Privacy policy.

01 / Account information

We use your email address, display name, account identifier, and sign-in status to authenticate you and connect you to your private library and credit balance. Supabase handles email/password authentication, password verification, and account sessions. We do not store plaintext passwords in AFTERFRAME’s application database.

If you choose Google sign-in, Google provides basic profile information, including your name, email address, profile picture if available, and a Google account identifier, to our authentication service. We use that information to create or authenticate your account. We do not request access to your Gmail messages, Drive files, contacts, or calendar. You can remove AFTERFRAME’s Google access from your Google Account settings; doing so does not automatically delete your AFTERFRAME account.

02 / Your images, videos, and prompts

We process uploaded media, prompts, reference images, generation settings, generated results, saved reference sets, and generation history to provide the tools you choose. We store account-linked files and records so you can access and reuse your creations. Your library is not a public gallery by default.

When you request a generation or enhancement, the necessary prompt, media, and settings are sent to the provider for that feature. Depending on your selection, this may include Higgsfield, Google, or OpenAI. Their services may process data in other countries and apply their own retention and processing terms. Do not upload information you do not want processed by the selected provider. AFTERFRAME does not itself train AI models on your uploads.

03 / Services that help operate AFTERFRAME

We use Sites hosting and Cloudflare infrastructure for application delivery, databases, and file storage, and Supabase for authentication. Account emails, such as verification and password-reset messages, are delivered through the configured email service, including Resend when enabled. These providers receive information needed to operate their part of the service.

When paid checkout is available, Stripe processes payment details. AFTERFRAME may retain transaction identifiers, plan details, and credit records to manage billing and resolve payment issues; full payment-card numbers are handled by Stripe rather than stored in our application database.

We do not sell your Google account data or use it for targeted advertising. Google sign-in data is used for account access and administration, not as input to generation models. We may disclose information when required by law or necessary to investigate abuse and protect the service.

04 / Cookies and security information

We use session cookies and browser storage to keep you signed in and remember interface preferences. Authentication providers and hosting services may process IP addresses, browser information, request timestamps, and technical logs for security and reliability. AFTERFRAME also uses hashed identifiers and attempt counts to limit abusive sign-in attempts. Blocking essential cookies may prevent sign-in from working.

05 / Retention and deletion

Account records, uploaded files, and generation history are retained to support your library and service operation. Deleting a generation from the interface removes it from your visible history; it does not necessarily immediately erase the underlying file, provider records, logs, or backups. Deleting a creation does not refund credits.

To request account deletion, removal of stored content, access to your information, or correction of account details, email swizzleskilletjay@gmail.com from your account address. We may need to verify ownership before acting. Some records may need to be retained for billing, fraud prevention, security, or legal requirements. Service-provider backups and logs may follow separate retention periods.

06 / Your choices and updates

You can choose which content to upload, manage visible creations in your library, sign out, and revoke Google access. Depending on where you live, you may have additional rights to access, correct, delete, or restrict the processing of your information, or to complain to a privacy regulator. Contact us to exercise these rights.

We may update this policy as the service changes. The date above identifies the latest version. Material changes will be communicated through the site or appropriate account communications.