Privacy Policy

MetaWebCam AI Privacy Policy

This Privacy Policy describes how MetaWebCam AI ("we", "us", "our") collects, uses, and protects your personal information when you use https://metawebcam.ai.

1. Information We Collect

We collect the following categories of data:

  • Account data — email address, authentication tokens (Google OAuth or magic link), username
  • Payment data — processed by our Merchant of Record (Workalisation Limited); we never store full card numbers
  • Usage data — token balance, chat session duration, models viewed, timestamps
  • Technical data — IP address, browser type, device type, operating system, referrer URL
  • Analytics data — PostHog, Google Analytics, Vercel Analytics, Facebook Pixel, Google Tag Manager

2. How We Use Your Data

We use your data to:

  • Provide and maintain the Service (account, tokens, AI chat access)
  • Process payments via Workalisation Limited (Merchant of Record)
  • Detect and prevent fraud, abuse, and underage access
  • Send transactional emails (account confirmation, receipts, important updates)
  • Improve the Service through analytics and A/B testing
  • Comply with legal obligations (tax, 18 U.S.C. § 2257 compliance, GDPR)

3. Legal Basis (GDPR)

If you are in the EU/EEA/UK, we process your data under the following legal bases:

  • Contract — to provide the Service you signed up for
  • Legitimate interest — fraud prevention, analytics, product improvement
  • Consent — marketing emails, optional cookies (you can withdraw at any time)
  • Legal obligation — tax records, age verification, compliance with adult-content laws

4. Data Sharing

We share data only with:

  • Workalisation Limited (Merchant of Record, Hong Kong) — for payment processing
  • Supabase — authentication and database hosting
  • Vercel — application hosting
  • Resend — transactional email delivery
  • Trulience — AI avatar rendering (only session metadata, no personal data)
  • Analytics providers (PostHog, Google, Meta) — anonymized usage data
  • Law enforcement — only when legally required

We do not sell your personal data to third parties.

5. Data Retention

  • Account data: kept while your account is active + 30 days after deletion
  • Payment records: 7 years (legal/tax requirement)
  • Chat session metadata: 90 days
  • Analytics data: 14 months

6. Your Rights

Under GDPR and similar laws, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Export your data (portability)
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, email privacy@metawebcam.ai.

7. Security

We use industry-standard security:

  • HTTPS/TLS encryption everywhere
  • Supabase Row Level Security (RLS) on all user data
  • Password-less authentication (Google OAuth + magic links)
  • Regular security audits
  • Encrypted backups

No system is 100% secure — you use the Service at your own risk.

8. International Transfers

Your data may be processed in Hong Kong (Workalisation Limited), the United States (Vercel, Supabase, analytics providers), and other countries. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

9. Children

The Service is strictly for adults (18+). We do not knowingly collect data from minors. If you believe a minor has used the Service, contact privacy@metawebcam.ai immediately and we will delete their data.

10. Changes

We may update this Privacy Policy. Material changes will be announced via email or prominent notice on the Service.

11. Contact

Updated on March 26th, 2026