Privacy Policy

1. Who this policy covers

This Privacy Policy explains how aiclothesremover.org handles information when you visit the website or use the AI Clothes Remover studio. Contact us at support@aiclothesremover.org for privacy questions or requests.

2. Information we receive

We may receive your name, email address, account identifiers, sign-in and session data, and messages you send to support. When you upload a source photo or receive a result, we process the file, its media identifier, size and type, task settings, task state, moderation and quality state, retention class, favorites, deletion state, and timestamps. We keep the minimum information needed to authorize private reads, complete the task, protect the service, and maintain the credit ledger.

We also receive account activity such as sign-in events, task and download requests, selected quantity and resolution, point reservations and settlements, and error records. Basic device, browser, network, and diagnostic information may be processed for security, reliability, rate limiting, and abuse prevention. The service does not use a private image as a public gallery item by default.

Before an upload is accepted, the browser may keep one temporary source-photo draft in its own IndexedDB storage so a blocked Google sign-in redirect can restore the editor. The draft is tied to that browser tab, expires after one hour, and is removed after upload, clearing the photo, signing out, switching accounts, or expiry. It is not a server copy or a permanent media record. If browser storage is unavailable, you can still choose the photo again after sign-in.

3. Why we use it

We use information to create and deliver the requested covered outfit preview, verify that an account may use a daily allowance or points, show task history, provide private downloads, apply favorites and deletion, retain eligible media, answer support questions, prevent fraud and abuse, debug failures, and comply with legal obligations.

4. AI and payment providers

If you choose Google sign-in, Google verifies your identity and returns the basic profile details needed to create or access your account, such as your name, email address, profile image, provider account identifier, and email verification status. We request only the openid, email, and profile scopes. We do not request access to Gmail, Google Drive, Google Calendar, or other Google content.

A source image and required task data may be sent to APIMart for image generation, input moderation, and output or quality checks. APIMart and its delivery infrastructure may process or retain data under their own terms and technical retention behavior. We copy accepted results to this project's private storage, but deleting the project copy does not prove that a third party has immediately deleted every processing or delivery copy.

Waffo processes checkout and subscription payment events. We receive the account and order information needed to match a verified payment to the correct product, amount, currency, environment, billing cycle, points, and storage qualification. We do not receive or store full payment card numbers. A Test checkout is kept separate from production entitlements and must not grant production points or permanent storage.

We may use Cloudflare infrastructure for Workers, D1 database, R2 object storage, queues, email routing or delivery, and security controls. These providers process data only as needed for the configured service. We do not promise that every provider has identical retention or deletion timing.

5. Retention and deletion

Temporary source media is normally available for 24 hours from upload, and temporary result media is normally available for 24 hours from completion. A first verified paid entitlement from a subscription or point pack upgrades still-unexpired source and result media, as well as subsequent generated media, to permanent project storage. Once qualified, permanent storage remains after a subscription ends or points are spent; permanent means no automatic expiry in this project, while you can still delete media or the account. Account deletion removes project records and private media according to the deletion workflow and any required audit retention.

Task, payment, security, and ledger records may be retained for as long as needed to prevent duplicate crediting, resolve disputes, meet accounting or legal requirements, and protect the service. A deletion request does not control a provider's independent legal or backup retention. Contact support if you need the current status of a request.

6. Your choices

You may access, download, favorite, or delete your own media through authorized account routes. You may request correction or deletion of account information by contacting support@aiclothesremover.org. We may need to verify account ownership before responding. You can stop using optional communications through the available message controls; essential account and security messages may still be sent.

7. Security and international processing

We use access controls, private object keys, server-side authorization, expiring retention logic, and operational safeguards appropriate to the service. No online system can guarantee absolute security. The service may process information in locations used by Google, Cloudflare, APIMart, Waffo, and other configured providers, which may be outside your location.

8. Cookies and changes

Essential cookies and browser storage can keep a session, remember preferences, support security, and maintain language behavior.

We use Google Analytics 4 on public pages to understand visits, traffic sources, and browser or device usage. Google may process a pseudonymous browser identifier and basic visit information. Analytics cookies are configured with a lifetime of up to 365 days. We send fixed public page addresses and source domains, excluding query strings and fragments. We do not send uploaded photos, image filenames, private result or download links, task identifiers, names, email addresses, or account IDs to Analytics. Account, sign-in, studio, and other private pages are excluded. Automatic form, outbound-link, and file-download measurement is disabled, as are advertising storage and personalization.

You can block Analytics through your browser settings or the Google Analytics opt-out browser add-on. We also skip Analytics when your browser sends Do Not Track or Global Privacy Control. Blocking Analytics does not prevent sign-in or photo generation. See Google's Privacy Policy for how Google handles data.

We may update this policy when the service or providers change. The effective date at the top of this page identifies the current version.

9. Contact

For privacy questions, access or deletion requests, contact support@aiclothesremover.org. Please describe the account email and request without attaching a private image unless a support response provides a secure process.