Privacy Policy

1. Introduction

TrendMe AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information from Google Sign-In

When you sign in with Google, we request access to the following information from your Google Account:

• Basic profile information: Your name, email address, and profile picture
• Google Account ID: A unique identifier for your Google account

Purpose: This information is used solely to create and manage your account, authenticate your identity, and display your profile information within our application. We do not request access to any other Google services or data (such as Gmail, Google Drive, or Calendar).

Limited Use Disclosure: TrendMe AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use your Google user data to provide and improve user-facing features that are visible in our application.

2.2 Images and Content You Upload

When you use our face swap service, we temporarily process:

• Photos you upload: Used only for generating face-swapped images
• Generated images: AI-created images stored in your account history
• Template selections: Your preferences for improving user experience

Important: Uploaded photos are processed immediately and are NOT permanently stored on our servers. Only the final generated images are saved to your account history, and you can delete them at any time.

2.3 Usage Information

We automatically collect certain information when you visit our site:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website
• Search queries

3. How We Use Your Information

We use the information we collect for the following specific purposes:

3.1 Google Account Information

• Authentication: Verify your identity and manage your login sessions
• Account Management: Create and maintain your user profile
• Display: Show your name and profile picture in the application interface
• Communication: Send service-related notifications to your email (if necessary)

3.2 Image Processing

• Process uploaded photos to generate face-swapped images
• Store generated images in your account history
• Display your generation history to you

3.3 Service Improvement

• Analyze usage patterns to improve performance
• Detect and prevent fraud or abuse
• Respond to support requests
• Comply with legal obligations

4. Data Storage and Retention

4.1 Where We Store Data

Your data is stored securely using Google Sheets for user information and generation history. Generated images are processed through our AI service and temporarily stored during your session.

4.2 How Long We Keep Data

• Account information: Retained until you delete your account
• Uploaded images: Processed immediately and NOT permanently stored (deleted after processing)
• Generated images: Stored in your history until you manually delete them
• Login activity logs: Last 50 login records per user
• Usage logs: Retained for 90 days for security and analytics

When you delete your account, all associated data (profile information, generated images, and activity logs) is permanently deleted from our systems within 30 days.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers (Limited Sharing)

We share minimal data with trusted third-party service providers who help us operate our service. These providers are contractually obligated to protect your data:

• Google: Authentication services (Google Sign-In) and data storage (Google Sheets for user database)
• Image3 API: AI face swap processing (images are processed and not stored by the provider)
• Vercel: Hosting and deployment infrastructure

Important: We do NOT share your Google account information (name, email, profile picture) with Image3 API or any other third parties except Google and Vercel for infrastructure purposes.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• HTTPS encryption for all data transmission
• Secure authentication via Google OAuth
• JWT tokens with 30-day expiration
• Server-side API key protection
• Regular security audits and updates
• Access controls and monitoring

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please see our Cookie Policy.

7.1 Types of Cookies We Use

• Essential cookies: Required for authentication and core functionality
• Performance cookies: Help us understand how you use our site
• Functional cookies: Remember your preferences and settings

8. Your Privacy Rights

Depending on your location, you may have the following rights:

8.1 Access and Portability

You can access your personal information through your account settings. You can request a copy of your data in a portable format.

8.2 Correction and Update

You can update your profile information at any time through your account settings.

8.3 Deletion

You can delete your account and all associated data at any time through the Security tab in your account settings. This action is permanent and cannot be undone.

8.4 Opt-Out

You can opt out of non-essential data collection by adjusting your browser settings or contacting us.

8.5 Withdraw Consent

Where we rely on your consent to process your data, you can withdraw that consent at any time.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your data.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

14. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

15. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or shared
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

Note: We do not sell your personal information.

16. Google API Services Compliance

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

16.1 Scopes We Request

We only request the minimum necessary permissions from your Google Account:

• openid: To verify your identity
• profile: To access your name and profile picture
• email: To access your email address

We do NOT request access to any other Google services such as Gmail, Google Drive, Calendar, Photos, or Contacts.

16.2 Limited Use Requirements

We strictly comply with Google's Limited Use requirements:

• Your Google data is used ONLY to provide user-facing features visible in our application
• We do NOT transfer your Google data to third parties (except as required for service operation)
• We do NOT use your Google data for advertising or marketing
• We do NOT allow humans to read your Google data (except for security or legal compliance)
• We do NOT use your Google data for credit-worthiness or lending

16.3 Data Security

All data received from Google APIs is transmitted and stored securely using industry-standard encryption (HTTPS/TLS). We implement appropriate security measures to protect your Google account information from unauthorized access.