Privacy Policy

Who we are

Multiple Face Swap AI is an independent multiple face swap service at multiplefaceswapai.com, run by an individual developer ("we", "us"), not a company. This policy explains what we collect, why, and how we handle it. Questions go to support@multiplefaceswapai.com.

What we collect

1. Account data: the email address you sign up with, how you sign in (email or Google), and a password hash if you use email sign-in. We never store your password itself.
2. What you upload: the photos, GIFs or videos you want changed and the face images you add.
3. What we generate: the swapped photo, GIF or video, kept so you can download it.
4. Orders and credits: what you bought, what each swap cost, and your balance.
5. Technical data: your IP address and request times, used to rate-limit requests and block abuse, plus page analytics if analytics is switched on.

We do not ask for your real name, address or phone number, and we never store card numbers.

How long uploads and results are kept

Uploads and results are deleted 7 days after you upload them. Our storage deletes them automatically; nobody looks at them in between unless an abuse report names them. Download your result within those 7 days: after that we cannot recover it.

The record that a swap happened (format, cost, status, time) stays in your account history after the files are gone.

Face data

Face swapping works on faces, and some laws treat face images and the face geometry derived from them as biometric data. Examples are the EU General Data Protection Regulation (Article 9, special categories of data) and the Illinois Biometric Information Privacy Act (BIPA), which covers scans of face geometry.

Legal sources

Read the official source texts:

• GDPR, Article 9
• Illinois BIPA (740 ILCS 14)

How we handle face data

• What is processed: the face images you add and the faces in the photo, GIF or video you upload. The AI provider locates the faces and maps them to produce the swap.
• Why: only to produce the result you asked for. We do not use face data to identify anyone, to build profiles or face databases, or to train AI models.
• How long: the 7-day schedule above, then permanent deletion from our storage.
• Consent: by uploading you confirm that everyone whose face appears, or whose face you add, has agreed to it (see the Acceptable Use Policy). For users in the EU and UK, the legal basis for processing face data is that explicit consent.
• Never sold: we do not sell, lease or trade face data, or profit from it in any other way.

Why we use your data

| Purpose | Data | Legal basis (EU/UK) | | ---------------------------------- | ------------------------------ | -------------------------- | | Run your account and deliver swaps | Account data, uploads, results | Contract | | Process face images | Uploads, face images | Explicit consent | | Take payments and keep records | Orders and credits | Contract, legal obligation | | Prevent abuse and rate-limit | IP address, request times | Legitimate interest | | Analytics, when switched on | Page views | Consent (cookie banner) |

Who processes your data

Only the providers we need to run the service, each receiving the minimum required:

• AI provider (Akool or Replicate, whichever runs the swap at the time): your upload and face images, to produce the result. They process the files under their own terms.
• Cloudflare: hosting, the database and file storage.
• Stripe: payments. See below.
• Resend: sends sign-in and receipt emails to your address.
• Google: only if you sign in with Google (your name, email and profile picture from Google), or if Google Analytics is switched on and you accept analytics cookies.

We do not sell or rent your data, and none of these providers gets it for their own marketing. We may disclose data if the law requires it, or to investigate abuse of the service.

Payments

Stripe takes the card payment. They receive what they need to take it; we receive the result (paid, failed, refunded), an order id and the email on the payment. We never see or store your card details.

Order and credit records are kept for as long as tax and accounting law requires, because they are financial records. Deleting your account does not delete them.

Cookies

We set a session cookie to keep you signed in and a cookie that remembers your cookie choice. The full list is in the Cookie Policy.

Your rights

Write to support@multiplefaceswapai.com to see what we hold about you, correct it, export it, object to its use, withdraw consent or have your account deleted. We answer within 30 days.

• EU and UK: you can also complain to your local data protection authority.
• California: we do not sell or share personal information, and you will not be treated differently for using these rights.
• Illinois, Texas and Washington: face data is handled as described in the Face data section: used only for your swap, deleted on the 7-day schedule, never sold.

If your face appears in something someone else uploaded, write to the same address and we will remove it.

Children

The service is for people aged 18 and over. We do not knowingly collect data from children, and uploading images of minors is not allowed. If you believe a child has used the service, write to support@multiplefaceswapai.com and we will delete the account.

Security

Connections use HTTPS. Stored files sit under random names, secrets in our settings are encrypted at rest, and only the operator can reach the admin tools.

International transfers

Our providers may process data outside your country, including in the United States. Where required, those transfers rely on standard contractual clauses or an equivalent safeguard.

Changes

If this policy changes in a way that matters, we update the date at the top and, for significant changes, tell signed-in users by email.

Contact

Multiple Face Swap AI (operated by an individual developer), United States — support@multiplefaceswapai.com