Privacy Policy

Ecdesign AI provides AI photo editing tools, including the AI Clothes Changer, at ecdesignai.com (the "Service"). This policy explains what information we process when you use it, why, who we share it with, and how long we keep it.

In this policy, "we", "us" and "our" mean Ecdesign AI. "You" means the person using the Service, whether or not you have an account.

Account information

If you sign in with Google, we receive your email address, your name and your profile picture URL from Google. If you sign in with an email link, we receive only your email address. We do not receive or store your Google password.

Photos you upload and images we generate

To change clothing in a photo, we process the person photo and any garment reference images you provide, along with the instruction built from your style choice or your own description. Your browser reduces large photos before upload, so what we receive is typically smaller than the original file.

Usage and generation records

For each generation we record which tool and model ran, the output shape requested, how many reference images were supplied, the first part of the instruction, how long the run took, and whether it succeeded or failed. This is what lets us answer support questions, refund failed runs, and detect abuse.

Payment and credit records

Your credit balance, every credit grant and deduction, and your subscription status are stored by us. Card details are not: those are collected and held by our payment provider. We never see or store your full card number.

Technical and anti-abuse information

We give one free generation to visitors without an account. To count it, we derive an identifier from your IP address and a small set of browser characteristics (such as language, timezone, screen size and processor count).

Your IP address is never stored in readable form. It is combined with a secret value held on our servers and turned into an irreversible hash before it is written down. The same applies to the browser characteristics: we store a hash, not the underlying values. These identifiers let us recognise a repeat visit; they cannot be turned back into your IP address or used to identify you.

• Run the tools you ask for, and show you the result.
• Create and secure your account, keep you signed in, and let you recover access.
• Grant, deduct, expire and refund credits, and manage your subscription.
• Answer support requests and investigate problems with specific generations.
• Detect and stop abuse, including automated attempts to exceed free limits and attempts to generate prohibited content.
• Diagnose failures and improve reliability, speed and output quality.
• Meet tax, accounting and other legal obligations.

We do not sell your personal information. We do not use your photos or your generated images to train our own AI models, and we do not use them for advertising.

Where the GDPR or a similar law applies, we rely on the following bases:

Performance of a contract

Running the tools, managing your account, credits and subscription, and providing support.

Legitimate interests

Keeping the Service secure, preventing abuse and fraud, debugging failures, and understanding how the product is used in aggregate.

Legal obligation

Retaining billing and tax records for the period the law requires.

Consent

Anything we ask you to opt into separately. You can withdraw consent at any time without affecting processing that already happened.

We do not sell personal information or share it for advertising. We do rely on a small number of providers to operate the Service, and they receive only what they need to perform their function:

AI model providers

Your uploaded photos and the generation instruction are transmitted to the provider hosting the model that produces your image, and to the underlying model operator. They process this input to return a result.

Authentication, database and storage

Our account system, database and file storage are operated by an infrastructure provider on our behalf.

Payments, subscriptions and billing

Our payment provider handles checkout, card processing, invoicing, tax and refunds. It receives the information needed to take payment and issue an invoice, and it — not us — holds your card details.

Email delivery

Sign-in links and account emails are sent through an email provider.

We may also disclose information where we are legally required to, or where it is necessary to establish or defend legal claims, or to protect the safety of a person.

International transfers

Our providers operate internationally, so your information may be processed in countries other than your own, including the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Uploaded photos and generated images

Kept for a limited period so you can revisit or re-run a recent result, then deleted automatically. Signed-in users' results are kept for as long as the account exists, unless you delete them.

Generation records

Kept while needed for support, abuse prevention and reliability analysis.

Account information

Kept while your account exists. Deleting your account removes it.

Credit and billing records

Kept after account deletion where tax, accounting or dispute-resolution law requires it. These records are append-only, so a past transaction is never rewritten.

Anti-abuse identifiers

The hashed identifiers used for free-trial limits are kept only as long as needed to enforce those limits and investigate abuse.

We use cookies that are necessary for the Service to function: they keep you signed in and protect your session. Without them you could not stay logged in.

We do not use advertising cookies and we do not sell cookie data. If we later add analytics that is not strictly necessary, we will ask for consent where the law requires it and update this policy first.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and receive a copy.
• Correct information that is inaccurate or incomplete.
• Delete your account and the personal information associated with it.
• Object to or restrict certain processing, including processing based on legitimate interests.
• Withdraw consent where we relied on it.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email support@ecdesignai.com. We will respond within the time your law allows. Some records must be retained despite a deletion request — billing and tax records in particular — and we will tell you when that applies and why.

We do not use your information to make automated decisions that have a legal or similarly significant effect on you.

All traffic to the Service is encrypted in transit. Access to production data is restricted, and our database enforces per-user access rules so that one account cannot read another's data. Payment credentials never reach our servers.

No system is completely secure. If a breach affects your personal information and the law requires notification, we will notify you and the relevant authority.

The Service is not intended for children under 13, and we do not knowingly collect information from them. If you are under the age at which you can consent to online services in your country, you may use the Service only with the involvement of a parent or guardian.

Uploading a photo of a minor to alter clothing is prohibited, whether or not you are a minor yourself. See the acceptable use section of our Terms of Service. If you believe such content has been created using Ecdesign AI, report it to support@ecdesignai.com and we will act on it.

We may update this policy as the Service changes. The effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will give notice through the Service or by email before it takes effect.

Questions about this policy, or about the information we hold about you: support@ecdesignai.com.