Privacy Policy

Last Updated: January 7, 2026

1. Introduction

SwapFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered face swap and social media publishing platform.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we collect:

  • Your name and email address
  • Google account identifier
  • Profile picture (if provided)

2.2 Media Content

When you use our services, we may process:

  • Photos and videos you upload for face swapping
  • Reference images used for face swapping
  • Processed/output media files
  • Media metadata (file names, sizes, creation dates)

2.3 API Keys and Credentials

To enable third-party integrations, we store:

  • Your Kie.ai API key (encrypted)
  • OAuth tokens for connected social media accounts (encrypted)
  • Social media platform credentials you provide (encrypted)

2.4 Usage Information

We automatically collect:

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Processing history and job status

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process your face swap requests through third-party AI services
  • Publish content to your connected social media accounts
  • Store and manage your media in Google Drive
  • Communicate with you about the Service
  • Improve and optimize the Service
  • Detect and prevent fraud or abuse

4. Information Sharing

We share your information with:

4.1 Third-Party Service Providers

  • Kie.ai - Receives your media files for AI processing
  • Google - For authentication and Drive storage
  • Supabase - Database and authentication infrastructure
  • Social Media Platforms - Receives content you choose to publish

4.2 Legal Requirements

We may disclose information if required by law or in response to valid legal process.

5. Data Security

We implement security measures including:

  • Encryption of sensitive data (API keys, OAuth tokens) at rest
  • HTTPS encryption for all data in transit
  • Secure authentication through Google OAuth
  • Regular security reviews and updates

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Media files are stored in your Google Drive, not on our servers. You can delete your account and associated data at any time.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data
  • Disconnect social media accounts
  • Export your data
  • Withdraw consent for data processing

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

SwapFlow is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our support channels.