1. Information we collect
Account information. Your name, email address, profile image, account identifier, authentication provider, account creation date, and sign-in information. Passwords are handled by Firebase Authentication and are not visible to SaffulTech.
Wallet and transaction information. Credit balance, time purchased and used, plan, promo-code usage, payment amount, payment channel, payment reference, provider response, and transaction status.
Creation and live-session information. AI prompts, selected transformation mode, reference images you choose, camera and microphone streams, room identifiers, viewer counts, connection data, and live-chat messages.
Device and service information. Browser and device information, IP address and approximate location derived from it, timestamps, diagnostic logs, security events, and service-performance data. Stream preferences such as resolution and frame rate may be stored locally in your browser.
2. How we collect information
We collect information directly from you, automatically when you use Savatar, from your chosen sign-in provider, from payment providers, and from service providers that help us operate and secure the platform.
Camera, microphone, and reference-image access occurs only after you choose the feature and grant the relevant browser permission.
3. How we use information
- Create and secure your account and provide authentication.
- Operate AI transformations, live rooms, WebRTC delivery, and viewer chat.
- Process payments, maintain credit balances, prevent duplicate credits, and keep transaction records.
- Provide support, investigate errors, enforce our terms, and prevent fraud or abuse.
- Measure reliability and improve Savatar's performance and user experience.
- Comply with legal obligations and respond to lawful requests.
4. Legal grounds for processing
Depending on the context, we process personal data to perform our contract with you, with your consent, to meet legal obligations, and for legitimate interests such as securing the platform, preventing fraud, supporting users, and improving service reliability. You may withdraw consent where processing depends on consent, without affecting earlier lawful processing.
5. Camera, audio, AI, and live rooms
Your browser sends selected media and prompts to the services needed to create the transformation. When you go live, transformed media is delivered to viewers through real-time communication technology. Anyone with access to a public or shared room may view the broadcast and messages.
Savatar does not intentionally make a permanent recording of your live camera, microphone, or chat in the current service. Media may be processed transiently by AI, cloud, and communication providers, and viewers may independently capture content outside our control. Do not broadcast confidential material or anyone who has not agreed to appear.
7. International processing
Some providers may process information outside Ghana. Where personal data is transferred internationally, we take reasonable steps to use providers and safeguards appropriate to the information and applicable law.
8. Retention
We keep account information while your account is active and for a reasonable period afterward to handle support, security, disputes, and legal obligations. Payment and transaction records may be retained for the periods required by financial, tax, fraud-prevention, and recordkeeping rules.
Live signaling and chat are intended to be temporary. Browser preferences remain on your device until you clear them. When information is no longer needed, we delete or anonymise it where reasonably practicable, subject to legal retention requirements and backup cycles.
9. Security
We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, authenticated requests for sensitive operations, encrypted network transport, and restricted service credentials. No internet service is completely secure, so you should use a strong password and protect your devices and account.
10. Your privacy rights
Subject to Ghana's Data Protection Act, 2012 (Act 843), you may ask to be informed about processing; access, correct, block, erase, or destroy eligible personal data; object to or prevent certain processing; withdraw consent; avoid direct marketing; challenge significant solely automated decisions; or complain about unlawful processing.
Send a request from the email associated with your account to the contact below. We may need to verify your identity. You may also complain to Ghana's Data Protection Commission if you believe your data rights have been violated.
11. Children
Savatar is not directed to children under 13. Users under 18 must have a parent or legal guardian's permission. If you believe a child has provided personal data without appropriate permission, contact us so we can investigate and take appropriate action.
12. Policy changes
We may update this policy as Savatar changes or legal requirements develop. We will post the new version with an updated effective date and provide additional notice when a change materially affects how we use personal data.
13. Contact and complaints
SaffulTech (Safful), Ghana, is responsible for Savatar. Privacy questions, rights requests, and account-deletion requests may be sent to safful652@gmail.com.
For more information about your statutory rights, visit the Ghana Data Protection Commission. Use of Savatar is also governed by our Terms of Service.