Privacy Policy

Current UndressMe Prompt-Only Controls — 2026-07-12

This notice takes priority over any conflicting legacy feature description on this page. The current service is prompt-only text-to-image: it has no user-media upload, video generation, Agent workflow, or user public publishing. Every generation is a private draft.

Creating or downloading a generation, starting checkout, or accessing adult media requires a valid 18+ age-assurance result from a contracted third party. Do not send UndressMe credit-card screenshots, identity documents, or selfies; UndressMe does not collect them for age checks. The complaint and takedown route is public and does not require adult-service access: Content Removal Process or [email protected]. Production access remains gated by applicable regional law, written confirmation from the acquiring/payment institution for the actual merchant model, and correctly configured contracted providers. This notice does not say the service is lawful everywhere or remove UndressMe's own duties.

Your privacy matters at UndressMe AI. This policy explains what information we collect, how we use it, and the choices you have. We process data to deliver your private AI workspace and to keep our platform safe from illegal content.

1. Information We Collect

Account Data: When you register, we collect your email address and a unique account identifier. We do not require real names or personal identifiers beyond what is necessary for account creation and communication.

Generation Data: We store your prompts, generated images, associated metadata, and limited records for legacy video tasks. The current generation service is prompt-only text-to-image and does not accept reference-media input. Generated content lives in your private workspace and is processed to deliver and safety-review AI outputs. User drafts are not used as public samples or gallery content.

Usage and Analytics: We collect technical data about how you interact with our platform—features used, session duration, and performance metrics. This helps us improve service quality.

Payment References: Purchases are handled by external payment processors. We receive transaction references, purchase amounts, and status updates but never store full credit card numbers, CVV codes, or complete payment instrument data on our servers.

Safety and Abuse Data: To enforce our zero-tolerance policy on minors, NCII, and other prohibited content, we process moderation labels and flagged content. This includes automated and human review data.

Age-Assurance Data: A contracted provider performs age assurance. We do not ask you to send us an identity-document image, selfie, or payment-card screenshot for this purpose. We receive and store a minimized assertion such as pending, verified, failed, or expired; provider session and event references; the assurance method; jurisdiction; and relevant timestamps. A verified assertion normally expires after 30 days unless a shorter period or reverification is required.

Removal Reports: Our public removal form collects the reporter's relationship to the content, report category, content URL or identifier, a description, contact email, anti-abuse result, and a one-way hash of network information used for rate limiting. The form does not accept attachments. We create a case ID and audit history.

Communications: We retain records of your emails and support requests to [email protected].

2. How We Use Your Information

We use collected data to:

• Provide, maintain, and improve our AI generation services.
• Process credits, subscriptions, and premium features.
• Enforce safety policies and detect prohibited content including CSAM, NCII, and real-person impersonation.
• Communicate with you about your account, service updates, and support inquiries.
• Comply with legal obligations and respond to valid legal requests.
• Enforce adult-access restrictions and process complaints, removals, appeals, and repeat-copy review.

3. Data Sharing and Processors

We share data only as necessary:

• Payment Processors: To complete transactions, we share transaction identifiers and amounts with checkout, card, marketplace, or subscription providers. These providers apply their own privacy and security rules.
• AI Infrastructure and Safety Providers: Generation requests and required output-safety checks are processed on contracted cloud services. Production generation remains disabled unless required provider contracts and configuration are in place.
• Legal and Safety Compliance: We may disclose data to law enforcement or authorized agencies when required by law or to protect against imminent harm, particularly in cases involving child exploitation or non-consensual content.
• Age-Assurance Provider: We send the minimum session and redirect information needed for the provider to return an adult-status assertion. The provider processes verification data under its own notice and our applicable contractual safeguards.

We never sell your personal data or generated content to third parties.

4. Data Retention

We retain account data as long as your account remains active. Generation data remains in your private workspace until you delete it or your account is terminated. A successful age-assurance assertion normally remains valid for 30 days; minimal provider and audit records may be retained longer where necessary for safety, disputes, fraud prevention, or law. Removal-case and safety records may also be retained to prevent repeat violations and comply with legal obligations. Payment references are retained per processor requirements.

5. Your Rights and Choices

You may access, export, or delete your account and associated content by contacting [email protected]. You may opt out of non-essential communications. Depending on your jurisdiction, you may have additional rights regarding your personal data. We will respond to verifiable requests within applicable timeframes.

6. Security

We implement technical and organizational measures to protect your data against unauthorized access, alteration, or destruction. No online service is completely immune to risk; we encourage you to use strong, unique passwords.

7. Contact

For privacy inquiries, data requests, or concerns, email [email protected].