1. Personal information we collect
Account and contact information, such as email address, login method, verification code activity, language preference, and support messages.
User content, such as uploaded selfies or photos, prompts, selected character styles, generated images, gallery items, file metadata, and related moderation or delivery status.
Payment and transaction information, such as plan selected, credits purchased, Stripe checkout session identifiers, subscription identifiers, invoices, refund status, fraud or dispute signals, and limited billing details. Full payment card details are processed by Stripe, not stored by Cosplaying.
Technical and usage information, such as IP address, device type, browser, approximate location derived from IP address, pages viewed, actions taken, cookies or similar identifiers, security logs, and error diagnostics.
2. How we use personal information
To provide the service, create and manage accounts, authenticate users, process uploads, generate AI cosplay images, deliver credits, maintain galleries, and provide downloads.
To process payments, subscriptions, taxes, refunds, fraud checks, dispute evidence, receipts, and account records through Stripe and related service providers.
To protect users and the service, including detecting abuse, enforcing our Terms, preventing fraud, securing accounts, debugging, monitoring reliability, and complying with law.
To communicate with you about support, account activity, product updates, policy changes, purchases, renewals, cancellations, and security matters.
To improve Cosplaying, including understanding feature usage, fixing errors, evaluating generation quality, and developing safer creative tools.
3. Legal bases for EEA, UK, and Swiss users
We process personal information when necessary to perform a contract with you, such as providing accounts, credits, subscriptions, and generated images.
We process information based on legitimate interests, such as service security, fraud prevention, product improvement, customer support, and enforcement of our Terms.
We process information to comply with legal obligations, such as tax, accounting, consumer protection, sanctions, dispute, payment, and law enforcement requirements.
Where required, we rely on consent, such as for optional cookies, certain marketing communications, or other processing that legally requires consent. You may withdraw consent where applicable.
4. Photos, face images, and AI providers
Cosplaying processes uploaded photos to generate requested cosplay images. Photos may include face images and other sensitive personal information depending on what you upload. Do not upload images of another person unless you have their permission.
We do not use uploaded photos to identify you by name, verify your identity, or create a biometric identity template. We do not save uploaded source photos used for generation. Source photos are processed only for the requested workflow and are not stored by Cosplaying after that workflow completes.
Generated images are automatically saved in your account for 7 days so you can view, download, or manage them. After 7 days, generated images are automatically deleted from Cosplaying systems, except where a limited record must be retained for security, legal compliance, payment disputes, fraud prevention, or enforcement of our Terms.
We may share uploads and prompts with AI infrastructure providers only as needed to generate, moderate, secure, optimize, or deliver the requested output. We do not authorize those providers to use your uploaded source photos for unrelated advertising or resale.
4A. Safety, NSFW, and moderation processing
We may use automated systems, provider safety tools, metadata, account signals, and limited human review to detect, prevent, investigate, or enforce rules against NSFW, adult, non-consensual, exploitative, illegal, infringing, abusive, or payment-risk content.
Moderation processing may involve reviewing uploads, prompts, generated images, account identifiers, credit usage, payment status, device or IP signals, and support communications. We use this information to protect users, comply with Stripe and payment network requirements, enforce our Terms, respond to disputes, and meet legal obligations.
5. Sharing personal information
We share personal information with service providers that help us operate Cosplaying, including payment processing, cloud hosting, image storage, AI generation, email delivery, analytics, security, logging, and customer support.
We may share information with Stripe for checkout, payment processing, subscriptions, refunds, fraud prevention, authentication, dispute handling, tax, and compliance.
We may disclose information if required by law, legal process, government request, payment network rules, or to protect the rights, safety, security, and property of Cosplaying, users, Stripe, service providers, or others.
If Cosplaying is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction subject to appropriate safeguards.
6. Cookies and similar technologies
We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure the service, measure usage, and improve performance. Browser settings may let you block or delete cookies, but some features may not work correctly.
7. International transfers
Cosplaying may process and store information in countries other than where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections, technical safeguards, and service provider commitments.
8. Retention
We keep personal information only as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining purchase and tax records, resolving disputes, enforcing agreements, improving safety, and complying with legal obligations.
Uploaded source photos are not saved by Cosplaying after the requested generation workflow completes. Generated images are automatically saved for 7 days and then automatically deleted from Cosplaying systems. You may also delete generated images earlier where the app provides deletion controls or contact support@cosplaying.app to request account or data deletion. Some limited records may be retained when required for security, legal, tax, accounting, payment, fraud prevention, or dispute purposes.
9. Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how we process your personal information.
California residents may have rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination for exercising privacy rights. Cosplaying does not sell personal information and does not knowingly share personal information for cross-context behavioral advertising.
EEA, UK, and Swiss users may also have the right to lodge a complaint with a local data protection authority. We encourage you to contact us first so we can try to resolve the concern.
10. Children
Cosplaying is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact support@cosplaying.app and we will take appropriate steps.
11. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. No online service can guarantee absolute security, so you should use a secure email account and notify us promptly of suspected unauthorized access.
12. Contact
Privacy questions and rights requests can be sent to support@cosplaying.app.
