PRIVACY POLICY - OFMAI.AI
Last update: January 26, 2026
This Privacy Policy describes how Ofmai.ai ("we", "us", "our") collects, uses, and protects User personal data and data related to Models whose images are processed via our artificial intelligence services.
1. LEGAL FRAMEWORK AND COMPLIANCE
Ofmai.ai is committed to processing your data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés). Given the nature of adult content generation services, we apply enhanced security and confidentiality measures.
2. DATA COLLECTION
2.1 User Data (Client)
Identification: Email address and username required for account creation.
Payment: Transactions are managed by secure third-party payment providers. Ofmai.ai does not store your banking details.
Age: In the absence of a third-party verification system, we collect your sworn statement of majority (+18 years old).
2.2 Model Data (Uploaded Content)
Source Images: Photos or videos you upload to train the AI.
Derived Biometric Data: Our technology analyzes facial features to create a mathematical model ("AI Double"). This data is used exclusively to generate the media requested by the user.
3. LEGAL BASIS AND CONSENT
The processing of images of real people is based on the guarantee provided by the User that they hold the explicit consent of the Model.
Responsibility: The User is responsible for ensuring that the Model has consented to the processing of their image by an AI.
Third-party Rights: Any third party (Model) whose image has been used without their agreement can request the immediate deletion of data and derived models by contacting [email protected].
4. PURPOSES OF PROCESSING
We use the collected data to:
Provide AI content generation services and ensure visual consistency of avatars.
Prevent and detect the creation of illegal or non-consensual content.
Comply with our legal obligations regarding data retention (logs).
Ensure technical support and subscription management.
5. DATA SHARING AND TRANSFER
Hosting: Data is stored on secure servers located in the European Union or in countries guaranteeing an adequate level of protection.
Authorities: We will cooperate with judicial authorities in the event of a legitimate requisition related to the creation of illegal content (non-consensual deepfakes).
6. SECURITY AND RETENTION
Security: Uploaded files are encrypted, and access is strictly limited to technical processes necessary for generation.
Duration: Data is retained as long as the account is active. In case of account deletion, data is deleted or anonymized within 30 days, subject to legal retention obligations.
7. YOUR RIGHTS (GDPR)
In accordance with regulations, you have the following rights:
Right of access and rectification of your data.
Right to erasure ("right to be forgotten").
Right to limitation of processing.
Right of opposition, particularly to the processing of your images.
To exercise these rights, contact our data protection officer at: [email protected].
8. LEGAL CONTACT
For any report regarding non-consensual content or for any legal question (DSA), please contact our single point of contact: [email protected].
