Privacy Policy

GRMPT ("we", "our", or "us") operates the GRMPT platform — an AI-powered fashion design service available at grmpt.com. We provide tools for AI-generated garment design, virtual try-on composition, AI model creation, and fashion video generation.

If you have any questions about this Privacy Policy, please contact us at privacy@grmpt.com.

We collect information in the following categories when you use GRMPT:

• Account Information — When you sign in with Google or Apple, we receive your name, email address, and profile photo URL via Firebase Authentication. We do not receive your social account password.
• Usage & Credits — We store your credit balance, generation history (prompts, settings), and feature usage records in our database.
• Payment Information — When you subscribe to a paid plan, payment is processed by Stripe. We store your Stripe customer ID and subscription status (plan, billing interval, renewal date). We do not store your full credit card number or CVV — these are handled exclusively by Stripe.
• Uploaded Content — Images and files you upload (clothing references, model photos, background images) are sent to our servers for AI processing and temporarily stored in secure cloud storage (AWS S3).
• AI-Generated Content — Images, try-on composites, and videos generated on your behalf are stored in AWS S3 and linked to your account.
• Technical Data — IP address, browser type, device information, and usage logs collected automatically when you access the service.

We use the information we collect to:

• Provide, operate, and maintain the GRMPT platform and all its AI features.
• Process your image and video generation requests using third-party AI services.
• Manage your account, credit balance, and generation history.
• Verify your identity and prevent unauthorized access through Firebase Authentication.
• Deliver generated assets to you and make them accessible via your Gallery.
• Improve the reliability, performance, and quality of our service.
• Send important service updates, security alerts, and support communications.
• Comply with applicable legal obligations.

We do not sell your personal information to third parties. We do not use your uploaded content or generated assets to train AI models without your explicit consent.

GRMPT integrates with the following third-party services to deliver its functionality. Each service operates under its own privacy policy:

• Firebase Authentication (Google LLC) — Manages user sign-in via Google and Apple. Google Privacy Policy: policies.google.com/privacy
• Google AI APIs (Google LLC) — Powers AI image and video generation. Uploaded images and prompts are transmitted to Google's APIs for processing.
• Kling AI — Powers Video Studio (video) generation. Images submitted for video generation are transmitted to Kling AI's API. Kling AI Privacy Policy: klingai.com/privacy
• OpenAI (OpenAI, L.L.C.) — Powers certain image generation features. Prompts and reference images may be transmitted to OpenAI's API for processing. OpenAI Privacy Policy: openai.com/privacy
• Stripe, Inc. — Processes subscription payments. Your payment details are entered directly into Stripe's secure interface and are not transmitted to or stored on GRMPT's servers. Stripe Privacy Policy: stripe.com/privacy
• Amazon Web Services (AWS) — Provides secure cloud storage (S3) for your uploaded and generated files. AWS Privacy Policy: aws.amazon.com/privacy
• Sentry (Functional Software, Inc.) — Provides error monitoring and crash reporting. Error reports may include technical information such as browser type, device data, and page context at the time of an error. Sentry Privacy Policy: sentry.io/privacy
• Google reCAPTCHA v3 (Google LLC) — Used to protect forms and actions from automated abuse. reCAPTCHA collects hardware and software information, including browser type and IP address, and sends this data to Google for analysis. Google Privacy Policy: policies.google.com/privacy
• Tripo3D — Optional 3D model generation service. Files may be transmitted for 3D conversion when this feature is used.

When you use GRMPT, images and prompts you submit may be transmitted to third-party AI services for processing. Please review the respective privacy policies of those providers for details on how they handle data submitted via their APIs.

We retain your data for as long as your account is active or as needed to provide you with our services:

• Account data is retained for the lifetime of your account.
• Generated images and videos are stored in your Gallery and remain accessible until you delete them or close your account.
• Uploaded reference images (outfit photos, background images) used during generation are retained for the duration of the session and may be cached temporarily for performance.
• Logs and technical data are retained for up to 90 days for security and debugging purposes.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by applicable law.

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted using TLS/HTTPS.
• Cloud storage (AWS S3) access is controlled via time-limited pre-signed URLs.
• Firebase Authentication tokens are verified server-side on every request.
• Our infrastructure is hosted in AWS US West (Oregon) with restricted access controls.
• Database access requires authentication and operates within a private network.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request that we correct inaccurate or incomplete information.
• Deletion — Request that we delete your account and associated personal data.
• Portability — Request an export of your generated content and account data.
• Opt-out — Opt out of non-essential communications at any time.

To exercise any of these rights, please contact us at privacy@grmpt.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

GRMPT is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@grmpt.com and we will delete such information.

GRMPT is operated from the United States. If you access our service from outside the United States, your information may be transferred to and processed in the United States. By using GRMPT, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page. For significant changes, we may also send you a notification via email or an in-app notice. Your continued use of GRMPT after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: privacy@grmpt.com
• Website: grmpt.com