Privacy Policy

What this policy covers

This policy explains how SafePhoto.ai (operated by ZeroFriction Labs LLC) collects, uses, stores, and deletes information when you use our website, upload photos, and receive AI-generated portraits.

Data we collect

• Contact details: email you provide; optional name.
• Account data: if you sign in with Google or Apple, we receive your name, email, and basic profile info from that provider.
• Upload content: photos you upload, style selections, gender preference, generated images, high‑res selections, and any hairstyle/beard edits you request.
• Artist marketplace: if you create styles, we store your style names and prompts, test renders, usage and earnings statistics, and payout records.
• Payment data: handled by processors (Stripe, Paystack, Rapyd). We receive payment status/metadata, not full card or wallet details.
• Usage/device info: IP/country (for pricing and fraud checks), device/browser data, logs.
• Support: messages you send us.

How we use your data

• Provide the service: process uploads, generate portraits, deliver galleries, handle refunds/high‑res requests.
• Payment and fraud prevention: pricing, FX display, verify successful payment, prevent abuse.
• Product improvement and support: troubleshoot, measure performance, improve styles and UX.
• Security: detect spam, abuse, and unauthorized access.
• Communications: order receipts and status updates, reminders about incomplete orders, and — for artists — style review decisions and payout reports. You can opt out of non-essential emails.
• Marketplace operation: track style usage to calculate artist revenue shares and settle weekly payouts.

AI processing

We process your photos to generate portraits using our pipelines and trusted model providers (e.g., OpenAI and fal.ai). These providers process images only to fulfill your order and do not use API content to train their models. We do not sell your photos or outputs, and we do not use them to train new models without your explicit consent.

Sharing with processors

We share data only with service providers that help us run SafePhoto.ai:

• Cloud hosting/CDN and storage for uploads and generated images.
• Payment processors (Stripe for cards; Paystack for M-Pesa and other mobile money) for checkout, payouts, and fraud checks.
• AI model providers (OpenAI, fal.ai) that generate your portraits and edits.
• Sign-in providers (Google, Apple) when you choose to log in with them.
• Email/notifications (e.g., Mailgun) for receipts and status updates.
• Analytics (Google Analytics 4, Vercel Analytics), logging, and error monitoring to keep the service reliable.

All processors are bound by contracts to protect your data.

Retention and deletion

• Photos and generated images: kept for a limited time to deliver your order (target: 30 days after completion), then removed from active storage. You can request earlier deletion.
• Account/session/payment metadata: retained as needed for legal, accounting, and fraud-prevention purposes.
• Artist styles, test renders, and earnings records: kept while your account is active or your style is published, and as required for accounting.
• Support messages: retained as needed to resolve requests and comply with law.

Cookies and similar tech

We use essential cookies for sessions/auth, plus Google Analytics 4 and Vercel Analytics to understand aggregate usage (page views and product events such as checkout steps). Analytics data is aggregated and not used to identify you. You can adjust browser settings to limit non‑essential cookies.

Your rights

Depending on your region, you may have the right to access, correct, delete, or export your data, and to object or restrict certain processing. Contact us to exercise these rights; we will verify your request.

Children

SafePhoto.ai is not intended for children under 18. We do not knowingly collect data from minors.

International transfers

Data may be processed in the United States and other countries where our processors operate. We use contractual safeguards where required.

Security

We use encryption in transit, access controls, least‑privilege credentials, and monitoring. No system is perfectly secure—please report issues promptly.

How to delete your data

Email us with your upload ID or account email and a deletion request. We will remove remaining uploads/outputs and close sessions as allowed by law.

Contact

Changes

If we change this policy, we’ll update the “Last updated” date and notify you in-app or by email when appropriate.