Privacy Policy

Scope and contact

This policy covers LiveSwap at liveswap.ai, including its browser studio, account library and support. “We” refers to the service operating under the LiveSwap name. Contact support@liveswap.ai, or submit a request through Privacy & reports. Some functions are available only when enabled on the site.

Information we process

• Accounts: name, email address, profile image, password hash when you use a password, sign-in provider identifiers and credentials needed to maintain authentication. We also store sessions and security information such as IP address, browser details and sign-in timestamps.
• Google sign-in: if you choose it, Google provides your account identifier, name, email, email-verification status and profile image, as available. We use these to authenticate you and manage your LiveSwap account. We do not request access to Gmail, Google Drive or your contacts, or use Google account data to train AI models or target advertising. You can revoke access in your Google Account connections; this does not itself delete your LiveSwap account.
• Images and video: reference images you select, camera frames you choose to send for generation, and private references you explicitly save. Faces and images of people may be sensitive; use only material you are authorized to process.
• Service records: orders, subscription and credit records, session times, model selection, usage, errors, limited performance diagnostics, support messages and privacy requests. We may also record referral or campaign information from the link you followed. A payment processor handles payment details; LiveSwap does not store full payment-card numbers.

Camera, generation and storage

Opening the camera for a local preview does not send its video to an AI provider. The Web studio requests video, not microphone audio. Starting generation sends the selected reference and camera stream to XMAX or Decart / Lucy. The stream goes to the model provider; LiveSwap records session and billing metadata, not a server-side video recording.

Some reference images pass through our service and Cloudflare image processing for validation, resizing or forwarding. An unsaved reference is not added to your account library. A reference selected before sign-in can be kept in that browser tab’s session storage to restore it after sign-in; drafts older than 15 minutes are rejected and removed when read. Closing the tab normally clears that storage, subject to browser session restoration.

Saving a private reference stores an encrypted image and thumbnail associated with your account. Deleting it removes the image bytes from the active library record; a minimal deletion record and historical backups may remain.

Purposes and disclosures

We use information to provide the service, authenticate accounts, process purchases and credits, prevent misuse, investigate faults, respond to requests and meet applicable obligations. Where a legal basis is required, we rely on service performance, legitimate security and operational interests, legal duties, or consent for optional processing as applicable. You can stop camera access and generation at any time.

Cloudflare provides hosting, storage, networking and image processing. Google handles sign-in when selected. XMAX and Decart process inputs for the model you use; payment and email providers process information needed for those functions when enabled. We may disclose information where required by law, to protect people or the service, or during a business transfer with appropriate protections. We do not sell your personal information. LiveSwap does not use your camera stream or private references to train its own models; this does not promise that every upstream provider has the same retention or training terms.

Providers and international processing

Our infrastructure and providers may process information outside your country. XMAX is configured for its China region; selecting XMAX sends generation inputs to that service. Decart / Lucy processing follows its own infrastructure and policy. We do not promise that all information remains in one country. Where applicable law requires safeguards for international transfers, they must apply to the relevant processing.

Read the provider policies: Cloudflare, Google, XMAX and Decart. LiveSwap does not promise zero provider retention. Deleting a LiveSwap reference does not automatically delete an upstream copy; contact us for a provider-related request.

Retention and security

Account data and saved references remain while needed to provide your account, unless you delete an item or request account closure. Transaction, usage, security and support records are retained as needed for billing, disputes, fraud prevention and applicable legal obligations. Recovery backups may contain deleted information until their configured recovery period expires; deletion from the active service is not immediate erasure of every backup. Supplier retention follows the policies above.

We use encrypted connections, access controls and encryption for private references and stored provider credentials. No storage or transmission system is completely secure. Do not include passwords, API keys, payment-card details or unnecessary sensitive images in support messages.

Your rights and choices

Depending on your location, you may request access, correction, deletion, portability or restriction, object to certain processing, withdraw consent, or complain to your data-protection authority. Submit a verified request through Privacy & reports or the contact email above; if you cannot sign in, use email. We may ask for proportionate information to establish ownership and will explain applicable retention exceptions. Signing out or revoking Google access does not close your account. Essential storage and optional tracking are described in our Cookie Policy.

LiveSwap is intended for adults aged 18 or over. Contact us if you believe a minor has supplied personal information. We update this page when practices change and use the site or account contact channels to communicate material changes as appropriate. The update date appears above.