Privacy Notice

This Privacy Notice explains how the operator of Sartrix processes your personal data. The data controller is:

• Legal name: [Company legal name — to be provided]
• Registered address: [Registered address — to be provided]
• Contact for privacy matters: [Support email — to be provided]

This Notice covers the Sartrix web application at sartrix.net, the Sartrix mobile application, and related services (payments, email notifications, support). It applies to account holders and to visitors of public pages, including publicly shared result pages.

• Email address — required to create and sign in to your account.
• Name and avatar — optional; provided by you or by your social sign-in provider (Google, Apple, Facebook, Discord).
• Sign-in metadata — one-time code requests, sign-in timestamps, connected sign-in providers.

To provide generations we process the content you submit, which may include photographs of faces — a category of data we treat with heightened care:

• Uploaded photos — reference images you upload for any generation mode, including source and target photos for Face Swap.
• Prompts — the text descriptions you write for generations.
• Generated results — the images and videos produced for you, stored so you can access your history.

Uploads and results are stored in private cloud storage and served through unguessable, access-controlled links. Uploads are stored while needed for your generations; unused uploads are cleaned up automatically. We do not use your photos, prompts, or results to train AI models.

When you use the built-in prompt assistant, your chat messages are stored with your account (so the conversation persists) and are sent to our AI language-model provider to generate replies. Do not include sensitive personal information in assistant chats.

Payments are processed by Stripe. We never receive or store your full card number. We receive and keep transaction records (what was bought, amount, currency, tax, billing country, Stripe transaction identifiers) as required for accounting and tax law. Stripe processes your payment data as described in Stripe's own privacy policy.

• Usage records — generations created, credits spent and refunded, notifications, referral activity, feedback you submit.
• Server logs — IP address, request metadata, and timestamps, kept for security, rate limiting, and abuse prevention.
• Device/browser data — only what is technically necessary to deliver the app; we do not fingerprint devices or track you across sites.

• Providing the Service: accounts, generations, storage of your results, credit accounting.
• Processing payments and maintaining tax and accounting records.
• Sending service emails: sign-in codes and important account notices.
• Security: rate limiting, fraud and abuse prevention, enforcing our Terms (including Face Swap rules).
• Support: responding to your requests and reports.
• Service improvement based on aggregate, non-identifying usage patterns.

• Contract (Art. 6(1)(b)) — providing the Service you signed up for, including processing your uploads to produce generations.
• Legal obligation (Art. 6(1)(c)) — tax, accounting, and consumer-law records.
• Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, defending legal claims.
• Consent (Art. 6(1)(a)) — where we ask for it explicitly (for example, marketing emails, if you opt in). Consent can be withdrawn at any time.
• Where your uploads include images of faces, we process them strictly to perform the specific service you request, based on your deliberate act of submitting them for that purpose.

Generations are performed by third-party AI model hosting providers acting as our processors (currently fal.ai). When you start a generation:

• your prompt and the referenced photos are transmitted to the provider for processing;
• the produced media is returned to us and copied into our own storage — your history is served from our storage, not from the provider;
• the prompt-assistant feature similarly sends chat text to an AI language-model provider.

Providers are engaged under data-processing terms and may not use your content for their own purposes, including model training.

We share personal data only with processors necessary to run the Service:

• Stripe — payment processing;
• AI model hosting providers (currently fal.ai) — generation processing;
• AI language-model provider — prompt assistant replies;
• Cloud hosting and storage providers — running the app and storing uploads/results;
• Email delivery provider (Resend) — sign-in codes and service emails.

We may disclose data where required by law or to protect rights and safety. We do not sell your personal data and do not share it with advertisers.

Some of our processors are located outside the EU/EEA (notably in the United States). Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards — the EU–US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses — together with technical measures such as encryption in transit.

• Account data — for as long as your account exists.
• Generated results — for the retention period of your plan (longer storage is a paid-plan feature); older results are deleted automatically.
• Uploaded reference photos — while needed for your generations; unused uploads are cleaned up automatically.
• AI assistant chats — until you delete them or your account is deleted.
• Payment and tax records — for the period required by Slovak tax and accounting law (typically 10 years).
• Security logs — for a short rolling window appropriate to abuse prevention.

If you create a public share link for a result, anyone with the link can view that result (without your prompt text or account details) until you revoke the link or delete the result. Revoking the link immediately disables all previously shared URLs for it.

Sartrix uses only strictly necessary technologies: your sign-in token and unsent drafts are kept in your browser's local storage, and a short-lived cookie secures the social sign-in flow. We use no analytics, advertising, or cross-site tracking cookies — which is why no cookie consent banner is shown. Details are in our Cookie Policy.

• All traffic is encrypted in transit (HTTPS).
• Uploads and results live in private storage behind unguessable, access-controlled identifiers.
• Passwordless sign-in — no password database to breach; one-time codes are rate-limited.
• Payment credentials are handled exclusively by Stripe.
• Access to production data is restricted, and administrative actions are limited to authorized personnel.

If you are in the EU/EEA or UK, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erase your data ("right to be forgotten") — subject to records we must keep by law;
• Restrict or object to certain processing;
• Data portability — receive your data in a machine-readable format;
• Withdraw consent at any time, where processing is based on consent.

You can delete individual results directly in the app, and you can contact us at the privacy contact above for access, correction, deletion, portability, or objection requests. We respond within one month (extendable by two months for complex requests, in which case we will tell you). We may need to verify your identity via your account email before acting on a request.

If you believe we process your data unlawfully, you can lodge a complaint with your local supervisory authority. The authority for our establishment is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

For residents of US states with comprehensive privacy laws (such as California, Colorado, Virginia):

• We do not sell or "share" personal information as defined by those laws, and we do not use it for cross-context behavioural advertising.
• Categories collected: identifiers (email), user content (photos, prompts, results), commercial information (purchases), internet activity (service logs).
• You may request access, deletion, and correction using the contact above; we do not discriminate for exercising these rights.

Sartrix is strictly for adults (18+). We do not knowingly collect data from anyone under 18. If you believe a minor has created an account or appears in processed content without authority, contact us and we will remove the data promptly.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Automated safety filters may decline individual generation requests; you can contact support if you believe a request was declined in error.

We send marketing emails only if you have opted in, and every such email contains an unsubscribe option. Service emails (sign-in codes, important account or legal notices) are not marketing and are sent as needed to operate the Service.

You may request deletion of your account at any time via the privacy contact above (an in-app deletion flow is being added). Upon deletion we remove or anonymize your personal data — uploads, results, chats, and profile — except records we are legally required to retain (payment, tax, and accounting records), which are kept for their statutory periods and no longer linked to an active profile.

We may update this Privacy Notice as the Service evolves. The version number and effective date at the top of this page always reflect the current revision, and we will notify you of material changes by email or in-app notice.

For any privacy question or request, contact us at the privacy email listed in Section 1, or use the feedback form in the app.