Privacy Policy

Effective date: September 16, 2026
Company: Ogando Creative Design LLC, 11 Lincoln Ave, Toms River, NJ 08753, USA
Contact: ocdrapidstudio@ogandocreativedesign.com

1. Who we are

This Privacy Policy explains how Ogando Creative Design LLC ("OCD," "we," "us") collects, uses and shares personal information when you use OCD RAPID STUDIO, formerly called OCD-LOOKS, at https://ocdrapidstudio.ogandocreativedesign.com (the "Service").

OCD is responsible for the personal information described here. When a team workspace or ENTERPRISE customer uploads images of other people, that customer is also responsible for that information.

2. The short version

We collect what we need to run your account, generate your images and video, bill you and keep the Service safe.
Images you upload and results we generate can show people's faces. An Amazon Web Services tool analyzes those images for safety checks. Some laws treat this as biometric information. Please read Section 5.
We use service providers, including AI providers that generate your results.
We do not store your card number.
We do not sell your personal information or share it for targeted advertising.
The Service is for adults 18 or older.
You can ask to see, correct or delete your information. See Section 12.

3. Information we collect

Information you give us

Account details: your name and email address. If you sign in with Google, we receive your name, email address and profile picture from Google.
Workspace membership: which team workspaces you belong to and your role in them.
Uploaded images: garments, sketches, product photos and photos of models. These can include people's faces.
Prompts and settings: the text and choices you enter to create results.
Messages: what you send us when you contact us.

Information created when you use the Service

Generated results: images and video created for you. These can include realistic faces.
Billing status: your plan, renewal dates and payment status. We do not receive or store full card numbers.
Credit ledger and usage: credits added, used and not charged, and which features you ran.
Session information: your active sign-in sessions, used to limit how many sessions one user can have.
Technical logs: records such as request times, pages and errors, which can include your IP address and browser type.
Moderation results: the outcome of automated safety checks on images (see Section 5).

Information from other companies

Clerk provides your account, sign-in and billing status.
Stripe processes your payment and reports, through Clerk, whether it succeeded.
Google shares profile information if you choose Google sign-in.
Amazon Web Services returns the results of image checks.

4. How we use information

We use personal information to:

create and manage your account and team workspaces;
run the features you choose, including sending images and prompts to AI providers to create results;
keep your results in your Gallery;
process payments, subscriptions and credits;
prevent fraud, account sharing and security threats;
check content against our rules and the law, including blocking explicit content, sexualized content involving minors, and unauthorized use of real people;
provide support and send service emails such as sign-in messages, receipts and account notices;
fix problems and keep the Service reliable;
meet legal duties and enforce our Terms of Service.

We do not use your uploads, prompts or results to train AI models, and we do not use them in our marketing without your permission.

5. Faces, image analysis and biometric information

Please read this section carefully.

What happens. Amazon Web Services Rekognition analyzes images you upload and images the Service generates. It is used for three things:

Face detection: finding whether faces appear in an image.
Celebrity recognition: checking whether an image appears to show a known public figure.
Moderation labels: flagging content such as explicit nudity.

Why. To enforce our content rules: to block explicit content and anything that sexualizes minors, and to stop real celebrities or other brands' talent from being used without authorization. This analysis is not used to identify ordinary users, for advertising, or for sale.

Why it matters legally. This analysis looks at facial features. Some laws treat information taken from a face as biometric or sensitive personal information. Examples include the Illinois Biometric Information Privacy Act (BIPA), the Texas law on biometric identifiers, Washington's biometric identifier law and its My Health My Data Act, Colorado's biometric data rules, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), along with other state privacy laws.

What we keep. We do not create or store face templates ("faceprints") or face measurements. Each check returns a result that we use at that moment to allow or block the request. When a check recognizes a licensed or public figure, the name can appear in our server logs, which are kept for a short time.

Consent. By uploading an image, you consent to this automated analysis of that image for the purposes above. If you do not consent, do not upload images of people.

Your promise about people in your images. When you upload an image of a person, you confirm you have their permission to use their image and likeness in the Service, including any notice or consent the law requires for this kind of analysis. For a child, that permission must be a model release signed by the child's parent or legal guardian.

Amazon's role. Amazon Web Services processes these images as our service provider, under its own terms.

6. Service providers and AI processing

We share personal information with companies that help us run the Service. They may use it only to provide their services to us, under their contracts and terms.

Provider	What they do for us	What they may receive
Clerk	Accounts, sign-in (including Google sign-in), billing, transactional email	Name, email, Google profile, session data, plan and billing status
Stripe	Payments	Payment details you enter at checkout, payment status
Supabase	Database and file storage	Account and workspace data, uploads, results, prompts and settings, credit ledger, logs
Vercel	Hosting	Technical logs and request data
fal.ai	Image and video generation, using models including Google Nano Banana Pro, ByteDance Seedream and Seedance, Vidu, the Clarity upscaler, and background-removal and depth models	The uploads, prompts, settings and results needed for each job
FASHN	Try-on, model and video generation	The uploads, prompts, settings and results needed for each job
Amazon Web Services (Rekognition)	Automated moderation, face detection, celebrity recognition	Uploaded and generated images
LeadConnector (GoHighLevel), through our website provider Telos	The "Start a project" inquiry form on our home page	The name, email, phone, company, project type, budget and message you send
Amplitude	Product analytics: which pages are viewed and which buttons are used	Page views, clicks, device and browser type, approximate location from IP address, and an analytics ID. Not the images, prompts or text you enter, and no screen recordings

7. Other sharing

Your workspace. If you belong to a team workspace, its admins and members may see the content, usage and credits in that workspace.
Safety and the law. We may share information to comply with the law, respond to valid legal requests, protect people, or report child sexual abuse material to the National Center for Missing & Exploited Children.
Business changes. If OCD is part of a merger, sale or reorganization, information may transfer under this policy.
With your permission. When you ask us to share it.

We do not sell personal information and do not share it for cross-context behavioral advertising.

8. Cookies and similar technologies

Sign-in session cookies. Clerk uses cookies to keep you signed in and to secure your session. These are required for the Service to work.
Payments. Stripe may use cookies or similar technologies at checkout to prevent fraud.
Analytics. Amplitude sets cookies and local storage so we can count page views and see which features people use. We do not record your screen.
Advertising. We do not use advertising cookies.

You can block cookies in your browser settings, but if you block sign-in cookies you will not be able to sign in.

9. How long we keep information

We keep personal information only as long as needed for the purposes in this policy, unless the law requires longer.

Information	How long we keep it
Account details	While your account is open, then deleted within 90 days after it closes
Workspace membership	While you are a member, then deleted within 90 days
Uploaded images, generated results, prompts and settings	Until you delete them or your account closes, then deleted within 90 days
Billing status and credit ledger	As long as tax and accounting rules require
Session information	While the session is active, and briefly after
Technical logs	Up to 30 days
Face-related check results	Not stored after the check completes, apart from the short-lived server logs described in Section 5
Backups	Overwritten on a rolling schedule

10. Security

Connections to the Service are encrypted (HTTPS). Access to stored data is limited to OCD staff who need it to run and support the Service. Card numbers are handled by Stripe and are not stored by OCD. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

11. Children

The Service is for adults 18 or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that a child has created an account, we will delete it. If you believe a child has given us information, email us.

Content that sexualizes minors is forbidden. Images of real children may be uploaded only by customers who hold a model release signed by the child's parent or legal guardian, as our Terms of Service describe.

12. Your privacy rights

Depending on where you live, you may have the right to:

Know and access the personal information we hold about you;
Correct information that is wrong;
Delete your information;
Get a copy of it in a portable format;
Opt out of the sale of your information, sharing for targeted advertising, or certain profiling;
Limit the use of sensitive personal information, including biometric information;
Withdraw consent you have given, such as consent to face-related analysis;
Appeal if we deny your request.

We honor these requests for all users, wherever they live.

How to make a request

Email ocdrapidstudio@ogandocreativedesign.com with the subject line "Privacy request."
You can update your account details, sign-in and billing in Manage account, and delete results from your Gallery at any time.
We will confirm your identity before acting, for example by confirming the email address on your account.
An authorized agent may make a request for you with proof of your permission.
We will respond within 45 days, or sooner where the law requires.
We will not treat you differently for using your privacy rights.

Team workspace content. If your information sits in a workspace controlled by an employer or a client, some requests may need to go to that workspace owner.

Emails. We send service emails about your account and billing. If we ever send marketing email, each one will include an unsubscribe link.

13. Users outside the United States

OCD is based in the United States. Our providers process information in the United States and possibly in other countries. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from yours.

14. Changes to this policy

We will post any update here and change the effective date. For important changes, we will tell you by email or in the app at least 14 days before they take effect.

15. Contact

Questions or requests about privacy:

Ogando Creative Design LLC
11 Lincoln Ave, Toms River, NJ 08753, USA
ocdrapidstudio@ogandocreativedesign.com