aalterframe

Privacy Policy

Last updated: July 2, 2026

This policy explains what Alterframe("we") collects when you use Alterframe, why, and what your choices are.

What we collect

  • Account data: name, email address, and a hashed password.
  • Content you upload: face photos, target videos, and the generated output videos.
  • Job and billing records: swap jobs (duration, status, credits charged, your per-job consent confirmation), credit purchases, and your credit ledger. Payments are processed by Stripe — we never receive or store your card number.
  • Technical data: standard server logs (IP address, browser, timestamps) used for security and abuse prevention.

Face data

Photos and videos of faces are sensitive. We process them only to perform the swap you requested and to screen for content that violates our Content Policy. We do not use your photos, videos, or outputs to train AI models, we do not build face-recognition profiles, and we never sell them or share them for advertising.

Who processes it for us

  • DigitalOcean — application hosting and file storage. Uploads are stored privately and accessed via short-lived signed URLs.
  • AI inference providers (currently WaveSpeed AI) — receive your face photo and target video via time-limited URLs solely to generate your output, subject to their own retention limits.
  • Stripe — payment processing.

We may also disclose data where required by law, to enforce our Terms, or to report child sexual abuse material to authorities.

Retention and deletion

Uploads and outputs are retained so you can access your swap history while your account is active. You can request deletion of specific content or your entire account at any time by emailing [email protected]; we complete deletion requests within 30 days. Billing records are kept as long as tax and accounting law requires.

Your rights

Depending on where you live (including the EEA, UK, and California), you may have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to complain to your data-protection authority. Exercise any of these via [email protected]. Where GDPR applies, our legal bases are performance of a contract (providing the Service you request), legitimate interests (security and abuse prevention), and legal obligations.

Children

The Service is for adults 18+. We do not knowingly collect data from anyone under 18, and uploads depicting minors are prohibited.

Security

Data is encrypted in transit, stored in access-controlled infrastructure, and uploads are only reachable through short-lived signed URLs. No system is perfectly secure; we will notify affected users of a breach as required by law.

Changes and contact

We will post changes to this policy here with a new date. Questions: [email protected].