Privacy Policy

SmileMaker.Pro ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our Service. By using SmileMaker.Pro, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

• Account information: When you sign in via Google OAuth, we receive your name and email address from Google.
• Facial photographs (biometric data): Images you upload to the Service for AI smile visualization. See the Biometric Data section below for important disclosures.
• Generated images and videos: The AI-produced makeover images and animated videos created from your uploads.
• Payment information: Payment card details are collected and processed directly by Stripe. We do not store, see, or have access to your full card number or CVV.
• Usage data: Pages visited, features used, and other service interaction data, used to improve the Service.

2. How Your Photos Are Used

Photos you upload are used exclusively to provide the Service. Specifically:

• Your photo is sent to Google (Gemini API) via the Vercel AI Gateway for AI-powered smile visualization. This transmission is subject to Google's Privacy Policy.
• If you request an animated video, your photo is additionally sent to xAI (Grok API) via the Vercel AI Gateway for video generation. This transmission is subject to xAI's Privacy Policy.
• Your original photo and the generated makeover image are stored in Vercel Blob (encrypted cloud storage) while your job is active and for up to 5 days thereafter.
• Your photos and videos will not be used to train, fine-tune, or improve any AI model — not ours, not Google's, not xAI's. When you use our Service via API, Google and xAI do not use your submitted content for model training per their respective API usage policies.
• Google and xAI may retain submitted content for up to 30 days for safety monitoring and abuse prevention purposes, per their respective policies. This is separate from our own 5-day storage window.
• We do not share your photos with any third party beyond those described in this policy.

3. Biometric Data Disclosure

Facial photographs constitute biometric data under applicable state laws, including the Illinois Biometric Information Privacy Act (BIPA) and similar statutes. By uploading a photo to SmileMaker.Pro, you expressly consent to:

• the collection and processing of your facial photograph as biometric data for the purpose of AI smile visualization;
• the transmission of your photo to Google (Gemini API) and, if applicable, xAI (Grok API), both via Vercel AI Gateway, as described in Section 2;
• the storage of your photo in Vercel Blob for up to 5 days.

Biometric data is not sold, leased, traded, or used for any purpose other than providing the Service. Your data is destroyed within 5 days of collection (see Data Retention, Section 4).

If you have questions about our biometric data practices, contact us at support@smilemaker.pro.

4. Data Retention

• Photos and generated images/videos are automatically deleted from our storage systems within 5 days of upload. This is an automated process that runs daily.
• Google and xAI may independently retain submitted content for up to 30 days for safety and abuse-prevention purposes, per their API policies. They do not use this content for model training.
• Account information (name, email) is retained while your account is active. You may request deletion at any time (see Your Rights, Section 7).
• Payment records are retained as required by law and Stripe's data retention policies (typically 7 years for financial records).

5. Third-Party Service Providers

We share data only with the following trusted third parties, solely to operate the Service:

We do not sell, rent, or trade your personal information to any third party.

6. Cookies

We use session cookies only — specifically the cookies set by NextAuth.js to keep you logged in. We do not use tracking cookies, advertising cookies, or analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from logging in.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data (including under CCPA, GDPR, and similar laws):

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and all associated data, including photos, at any time. Email us at support@smilemaker.pro or use the delete option in Settings.
• Opt-out of sale: We do not sell personal information, so no opt-out is needed.
• Data portability: Request an export of your data in a portable format.

To exercise any of these rights, contact us at support@smilemaker.pro. We will respond within 30 days.

8. Children

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we learn that we have inadvertently collected data from a minor, we will delete it promptly. If you believe we have collected data from a minor, please contact us at support@smilemaker.pro.

9. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encryption at rest, and access controls. However, no system is perfectly secure. In the event of a data breach affecting your rights, we will notify affected users as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

For privacy questions, rights requests, or data deletion inquiries, contact us at:

support@smilemaker.pro

You may also review our Terms of Service.