Privacy Policy

Effective date: 16 October 2026

Information used to provide the service

We process account email and sign-in information, password hashes for password accounts, credit balances, transaction references, job status, uploaded face photos, source videos and generated results. Google sign-in provides the account information needed to authenticate you; we do not receive your Google password. Stripe handles card information on its checkout.

Purposes and providers

Account and media processing are used to deliver the requested service. Transaction records support payment and accounting obligations. Hashed IP/browser identifiers, technical logs and job ownership identifiers support security and trial-abuse prevention. These activities rely on performance of the service, applicable legal obligations and legitimate security interests as appropriate.

Face swap is processed on our GPU infrastructure. Ultra AI sends the necessary reference media and instructions through HypiHub to its AI service. Instagram imports use our connected browser/download infrastructure. Google and Stripe process information when you use their respective sign-in and checkout services. These providers may process data outside your country under their applicable arrangements.

Video result emails

We use Resend to deliver email-address confirmations and transactional job notifications to your verified account email. Resend receives the recipient address and email content, including a link to your private job page, but no video attachment or personal thumbnail. Opening a result still requires the account that owns it. Confirmation links expire after one hour. These service messages do not enroll you in a newsletter. We retain delivery and retry records to prevent duplicate notifications and troubleshoot delivery.

Storage and deletion

Uploaded files and generated results are stored on our processing infrastructure. Completed or failed job media is scheduled for deletion 7 days after processing, checked hourly. Unsubmitted uploads expire after 24 hours. Active or unresolved jobs are retained until their status is resolved. GPU working copies are deleted when the processing PC is reachable; offline deletion is retried. Public example videos are retained separately. Contact us to request earlier deletion. Account, security and transaction records may need to be retained for legal obligations or dispute handling. Provider-side retention is governed separately by the relevant provider.

Cookies and browser storage

This version uses essential storage for authentication, job ownership, import status and remembering cookie settings. On the production site, Google Analytics 4 loads with Consent Mode and can send limited measurement signals without analytics cookies before consent or after rejection. Accepting enables full analytics. Outside the EU, analytics is automatically enabled after country detection unless you have explicitly rejected it; unknown locations remain in the cookie-free mode. Country detection uses ipapi.co, with api.country.is as a fallback; these providers receive your IP address. It measures visits, coarse referral/campaign information, registrations, generation outcomes and confirmed purchases observed by your browser. We do not send your email, uploaded media, Instagram URL or job identifiers to Google. Google may process analytics data outside your country. You may reject or withdraw analytics in Cookie settings; essential service features remain available. Advertising features are disabled. See Cookie information for details. Cookie settings are available in the footer.

Your rights and contact

Contact info@ferai.sk to request access, correction, export or deletion of your personal data, or to object to processing where applicable. You may also complain to the relevant data protection authority. Some records may be retained where legally required.