Privacy Policy
This policy explains what Guisera collects, why, where it goes, and what you can ask us to do about it. It covers the website, the customer dashboard, and the desktop application.
The section that matters most for a product like this one is what happens to your camera feed. If you read only one part, read that.
1. Who is responsible
Guisera is the responsible party for the personal information described
here.
Privacy and data requests: info@guisera.online
We process personal information under the Protection of Personal Information Act, 2013 (POPIA). Where you are in the European Economic Area or the United Kingdom, we also handle your information in line with the GDPR.
2. What we collect
Information you give us
| What | Why we need it |
|---|---|
| Name and email address | To create your account, sign you in, and contact you about it |
| Password | Stored only as a one-way hash. We cannot read it, and neither can anyone who steals the database |
| Payment reference and receipt | To match your payment to your order and add your credits |
| Support messages | To answer you |
Information created by using the service
| What | Why we need it |
|---|---|
| Session records — start, end, duration, and credits charged | To bill you correctly and to show you your own history |
| Credit ledger | Your balance is the sum of this. It is how we know what you have paid for |
| Sign-in records, including IP address and browser | Security. It is how we spot an account being broken into, and how you can see where you are signed in |
| Device registrations | So you can see which machines are signed in, and remove one |
| Aggregate page statistics | To understand which parts of the site are used |
What we deliberately do not collect
- Your card details. We never see or store them.
- Recordings of your sessions. We do not record, store, or review your camera feed or the transformed output.
- Your reference images. Skins are stored on your own device. They are not uploaded to our servers or held in our database — but read the next section, because that is not the same as saying they never leave your computer.
3. What happens to your camera feed and your Skin
This is the part people ask about, so here it is precisely.
When you start a live session:
- Our server checks your credit balance and issues a short-lived access token for the AI processing provider. The token expires in minutes and is scoped to that session.
- Your desktop application connects directly to the AI processing provider and sends your camera video to it. Your video does not pass through our servers. We never receive it and could not record it if we wanted to.
- The Skin you selected is sent to that provider as the reference image for the transformation. It is read from your device and transmitted at the start of the session.
- The transformed video comes back to your application and is shown to you or passed to your virtual camera.
So: your Skin is stored only on your device, but it is transmitted to the AI processing provider each time you use it in a session. Your live video goes to that provider too, directly. We want to be exact about this rather than let "stored on your device" be heard as "never goes anywhere".
What our servers receive about a session is the metering: that it started, that it ended, how long it ran, and what it cost. Not what was in it.
The AI tools that work on single images are different: those images are sent to our servers and on to a provider for processing. See How the AI works.
4. Why we are allowed to process it
| Purpose | Ground |
|---|---|
| Running your account and providing the service | Performance of our contract with you |
| Taking payment and keeping billing records | Contract, and legal obligation for financial records |
| Security, fraud prevention, enforcing our rules | Our legitimate interest in a service that is not abused |
| Service emails you cannot switch off — password resets, security alerts, receipts | Contract |
| Optional marketing email | Your consent, withdrawable at any time |
5. Who we share it with
We do not sell your personal information. We share it only with the providers that make the service work:
| Who | What they receive |
|---|---|
| Our AI processing provider | Your live camera video and your selected Skin, sent directly from your device during a session. Their own terms govern what they do with it |
| Our hosting provider | Holds the servers and the database |
| Our network and security provider | Sits in front of the website; sees requests and IP addresses |
| Our email provider | Your address and the contents of service emails |
We will also disclose information where the law requires it, or to protect someone from harm.
6. Where your information is held
Our servers are located in France. If you are in South Africa, that means your personal information is transferred outside the country. We rely on section 72 of POPIA: the receiving jurisdiction is subject to laws providing a level of protection substantially similar to POPIA's principles.
Our AI processing provider and our other suppliers may process information in other countries. Where we transfer personal information across borders we do so under a contract requiring protection consistent with this policy.
7. How long we keep it
| What | How long |
|---|---|
| Account details | While your account is open, then up to 12 months |
| Billing and credit records | Up to 5 years after the transaction, because financial records must be retained |
| Session metering records | 24 months |
| Sign-in and security logs | 12 months |
| Support conversations | 24 months after the ticket closes |
| Payment receipts you upload | 5 years, with the billing record they belong to |
8. Your rights
You may ask us to:
- Show you what we hold about you;
- Correct anything that is wrong;
- Delete your account and information, subject to records we must keep by law;
- Object to processing based on legitimate interest;
- Withdraw consent to marketing, at any time;
- Receive a copy of what you gave us, in a portable format.
Write to info@guisera.online. We will respond within 30 days. We may need to confirm who you are first — which is itself a protection, since otherwise anyone could ask for your data.
If you are unhappy with how we handled a request, you may complain to the Information Regulator of South Africa, or to your local supervisory authority if you are in the EEA or UK.
9. Security
We encrypt traffic in transit, hash passwords one way, encrypt stored provider credentials, offer two-factor authentication, restrict administrative access, and keep audit logs of administrative actions. Our database is backed up nightly and the backups are verified by restoring them, not merely written.
No system is perfectly secure. If a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.
10. Children
The service is for adults. It is not directed at anyone under 18 and we do not knowingly collect information from children. If you believe a child has an account, tell us and we will remove it.
11. Changes
The date at the top of this page shows when it last changed. If we make a change that materially affects your rights, we will tell you by email before it takes effect.
