Scope
This Privacy Policy applies to TokSwap's website, app, account features, upload tools, AI generation workflows, billing flows, support workflows, administrative tools, and related services. It does not apply to third-party websites, payment portals, app stores, social platforms, or external services that TokSwap does not control.
By using TokSwap, you understand that TokSwap may process media depicting you or other people. Depending on where you live, face imagery, likeness data, or other identifying traits may be treated as sensitive, biometric, or specially protected data. You must only upload this type of content when you have the required consent and legal authority.
Information you provide
TokSwap collects information that you submit directly or make available through the service.
- Account information, such as name, email address, authentication identifiers, profile image from a sign-in provider, account status, plan status, and user ID.
- Media and creative inputs, such as uploaded photos, source videos, generated avatars, final videos, prompts, template choices, file names, file types, file sizes, job settings, and related metadata.
- Billing and transaction information, such as checkout session IDs, customer IDs, subscription status, product IDs, credit grants, credit usage, ledger entries, invoice events, payment status, tax-related data, refunds, and chargeback status. Full card details are handled by the payment processor.
- Communications, such as support requests, takedown requests, privacy requests, feedback, and messages you send to TokSwap.
Information collected automatically
TokSwap collects technical, usage, and security information when you visit or use the service. This may include IP address, browser type, device type, operating system, referrer, route, session identifiers, timestamps, account activity, upload activity, generation activity, download activity, errors, logs, provider task IDs, webhook events, and approximate location inferred from network information.
TokSwap may use local storage, cookies, authentication tokens, and similar technologies to keep you signed in, preserve session state, remember usage state, measure events, prevent misuse, and secure the service.
Media processing
TokSwap processes uploaded and generated media to create avatars, prepare source files, send inputs to AI providers, receive generated outputs, store results, provide downloads, troubleshoot failed jobs, enforce safety rules, and respond to user requests.
Media may be copied, resized, transcoded, uploaded to provider systems, downloaded from provider systems, scanned, logged, temporarily cached, stored in TokSwap media storage, or deleted according to retention rules and operational needs.
TokSwap does not use your private uploaded media or generated output to identify people for unrelated surveillance purposes. TokSwap may review or preserve media when needed for safety, misuse prevention, support, debugging, legal compliance, payment disputes, or enforcement of the Terms.
How TokSwap uses information
TokSwap uses personal information, media, usage data, and billing data for the following purposes.
- Provide, maintain, secure, debug, and improve the service.
- Authenticate users, create local account records, sync sign-in state, and protect accounts.
- Upload, process, queue, generate, store, preview, and download avatars and videos.
- Track credits, subscriptions, checkout sessions, payment events, refunds, and billing status.
- Detect, prevent, investigate, and respond to fraud, misuse, illegal content, policy violations, security incidents, and technical failures.
- Respond to support, legal, privacy, and takedown requests.
- Analyze product usage, reliability, conversion, plan usage, job success, and operational performance.
- Comply with laws, enforce agreements, preserve records, and protect the rights, safety, and property of TokSwap, users, depicted people, providers, and the public.
Service providers
TokSwap uses service providers to operate the service. These providers may process personal information and media only as needed for the services they provide to TokSwap, subject to their own terms and data processing commitments.
Current provider categories include authentication, cloud hosting, storage, database, queue, AI generation, file downloading, payment processing, webhook processing, analytics, security, email or notification delivery, and support tooling.
- Firebase may process authentication information for Google sign-in, email-link sign-in, token verification, and account identity.
- Cloudflare may process hosting, Workers, D1 database, R2 object storage, queues, networking, security, and log data.
- Creem may process checkout, subscription, customer, invoice, payment, refund, portal, tax, and webhook data.
- KIE or other AI generation providers may process uploaded media, generated media, task IDs, callbacks, provider URLs, and generation metadata.
Sharing and disclosure
TokSwap does not publish your private uploads or generated media by default. TokSwap may share information in the following limited ways.
- With service providers that help run TokSwap, process payments, store data, authenticate users, generate media, prevent misuse, or provide support.
- With law enforcement, regulators, courts, or other parties when TokSwap believes disclosure is required by law, valid legal process, emergency safety needs, or protection of rights and property.
- With a payment processor, bank, card network, or dispute-resolution party when needed for billing, refunds, fraud prevention, or chargebacks.
- With a person, rights holder, platform, or authority when needed to investigate credible takedown requests, impersonation claims, safety threats, or non-consensual media claims.
- In connection with a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or transfer of the business, subject to reasonable confidentiality or successor obligations.
- With your direction or consent, such as when you download, export, post, send, publish, or otherwise share generated output.
Sale and advertising use
TokSwap does not currently sell personal information for money, does not sell private media, and does not use private uploaded media or generated output for third-party behavioral advertising.
If TokSwap later offers advertising, cross-context behavioral advertising, data sharing that legally counts as a sale or share, or a financial incentive program, TokSwap will update this policy and provide required notices and choices.
Retention
TokSwap keeps information for as long as reasonably needed to provide the service, maintain accounts, preserve billing records, operate credit ledgers, troubleshoot jobs, comply with law, enforce policies, resolve disputes, prevent fraud, protect security, and maintain backups.
Retention periods vary by data type. Media files and provider URLs may be short-lived or deleted when no longer needed. Billing, credit ledger, security, webhook, and enforcement records may be retained longer because they support financial accuracy, legal compliance, auditability, and safety enforcement.
Deleted data may persist for a limited time in backups, logs, caches, provider systems, or records that TokSwap must keep for legal, security, fraud-prevention, tax, accounting, dispute, or enforcement reasons.
Security
TokSwap uses administrative, technical, and organizational measures designed to protect personal information and media, including authenticated access, private-by-default media storage, signed upload and download URLs, server-side webhook verification, internal ledgers, access controls, and operational monitoring.
No online service can guarantee absolute security. You are responsible for keeping your email account, sign-in method, devices, downloaded files, shared links, and account sessions secure.
International processing
TokSwap and its providers may process information in the United States and other countries where TokSwap, cloud providers, payment processors, AI providers, contractors, or support systems operate. Data protection laws in those places may differ from the laws where you live.
Your choices
Depending on your location and how you use TokSwap, you may have choices and rights regarding your information.
- You may access certain account, plan, credit, job, avatar, and library information in the TokSwap app.
- You may download generated output while eligible files are available.
- You may request access, correction, deletion, portability, restriction, objection, or withdrawal of consent where applicable law provides those rights.
- You may request that TokSwap review or remove content that misuses your likeness or violates the Acceptable Use Policy.
- You may cancel subscriptions or manage billing through the payment processor portal when available.
- You may disable some browser storage features, but doing so may break sign-in, uploads, checkout, analytics session handling, or app functionality.
California and other regional rights
Residents of some jurisdictions, including California and other US states with privacy laws, may have the right to know what categories of personal information TokSwap collects, the sources of that information, the purposes of collection, the categories of recipients, retention practices, and whether information is sold, shared, or used for targeted advertising.
Where those laws apply, you may also have rights to access, correct, delete, obtain a copy of, or opt out of certain processing of personal information. TokSwap will not discriminate against you for exercising privacy rights, but some requests may limit TokSwap's ability to provide the service.
TokSwap may need to verify your identity and account control before fulfilling a privacy request. TokSwap may decline or limit requests when permitted by law, including for security, fraud prevention, legal compliance, financial records, dispute resolution, free speech, safety, or rights of others.
Children and minors
TokSwap is not directed to children or minors. You must be at least 18 years old, or the age of legal majority where you live, to use TokSwap.
Do not upload, generate, request, or share media involving minors or anyone who appears to be a minor. If TokSwap learns that it collected personal information from a child or minor in violation of this policy, TokSwap may delete the information and suspend the account.
Takedown notices
If you believe TokSwap has been used to create non-consensual, infringing, harassing, deceptive, or otherwise unlawful media involving you or someone you represent, contact TokSwap at support@tokswap.app.
TokSwap may request information needed to evaluate the notice, such as links, screenshots, account identifiers, proof of authority, identity verification, consent status, rights ownership, and a description of the harm. TokSwap may preserve relevant records while reviewing the notice.
Changes to this policy
TokSwap may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date. If changes materially affect your rights or how TokSwap processes personal information, TokSwap may provide additional notice where required by law.
Questions and privacy requests can be sent to support@tokswap.app.