AIFashModel Privacy Policy

Updated: September 6, 2026　·　Effective: September 6, 2026

1. Introduction and Scope

This Privacy Policy applies to the AIFashModel websites (www.aifashmodel.com and app.aifashmodel.com, together the "Service").

The Service is operated by AIFashModel ("we" or "us"). We respect your personal information and protect it in accordance with applicable law. This Policy explains what information we collect, why we collect it, with whom we share it, how we store and protect it, and the rights you have over it.

Please read this Policy carefully before using the Service. If you do not agree with any part of this Policy, please stop using the Service; by continuing to use it, you confirm that you have read and agree to this Policy. This Policy forms part of the AIFashModel Terms of Service.

If you have any questions about this Policy or wish to exercise your privacy rights, you can contact us at support@aifashmodel.com.

2. Information We Collect

2.1 Account Information

The Service is accessed by signing in with a Google account. When you sign in, we receive the account information Google shares based on your authorization, typically your name, email address, and profile picture. We do not collect your Google password, and we do not offer or collect registration by phone number or username and password.

2.2 Information You Provide

As you use the Service, we collect the content you enter and upload, including:

Brand and project details: brand information, marketing goals, industry, and other profile fields you fill in;

Creative inputs: marketing requirements, prompts, copy instructions, and image descriptions you enter;

Uploads: images, videos, and other asset files you upload.

2.3 Information Collected Automatically

When you visit or use the Service, we automatically collect the following technical information to keep the Service running and secure:

Device and access information: device model, operating system, browser type, and IP address;

Log information: access times, activity records, and crash or error reports.

We do not collect your location, and we do not obtain device permissions unrelated to the Service — such as your contacts or photo library — without your separate authorization.

2.4 Payment Information

Paid features of the Service are processed by our third-party payment provider Creem. Sensitive payment details such as card information are collected and processed directly by Creem and are never transmitted to us; we receive only the information necessary to complete your order and support you, such as the order ID, amount, payment status, and time.

3. How We Use Your Information

We use the information we collect only for the following purposes:

Beyond these purposes, we use your personal information for other purposes only with your separate consent, or where otherwise permitted or required by applicable law.

Providing and Maintaining the Service

Creating and managing your account and verifying Google sign-in;

Generating marketing copy, images, and videos according to your requests;

Storing and managing your brand projects, assets, and generation records;

Providing AI-powered marketing Q&A;

Processing credit purchases and providing billing and customer support.

Improving the Service

Analyzing usage to improve existing features and develop new ones;

Evaluating and improving the quality of our AI models;

Improving the overall user experience.

Ensuring Security

Verifying identity and protecting account security;

Preventing, detecting, and investigating fraud, attacks, and other unlawful activity or violations of this Policy.

4. Cookies and Similar Technologies

We use essential cookies and similar technologies to operate the Service, including keeping you signed in, remembering your preferences, and preventing abuse.

When you sign in with Google or pay through Creem, Google and Creem may also set cookies under their own privacy policies.

We also use first-party analytics cookies (through PostHog) to understand how the Service is used — which pages are visited and where users get stuck — so we can keep improving it.

We do not use advertising or cross-site behavioral tracking cookies, and we do not sell or share analytics data with advertising networks. If we introduce marketing cookies in the future, we will update this Policy and, where required by applicable law, ask for your consent first.

5. How We Share Information

5.1 Service Providers

We share information with the following third parties as necessary to operate the Service. They may use your information only to the extent needed to provide their services:

Sign-in services: Google (account sign-in and verification);

Payment services: Creem (order and payment processing);

AI model services: third-party AI model providers (to process your prompts and materials in order to fulfill your generation requests);

Cloud infrastructure: cloud computing, storage, and CDN providers;

Email and support services: used to send service notices and handle your inquiries.

5.2 Legal Requirements

We may disclose your personal information where required to comply with applicable law, legal process, or binding governmental requests, or where necessary to protect the lawful rights and interests of us, you, or other users.

5.3 Business Changes

In connection with a merger, acquisition, or asset transfer, your personal information may be transferred to the successor entity, which will continue to be bound by this Policy.

5.4 We Do Not Sell Your Personal Information

We do not sell your personal information, and we do not share it with third parties in exchange for value without your consent.

6. International Data Transfers

Your personal information is stored in data centers in the United States. Our Service relies on providers located in multiple countries and regions (see Section 5.1). Where your information is transferred outside your country or region, we apply the safeguards required by applicable law — such as standard contractual clauses or equivalent arrangements — so that your information continues to receive protection consistent with this Policy.

7. Storage and Retention

We retain your personal information only as long as necessary for the purposes described in this Policy:

Account information: retained while your account is active; deleted or anonymized after you submit a deletion request under Section 10 and we verify and process it (except where law requires retention);

Creative content and generation records: retained while your account is active, until you delete the content or submit a deletion request;

Transaction records: retained for the period required by tax and applicable law;

Log information: retained for 12 months for security and audit purposes.

Where applicable law requires retention, we retain information as required; once the retention period ends, we delete or anonymize the information.

8. Security Measures

We apply industry-standard technical and organizational measures to protect your personal information, including:

Encrypted data transmission (HTTPS/TLS) and encrypted storage of sensitive data;

Strict access controls and least-privilege management;

Regular security assessments and vulnerability remediation;

Employee confidentiality obligations and data security training.

Please note, however, that no method of transmission or storage is completely secure. We keep improving our safeguards to reduce risk.

9. Data Security Incidents

If a personal data incident occurs, we will, as required by applicable law, promptly inform you of the incident, its possible impact, and the measures we have taken or plan to take. We will contact you through in-app notices or email, and will publish an announcement where necessary.

10. Your Rights

Depending on the laws of your jurisdiction, you may have the following rights over your personal information:

Access: know what personal information we hold about you;

Correction: request correction of inaccurate or incomplete information;

Deletion: request deletion of your personal information (except where law requires retention);

Portability: obtain a copy of your personal information in a commonly used format;

Withdraw consent: withdraw consent you have previously given (this does not affect the validity of processing carried out before withdrawal based on your consent);

Object / opt out: object to certain processing based on our legitimate interests, or opt out of marketing communications;

Complain: lodge a complaint with the data protection authority of your jurisdiction.

To exercise these rights, email support@aifashmodel.com with your request and your account details (no in-product entry point is required). After verifying your identity, we will respond within 30 days (this period may be extended as permitted by law for complex requests, and we will keep you informed of progress).

11. Children's Privacy

The Service is intended for marketing professionals and is not directed at children. If you are under 13 (or under the higher digital consent age applicable in your jurisdiction, such as 16 in the European Economic Area), please do not register for or use the Service.

If we learn that a user below these ages has provided personal information without a guardian's consent, we will delete it as soon as possible.

12. Special Notes on AI-Generated Content

The Service provides AI generation capabilities. The following applies to the images, copy, videos, and other content you generate:

The materials you upload and the prompts you enter are used only to fulfill your generation requests; after the service is completed, we store or delete them according to the retention periods in Section 7;

To fulfill a generation request, your prompts and materials are processed by third-party AI model providers (see Section 5.1);

AI-generated content is for reference only; you should judge its accuracy, legality, and suitability yourself;

Your rights to use generated content, and their limits, are set out in Sections 5 and 6 of the Terms of Service;

We retain intellectual property rights in the AI generation technology and algorithms.

13. Updates to This Policy

We may update this Policy from time to time. When a material change occurs, we will notify you through in-app notices or email before the updated Policy takes effect.

If you continue to use the Service after an updated Policy takes effect, you agree to be bound by the updated Policy; if you do not agree, please stop using the Service and contact us to request deletion of your account data.

14. Contact Us

Operator: AIFashModel (individual developer)

Email: support@aifashmodel.com