Smew Privacy Policy

Version 1.0 · Effective September 10, 2026

1. Who is responsible

蒋政涛 (Jiang Zhengtao), an individual operator based in China trading as Smew, is responsible for the personal information we process to operate smew.ai. Contact support@smew.ai for privacy requests, account questions, or complaints.

This policy covers our website, image-generation and editing tools, account features, and support. It explains our practices; it does not replace a separate consent where the law requires one. Purchases and use of the service are also governed by our Terms of Service.

2. Information we handle

• Account and authentication: Name, email, account identifiers, hashed password, sign-in sessions, and authentication records you provide or generate by signing in. We do not store a readable account password.
• Creative content: Your prompts, chat messages, uploaded reference images, generated images, model settings, file links, and processing results. These may contain personal information about you or people depicted.
• Purchases and credits: Product and plan identifiers, amounts and currency, order references, subscription status and billing dates, credit grants and use, refund status, and payment-provider customer references.
• Support: Your messages, email address, ticket contents, and information you choose to send when seeking help.
• Technical and security data: IP address, browser/request information, timestamps, error records, and operational logs used to deliver and protect the service.
• Preferences and attribution: Language and theme choices, and a referral source when a link includes a referral parameter.

Complete card details and card security codes are entered in the payment provider's checkout, not in a Smew form. Do not put financial credentials, identity documents, health information, or other sensitive records in prompts or uploads. Only submit photographs of others when you have the necessary permission and lawful basis.

3. Why we use information

We use account and content information to authenticate you, execute your image requests, maintain chat history and your library, and deliver downloadable results. We use transaction information to grant credits, renew or cancel subscriptions, reconcile payment events, and handle refunds. We use support and technical information to investigate faults, respond to requests, prevent misuse, and meet legal obligations.

Where a law requires a legal basis, these activities rely on performing our agreement with you, complying with legal obligations, and legitimate interests in operating and securing the service where that basis is available. We obtain consent when required for an optional use or particular processing. We do not sell personal information or share it for cross-context behavioral advertising. We do not currently run advertising pixels or configured third-party audience analytics on Smew.

4. AI processing and file links

Relevant instructions, chat context, reference images or their URLs, and requested settings are sent to external AI services to perform your request. Our current setup uses DeepSeek for the conversational assistant and fal.ai for image generation and editing. Depending on your selection, fal.ai may route work to model providers such as OpenAI or Google. You can see the selected image model in the product.

We do not operate our own model-training pipeline using your content. That is not a promise that every upstream provider has identical retention or training terms: those providers process data under the terms and settings applicable to their services. Do not assume that requests have zero retention or are covered by a universal no-training guarantee. Links to the relevant providers' policies appear below.

Uploaded and generated images are served through URL-accessible object storage, currently at media.smew.ai. Anyone who obtains a working file URL may be able to open or share the image without signing into Smew. Account screens are access-controlled, but a file link is not a private vault. Avoid uploading confidential material; do not share a link you want to keep restricted. Deleting a chat from the interface removes it from your visible history but does not itself guarantee immediate erasure of the underlying file or every stored copy. Contact us to request removal of stored files.

5. Service providers and other disclosures

• Cloudflare: website delivery, security, application database, image/object storage, and support-email forwarding. See Cloudflare's Privacy Policy.
• fal.ai and the selected image-model providers: execution of image requests and delivery of results. See fal.ai's Privacy Policy.
• DeepSeek: conversational processing of the relevant prompt and conversation context. See DeepSeek's Privacy Policy.
• Waffo Pancake: hosted checkout, merchant-of-record services, payment verification, billing, subscriptions, and refunds. We send purchase information and the account contact/identifier needed to associate the transaction with you. See Waffo's Privacy Policy.
• Google sign-in: if you choose Google sign-in, Google authenticates you and shares your account identifier, email address, name, and profile picture with Smew to create or sign into your account. We request basic identity information, not access to your Gmail messages, Drive files, or contacts. See Google's Privacy Policy.
• Support mailbox providers: emails to our support address are forwarded through Cloudflare to the operator's Gmail mailbox and are processed to answer your request. See Google's Privacy Policy.

We may also disclose information when legally required, to address fraud or protect legal rights, or with your specific permission. If the business is transferred, relevant records may transfer with it, subject to applicable notice and protection requirements. We do not publish your chat history as a public gallery by default; the file-link access described above still applies.

6. Cookies and browser storage

We use authentication cookies for sign-in and security, a language preference cookie, and browser storage for choices such as appearance. A referral-source cookie may be kept for up to 30 days. Session expiry is governed by the authentication service and whether you remain signed in. You can clear cookies and site storage in your browser; doing so may sign you out or reset preferences.

There is currently no Smew advertising-cookie program or separate cookie-consent control for optional analytics. If we introduce non-essential tracking that needs consent, we will add the required notice and controls before using it. The hosted payment site has its own cookies and privacy notices.

7. Retention and deletion

Subscription cancellation stops future billing; it does not automatically close your account or erase your creative history.

• Account and creative content: retained while you maintain the account and saved history. To close the account or permanently remove content, send a deletion request. After verifying your request, we aim to remove or de-identify the relevant active-service data within 30 days unless an exception applies. Removal is handled by support and is not an instant self-service purge.
• Hidden/deleted chats: the interface uses a soft-delete mechanism. Content hidden there can remain in underlying records until it is permanently removed in response to a deletion request or maintenance process.
• Billing records: limited transaction and refund records may be kept for up to 7 years after the transaction for accounting, disputes, and fraud prevention, or longer where a binding legal obligation requires it. We limit such retained records rather than keeping unrelated creative content for this purpose.
• Support records: generally kept for up to 24 months after a case closes, unless needed for an unresolved issue or legal obligation.
• Backups and external providers: deletion of active records does not instantly erase provider backups or a copy another person already downloaded. Infrastructure and AI providers apply their own retention schedules. We will explain any relevant exception when responding to your request.

A legal hold, unresolved payment dispute, security investigation, or statutory recordkeeping duty may require particular information to remain longer. When it no longer serves a permitted purpose, it will be deleted or de-identified. Download important results yourself; we do not promise indefinite image hosting.

8. Security and international processing

We use HTTPS, hashed account passwords, access controls for account and administrative functions, and encryption for stored provider credentials. These controls reduce risk but cannot make transmission or storage risk-free. Publicly reachable image links have the limitations explained above. We will investigate security incidents and provide notices required by applicable law.

The operator is based in China. Cloudflare, payment infrastructure, and AI providers may process information in China, the United States, and other locations where they operate. Your request may therefore involve international transfers. Applicable provider contracts and legally required transfer mechanisms govern these transfers; we do not claim a particular certification, data-localization arrangement, or signed transfer safeguard that has not been established. You may contact us for information relevant to your request before submitting sensitive data.

9. Your choices and rights

Depending on applicable law, you may request access, correction, a copy or export, deletion, restriction, or an objection to processing. You may withdraw consent for processing that relies on consent without changing the lawfulness of earlier processing. You may complain to an appropriate data protection authority and exercise your rights without unlawful discrimination.

Email support@smew.ai from the address associated with your account and describe your request. We may ask for proportionate verification of account control; do not email a government ID unless we explain why it is necessary and provide an appropriate channel. We aim to respond within 30 calendar days, or within a different period required by law, and will explain any permitted extension or reason a request cannot be fully granted.

We use the support email you provide to answer you. Necessary account, security, and billing messages may still be sent when required to operate your account. We do not currently offer an opt-in marketing mailing list through Smew.

10. Children, changes, and contact

Smew accounts are for adults aged 18 or older. We do not knowingly offer accounts to children. If you believe a child created an account or personal information was submitted without permission, contact support so we can investigate and take appropriate action.

We update this policy when our practices change. For material changes affecting existing users, we will give notice through the service or account email, ordinarily at least 15 days before the change takes effect unless law or security requires earlier action. We will seek new consent where required, rather than treating a policy update alone as that consent.

Operator/data controller: 蒋政涛 (Jiang Zhengtao), individual operator, China
Privacy and support contact: support@smew.ai
Related policy: Terms of Service and Refund Policy