Privacy policy

Last updated: October 25, 2026

plori operates SweepSet (“we”). This policy explains how we handle data when you use sweepset.com. For privacy requests, email agent@plori.ai.

What we collect

We create an anonymous account and a browser identifier when you first use SweepSet’s API. You can use free tries without providing an email address. If you sign in or buy credits, we store your verified email address. We store a hash of each sign-in code. Each code expires after 10 minutes.

We store the product photos you upload and their cut-outs. We also store generated images, videos, product names, selling points, style choices, and edit instructions. Job records include status, timestamps, credit use, and generation costs.

SweepSet stores a hash of your IP address for usage limits and abuse prevention. We use a secret when making this hash. Cloudflare receives your IP address when serving requests and checking for bots. Cloudflare also handles service error logs.

We record usage events such as page visits, uploads, generation requests, sign-ins, and purchases. These records include browser and account identifiers, timestamps, and referral campaign information when available. Signing in can link these records to your email account. We use these records to understand product use.

For purchases, we keep order references, the pack purchased, amount, currency, payment status, and credit transactions. Dodo Payments collects payment details through its checkout. SweepSet does not store card numbers.

How we use and share data

We use your data to make and deliver your images and videos. We use account and payment records to manage sign-in, credit balances, and refunds. Usage limits and human checks help us prevent abuse. We do not sell your personal data.

These providers handle data to run SweepSet:

• Cloudflare hosts the site and Worker, stores data, processes images, and sends sign-in emails. Its Turnstile service checks for bots.
• plori runs the AI jobs. It receives product photos, cut-outs, product details, and edit instructions needed for each job. Its model providers receive the images and instructions needed for generation. See plori’s privacy policy for its providers and data practices.
• Dodo Payments is the merchant of record for purchases. It receives your email address, order details, and payment information. It handles payments, refunds, and payment disputes under its own policies.

We store photos and generated files in Cloudflare R2. We store account, job, payment, and usage records in Cloudflare D1. We also send job inputs to plori for processing. Each provider applies its own data retention rules to the data it receives.

Cookies and browser storage

SweepSet uses a signed cookie named ss to recognize your browser and its account. The cookie has a maximum age of 400 days. It uses Secure, HttpOnly, and SameSite=Lax settings. Clearing it can remove your browser’s access to an anonymous account. Clearing it does not delete server records.

Your browser also stores your saved-image selections locally. These selections remain until you clear that storage or change them. Your browser may cache photos and outputs for up to one year. Downloaded files can remain on your device after we delete server copies.

Retention and deletion

Daily cleanup removes eligible anonymous job data after seven days of inactivity. Activity here means an upload, job request, or sign-in. This applies to accounts with no email address and no credit history that started a job on plori. Cleanup waits for active jobs to finish. It deletes uploaded photos, cut-outs, outputs, project records, and job records. It also deletes the corresponding plori user. The SweepSet account and browser records remain.

Daily cleanup also deletes uploads that never start a job, for every account. It deletes the photo, the cut-out, and the project record seven days after the upload. Signing in can transfer anonymous projects into your email account. Cleanup then removes the old plori user after its active jobs finish. The transferred projects remain in your email account.

Expired sign-in code records remain stored. Upload-limit records and usage events also remain stored. We do not currently set an automatic deletion period for these records, other account data, or billing records. Other photos and outputs also have no automatic deletion period.

Email agent@plori.ai to request access, export, correction, or deletion of your data. We may retain billing records where tax or accounting law requires them.

Changes and contact

We will post policy updates here and change the date above. Contact agent@plori.ai with privacy questions.