirm. We immediately delete the active image files used to serve that result, including the uploaded person photo, outfit references, and generated result. A limited internal safety or quality sample may be retained separately under the rules below. Deleting a gallery result cannot be undone. You can also delete your account and request deletion of associated evaluation data at any time (see Your rights below).

What we collect

When you sign up we store your email, display name, and the authentication token issued by the sign-in provider (Google OAuth or email + password). When you create a try-on, we process the person photo, one or more outfit references, optional instructions, and the generated result. We log the IP address and approximate locale of each request for fraud and abuse prevention.

How we use it

Depending on the option you choose, your photos are processed by our self-hosted generation system or by an AI image-generation provider to produce your clothes-swap result. We also run automated safety checks on uploaded photos and generated results. The resulting image is written to our storage (Cloudflare R2) so you can access it. We do not use your uploads or generations to train any model — yours or anyone else’s.

Advertising and cookies

We use Google AdSense to fund free access. AdSense may load for anonymous visitors and signed-in accounts with no completed payment remaining after refunds. Google may receive device and browser information, IP address, the page being viewed, cookie or advertising identifiers, and ad interaction data to deliver, measure, and protect its advertising services. Whether an ad is personalized depends on your location, consent choices, and Google’s settings.

A signed-in account with at least one payment that has not been fully refunded does not load AdSense. If every payment is fully refunded, ads may return. Learn more about how Google handles advertising data in its advertising policies.

Retention

Source uploads are kept long enough to fulfill the generation and are eligible for automatic deletion after 24 hours via a storage lifecycle rule. Generated result images stay in your gallery until you delete them — the trash icon on any result removes the active image files used to serve it — or until you close your account.

We may retain a limited, access-controlled sample of uploads or results for longer when it is needed for internal safety and quality evaluation. We minimize associated account information, restrict access, do not publish these samples, and do not use them to train a model. You may ask us to delete data associated with your account at any time.

You can request deletion of your account and all associated data by emailing the address at the bottom of this page.

Sharing

We do not sell your data. We use the following infrastructure, systems, and service providers solely to operate the service:

  • Cloudflare — hosting, network, R2 storage, Hyperdrive caching.
  • Supabase — managed PostgreSQL database for accounts and generations.
  • AI image-generation providers — third-party processors used for some generation options. They receive the source photos and instructions needed to produce the selected result.
  • Content-safety systems and providers — self-hosted systems and, where needed, service providers that run automated moderation on uploaded photos and generated results.
  • Google — Google OAuth when you choose Google sign-in, and Google AdSense advertising for visitors without retained paid access.
  • Crisp — live chat / feedback widget shown on our public pages. When it loads it may set a technical cookie and process basic session metadata (such as IP address and the page you are on) to run the chat — not only when you message us. If you start a conversation, the message and any contact details you provide (e.g. email) are processed by Crisp.

Your rights

You can access, export, or delete your data at any time. Email us at the address below and we will respond within a reasonable window.

Security

Traffic is encrypted in transit (HTTPS). Storage at rest is encrypted by the respective providers (Cloudflare R2, Supabase PostgreSQL). Passwords are hashed; we never store plaintext credentials. No system is invulnerable — if you believe an incident has occurred, please email us so we can investigate.

Changes

We may update this policy as the service evolves. The “Last updated” date at the top reflects the most recent change. For material changes we will notify signed-in users by email.

Contact

Questions, requests, or concerns: support@aiclothswap.com.