DeepSwap

GDPR overview

The privacy policy and the terms are both dated 11 November 2021. Section 8, “European Privacy Rights”, grants EU residents the additional rights of Regulation (EU) 2016/679, and section 7 spells out access, portability in a structured, commonly used and machine-readable format, rectification and withdrawal of consent; section 8.3 confirms the right to complain to a national supervisory authority. Section 5.2 states that the application is maintained in Ireland and that data may be transferred to and accessed from Ireland, the EU and other jurisdictions, while 5.3 covers transfers outside the EU by the EU-U.S. Data Privacy Framework, where applicable, or the European Commission's standard contractual clauses. The minimum age is 18 for EU residents and the GDPR contact is feedback@deepswap.ai. No data protection officer is named, no Article 27 EU representative is designated and no data processing agreement is published.

Who owns the data?

Under section 3.1 of the terms, the publisher keeps every right in the application, its technology and its software, while you retain your intellectual property rights in the materials and content you upload and in the content you create. Section 3.2 qualifies that ownership: you grant the publisher an irrevocable, worldwide, non-exclusive, royalty-free, sublicensable and assignable licence to use uploaded content in order to provide the functionality of the app, and you may choose to make uploaded content public, in which case any other user may use it. You must warrant that you hold the rights to whatever you upload. The privacy policy (6.1) allows disclosure to affiliates, subcontractors, an acquirer in a merger or sale, and judicial authorities.

Reuse rights

Created content remains your intellectual property under section 3.1, so no permission is needed to reuse it, and the site mentions neither an imposed watermark nor any restriction on commercial use. The limits sit elsewhere. Section 3.2 makes you warrant that creating or altering the media infringes no third-party right, whether intellectual property, privacy or likeness, and section 4.2 forbids unlawful, pornographic or harassing content as well as any use of another person's personal information without their consent. The privacy policy (7.4) adds that sharing your content on social networks is at your own risk, since the publisher does not control what third parties then do with it.

Data retention & training

Hosting summary

The privacy policy (5.1) states that the photos, GIFs and videos uploaded as material for face editing are stored on remote servers located in Ireland, and exclusively during use of the service. Section 5.2 adds that the application is maintained in Ireland and that data may be stored, processed, transferred to and accessed from Ireland, the European Union and other jurisdictions, and it warns that data stored in Ireland may be subject to requests from local courts or authorities. Section 5.3 covers transfers outside the EU through the EU-U.S. Data Privacy Framework, where applicable, or the standard contractual clauses adopted by the European Commission. A network check adds a nuance the site does not declare: the domain resolves to 216.150.1.1, on Amazon's AS16509 anycast network geolocated in the United States, which reflects the delivery infrastructure rather than the storage location stated in the policy.