Skip to content
Ghost Mannequin Tool

Privacy Policy

How we collect, use, store and delete your account data, the photos you upload and the images you create.

Oct 18, 2026

This policy explains what data we collect when you use our ghost mannequin and flat lay tools, why we collect it, who processes it and how long we keep it. "We", "us" and "our" mean the operator of this website.

What we collect

  1. Account data: your email address, name and profile picture if you sign in with Google, and your sign-in sessions.
  2. Photos you upload ("originals") and the images we create from them ("results").
  3. Credits and payments: your credit balance and history, and the orders you place. Payments are processed by PayPal; we receive the order status and a transaction ID, not your card details.
  4. Usage data: which tools and settings you use, whether an image succeeded, and basic technical data such as your browser type and IP address, used for security, abuse prevention and analytics. We use an anonymous visitor ID to record the page and source of your first visit and link it to your account after registration to understand where users come from, without recording your browsing history.

How we use your photos

We use your originals to create the images you request. Authorized service operators may also review originals, reference photos and results alongside generation records to investigate quality problems and improve the service. We do not use them to train AI models or sell them. Public examples require your written permission.

When you upload a photo, we remove its metadata (including any location data) and store it privately.

Who can see your photos

Originals and results are stored privately. You can access your own images while signed in. Internal quality review is restricted to authorized administrators; it does not make your images public. Preview links expire, and downloads check account ownership.

Service operators may access stored images for internal quality analysis and service improvement, to resolve reported problems, handle abuse or meet legal obligations. Deleted or expired images are unavailable for review.

Third parties that process data for us

  • AI processing: your original, and any extra photos you add (the inside of the collar, another angle), are sent to our AI image provider (currently APIMart, which runs OpenAI's GPT Image model) through links that expire after one hour, so the provider can create your result. The result is copied back to our private storage.
  • Storage and hosting: files are stored with our cloud storage provider (Cloudflare R2 or an S3-compatible service) and the website is hosted with our hosting provider.
  • Payments: PayPal processes payments under its own privacy policy.
  • Sign-in and email: if you sign in with Google, Google shares your basic profile with us. We use an email provider to send sign-in and account emails.
  • Analytics: we may use privacy-friendly analytics to understand how the tools are used.

How long we keep data

  • Originals and results are deleted automatically 30 days after they are created. Download anything you want to keep.
  • Account, credit and order records are kept while your account exists, and order records for as long as tax and accounting law requires.
  • Records of each generation (tool, settings, status and cost, without the images) are kept for accounting and abuse prevention.

Deleting your data

You can delete any image yourself in My images; this removes the result and, once no other image uses it, the original photo from our storage straight away.

You can also ask us to delete your images or your whole account at any time through our contact page. Please write from the email address on your account. We'll confirm when it's done, usually within 7 days.

Cookies

We use cookies that are needed to keep you signed in and to protect the service. Analytics tools, if enabled, may set their own cookies. We also set a first-party cookie (gmt_vid) holding a random visitor ID for 30 days; it is removed when you create an account.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. Contact us to use any of these rights.

Children

The service is not meant for anyone under 16, and we don't knowingly collect their data.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. For important changes we'll tell signed-in users by email or on the website.

Contact

Questions about this policy? Reach us through our contact page.