Privacy Policy

1. Who We Are

Swaply is an AI face swap service for TikTok and Instagram Reel videos, operated by Swaply LLC. In this policy, “we,” “us,” and “our” refer to Swaply LLC. “Service” means the Swaply website, swaply.studio, and any related tools or APIs.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address. If you sign in with Google, we receive your name, email, and profile picture from Google. Authentication is handled by Supabase on our behalf.

2.2 Billing Information

Payments are processed by Stripe. We never see or store your full card number, CVV, or bank details. Stripe returns a token, card brand, last four digits, and expiration date, which we store so you can manage your subscription.

2.3 Photos You Upload (Source Face)

To perform a face swap, you upload a photo of a face (typically a selfie). Our AI model extracts facial features from this photo so it can place that face into a target video. We process and store this photo for the duration of your swap job and in your personal swap history for easy re-use.

2.4 Videos You Provide (Target Video)

You may either paste a public TikTok or Instagram Reel URL, or upload a video file (MP4, MOV, or WebM). When you paste a URL, we fetch the publicly available video from that platform on your behalf. When you upload a file, we store it long enough to process your swap.

2.5 Generated Output Videos

The face-swapped video that Swaply produces is stored in your account so you can download, re-download, or share it. You can delete any output video from your swap history at any time.

2.6 Usage and Device Data

We automatically collect standard web server data — IP address, browser type, operating system, referring URL — as well as anonymized product analytics (swap counts, feature usage, error logs). This data is used for security, debugging, and product improvement.

3. Biometric and Facial Data

The AI face swap process requires analyzing facial features from the photo you upload. Depending on your jurisdiction, this may be considered biometric data.

• +We process facial features solely to generate your requested face swap — never for identification, surveillance, advertising, or training AI models.
• +Facial feature embeddings are not shared with third parties outside the AI model provider that generates your swap.
• +You can delete your uploaded photos and associated facial data at any time from your swap history.
• +By uploading a photo, you confirm that you are the person in the photo, or that you have the explicit consent of the person in the photo to use their likeness with Swaply.

4. How We Use Your Information

• +Generate the face-swapped videos you request
• +Maintain your account, swap history, and subscription
• +Process payments and send billing receipts
• +Send transactional emails (email verification, billing alerts, important service notices)
• +Detect abuse, fraud, and violations of our Terms of Service
• +Improve model quality and product performance using aggregated, anonymized usage metrics
• +Comply with legal obligations

We do not sell, rent, or share your photos, videos, or personal information with third parties for their marketing purposes. We do not use your uploaded photos or videos to train AI models.

5. Third-Party Services

We rely on the following third-party services to operate:

• +Supabase — authentication, database hosting, and secure file storage
• +Stripe — payment processing and subscription management
• +Google (Sign-In) — optional authentication provider
• +AI face swap model provider — processes your source photo and target video to generate the output (processing only, no data retention beyond the active job)
• +TikTok and Instagram — when you paste a URL, we fetch the publicly available video from these platforms

Each third-party service has its own privacy policy. We share only the minimum data required for each service to function.

6. Data Storage & Security

Your photos, videos, and account data are stored on secured servers operated by Supabase and our cloud provider. We implement industry-standard security measures, including:

• +Encryption in transit for all connections (TLS/HTTPS)
• +Encryption at rest for database and file storage
• +Role-based access control — only your account can access your swap history
• +Token-based authentication with secure session management
• +Regular dependency updates and security reviews

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Data Retention

• +Source photos and output videos — stored in your swap history while your account is active. Deleted within 30 days if you delete the swap or close your account.
• +Uploaded target videos — deleted within 30 days of swap completion (or sooner, when the swap is purged from your history).
• +Account data — deleted within 30 days of account closure.
• +Billing records — retained for 7 years as required by tax and accounting laws.
• +Aggregated, anonymized usage metrics — may be retained indefinitely.

8. Your Rights

Depending on your jurisdiction (GDPR, CCPA, or similar), you may have the right to:

• +Access the personal data we hold about you
• +Correct inaccurate or incomplete data
• +Request deletion of your photos, videos, or account
• +Export your data in a portable format
• +Object to or restrict certain processing
• +Withdraw consent at any time
• +Lodge a complaint with a data protection authority

You can delete individual swaps (including the source photo and output video) directly from your swap history. For any other request, email hello@swaply.studio. We will respond within 30 days.

9. Cookies

We use essential cookies for authentication and session management, and privacy-focused product analytics (aggregated page-view and feature-usage data, no cross-site tracking). We do not use advertising cookies or third-party tracking cookies.

10. Children’s Privacy

Swaply is not directed to anyone under 18. We do not knowingly collect personal data or face images from children. If you believe a minor has uploaded content to Swaply, email hello@swaply.studio and we will delete the data promptly. Uploading a photo or video of a minor is also a violation of our Terms of Service.

11. International Data Transfers

Our servers are located in the United States. If you access Swaply from outside the US, your data — including uploaded photos and videos — will be transferred to and processed in the US. By using Swaply, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced with a prominent notice on the site and by updating the “Last updated” date. Continued use of Swaply after changes take effect constitutes acceptance.

13. Contact

For any privacy-related question or request, contact us: