← Back to home

Terms of Service

Last updated: May 2, 2026

About this document

This is a working draft of the Terms of Service ("Terms") that will govern use of Remasked (the "Service") at public launch. It is written by the Remasked team for internal review and product alignment. It has not yet been reviewed or approved by external counsel. Until the document is finalized and posted to the Remasked website, it is not binding on any user.

The Terms are designed to align with Remasked's privacy architecture (source photos are deleted immediately after generation; only synthetic persona images and one-way face embeddings are retained), with the Remasked Content Policy, and with applicable U.S. and EU law — in particular the Illinois Biometric Information Privacy Act (BIPA), the EU General Data Protection Regulation (GDPR), the U.S. TAKE IT DOWN Act, and the EU AI Act.

1. Introduction and acceptance

Remasked is a service provided by Stonefall Ventures LLC ("we", "us", or "our"), a Wyoming limited liability company doing business as "Remasked". These Terms form a binding legal agreement between you ("you" or "User") and Remasked, the operator of the Service available at remasked.com and any related applications, APIs, and interfaces.

By creating an account, ticking the consent box presented during onboarding before generating your persona, or otherwise accessing or using the Service, you confirm that you have read, understood, and agreed to these Terms, the Remasked Content Policy, and the Remasked Privacy Policy. If you do not agree to any part of these Terms, you must not use the Service.

The Content Policy and Privacy Policy are incorporated into these Terms by reference. In the event of a conflict between these Terms and the Content Policy or Privacy Policy, these Terms prevail except where the Privacy Policy describes how we process your personal data, in which case the Privacy Policy prevails.

Notices to Remasked under these Terms must be sent to one of the email addresses in Section 21.

2. Definitions

The following terms have the meanings given below.

3. Eligibility and age requirement

You must be at least eighteen (18) years old to use the Service. By accepting these Terms you represent and warrant that you are 18 or older, that you have full legal capacity to enter into this agreement, and that you are not barred from using the Service under the laws of your jurisdiction.

The Service is not directed to children. We do not knowingly collect data from anyone under 18. If we learn that an Account was created by, or contains data relating to, a person under 18, we will terminate the Account and delete all associated data immediately, including any Persona, Face Embedding, and Outputs, and we will report any content depicting a minor to the National Center for Missing and Exploited Children (NCMEC) and to law enforcement as required by law.

4. Account creation and consent

You may begin using the Service through an anonymous session and convert to a full Account by linking an email address or supported third-party identity provider. Before you can upload any photo or use any generation feature, you must record two distinct, affirmative consents at signup:

  1. Terms and Content Policy. You agree to these Terms and to the Remasked Content Policy.
  2. Biometric data processing. You give your explicit, informed, written consent to the processing of your face photos and to the storage of your Face Embedding. This consent is the legal basis we rely on under GDPR Article 9(2)(a) and the "written informed consent" requirement of BIPA (740 ILCS 14/15(b)).

Both consents are required, are recorded server-side at the time you provide them, and may be withdrawn at any time. We retain a consent record per user, capturing the date and the consent policy version in effect at the time of agreement; this record is the evidentiary basis for the BIPA "written consent" requirement and is preserved for as long as your Account exists. Withdrawal of biometric consent requires deletion of your Account, because the Face Embedding is technically essential to the Service. See Section 14 (Account deletion and data retention).

You are responsible for keeping your Account credentials confidential and for all activity that occurs under your Account. Notify us immediately at support@remasked.com if you suspect unauthorized access.

5. Biometric data: scope, use, and limits

Remasked processes biometric data in a deliberately narrow way. The following statements are binding commitments, not marketing copy.

By accepting these Terms you confirm that you have read the Remasked Privacy Policy and Section 4 of these Terms, and that you understand and consent to the collection, processing, and storage of your biometric data on the terms described.

6. Acceptable use — self-only rule

The defining rule of the Service is the self-only rule: you may only generate a Persona from your own face, and you may only swap your own face in the photos you upload.

The Service does not restrict the type of content your photo depicts, only whose face appears in it. You may use the Service for any lawful context in which you would otherwise appear with your own face. Your Source Photos must depict you, and the Face Embedding match check at upload time must succeed; if no face in an upload matches your stored Face Embedding with sufficient confidence, the Service produces no Output and consumes no Quota (see Section 10.6).

You may upload photos that contain other people. The Service will swap only the face that matches your stored Face Embedding; other faces are passed through unchanged. You are solely responsible for ensuring that you have the necessary rights to upload any photo containing other people and to publish any Output that includes them.

7. Prohibited conduct

The following uses are strictly prohibited. Engaging in any of them is a material breach of these Terms and will result in suspension or permanent termination of your Account at our sole discretion, without refund. Serious violations are reported to law enforcement.

  1. Impersonation. Creating, requesting, or attempting to create a Persona that resembles a specific other person — celebrity, public figure, or private individual — rather than yourself. The self-only rule admits no "authorized likeness" exception.
  2. Non-consensual intimate imagery (NCII). You may not use the Service to create non-consensual intimate imagery — that is, to place any person's face onto sexually explicit content without that person's free, specific, informed, and unambiguous consent. Publishing or distributing such content is a federal crime under the U.S. TAKE IT DOWN Act.
  3. Content involving minors. Uploading any photo depicting a minor, or generating any Output depicting a minor in any context. Detected content is removed immediately and reported to NCMEC and law enforcement.
  4. Fraud and deception. Using a Persona or Output to impersonate another person for financial fraud, identity theft, KYC circumvention, or to deceive any person, platform, or institution into believing they are interacting with a specific real person.
  5. Harassment, threats, and intimidation. Using Outputs to harass, threaten, defame, intimidate, dox, or otherwise harm any person.
  6. Bypassing safety controls. Attempting to circumvent the self-only rule, the Face Embedding match check, the concurrent-job cap, or any other technical guardrail of the Service, including by uploading photos of a third party while pretending to be them.
  7. Unlawful use. Using the Service in violation of any applicable law, including export control, sanctions, intellectual property, privacy, anti-discrimination, or right-of-publicity law.
  8. Service abuse. Reverse engineering, scraping, automated mass-extraction, redistribution of the Service, or use of the Service to build a competing product.

8. Your responsibilities and disclosure obligations

You are solely responsible for the photos you upload, the Outputs you generate, and any use you make of them — including publication, sharing, sale, or other distribution.

You acknowledge that:

9. Intellectual property and content licensing

Subject to these Terms, you retain all rights you have in the photos you upload. You grant Remasked a limited, worldwide, royalty-free, non-exclusive license to host, process, transmit, and operate on those photos and on your Face Embedding solely for the purpose of providing, securing, and improving the Service to you. The license to a Source Photo terminates automatically when the Source Photo is deleted at the end of the generation pipeline. The license to your Face Embedding terminates on Account deletion.

The Persona image and Outputs generated by the Service for your Account are made available to you for any lawful use, subject to these Terms. As between you and Remasked, you may use, publish, sell, and otherwise exploit your Persona and Outputs without further license fees. We retain all rights in the underlying models, software, and infrastructure used to produce them.

The Remasked name, logo, website, software, and underlying technology are owned by Remasked and protected by intellectual property law. These Terms do not grant you any rights in the Remasked brand or technology except as expressly stated.

10. Subscriptions, tokens, and billing

The Service is offered on a subscription basis with monthly Quotas, plus optional one-off top-up packs. Pricing, tier names, and Quota amounts are displayed in-app at the time of purchase and may change from time to time on prospective notice.

10.1 Trial Grant. New accounts receive a one-time Trial Grant of 20 image swaps and 2 minutes of video. The Trial Grant is non-recurring and may be revised or withdrawn for new accounts at our discretion.

10.2 Subscription. Subscriptions renew automatically each billing period until cancelled. By starting a subscription you authorize our payment processor to charge your payment method on each renewal date. You may cancel at any time through your Account settings; cancellation takes effect at the end of the then-current billing period.

10.3 Top-up packs. Top-up packs are one-off purchases. Top-up Credits do not expire while your Account remains active. Top-up Credits are preserved across subscription lapses (Section 10.5) and are forfeited only on termination for breach (Section 11).

10.4 Quota rollover. Unused monthly Quota expires at the end of each billing cycle. Top-up Credits do not expire.

10.5 Subscription lapse. If your subscription lapses (non-payment, cancellation, or expiry), new generations are blocked but your Persona and any unused, non-expired Top-up Credits are preserved. Resubscribing restores access immediately. Your Persona is never deleted because your subscription lapsed; it is deleted only on explicit Account deletion.

10.6 Failed-generation credits. Failed generations do not consume paid Quota. If a generation fails for a technical reason — including but not limited to no face matching with sufficient confidence, job crash, timeout, or output that is unusable due to obvious pipeline failure or severe visual corruption — your Quota is not consumed. Where this is not detected automatically you may flag the result through the in-app "Bad result" action; on review of the flagged Output, the credit is restored automatically.

Subjective dissatisfaction with an Output that is not a technical failure does not entitle you to a credit refund. We retain reasonable discretion over what constitutes a technical failure, exercised in good faith.

10.7 Payments and Merchant of Record. Payments are processed by Paddle, which acts as the Merchant of Record for transactions on the Service. Your bank statement will show "PADDLE.NET". Email receipts and invoices reference Remasked. Sales tax, VAT, and equivalent indirect taxes are collected by Paddle as required by law.

10.8 Refunds. Except where required by mandatory consumer law, all subscription and top-up purchases are final and non-refundable. We do not refund Quota, Credits, or fees on Accounts terminated for breach of these Terms or the Content Policy. Where mandatory consumer-protection law (for example, EU and UK distance-selling rules) grants a right of withdrawal, that right applies despite this clause; you acknowledge that by using the Service to generate Outputs you may be deemed to have consented to immediate performance and to have waived the withdrawal right to the extent permitted by law.

10.9 Billing disputes. You must notify us of any billing dispute in writing within sixty (60) days of the disputed charge. Failure to do so within the window is a waiver of the dispute to the extent permitted by law.

11. Suspension and termination

We may suspend or permanently terminate your Account, in whole or in part, with or without notice, if we reasonably believe that you have breached these Terms or the Content Policy, that your use of the Service exposes Remasked or any third party to legal or reputational risk, that your Account has been compromised, or that suspension or termination is necessary to comply with law or to protect the integrity of the Service.

Termination for breach is effective immediately. On termination for breach you forfeit any remaining subscription Quota, Top-up Credits, Trial Grant, and referral rewards, and you are not entitled to any refund. Termination for any other reason follows the deletion process described in Section 14.

You may terminate these Terms at any time by deleting your Account through your Account settings. Sections that by their nature should survive termination (including Sections 5, 8, 9, 11, 12, 13, 14, 16, 17, 18, and 19) survive.

12. Reactive enforcement, takedown requests, and law enforcement reporting

Remasked operates an ephemeral content model: Source Photos are deleted immediately after processing, Outputs auto-delete after seven (7) days, and there is no public content library on the Service. As a result, our enforcement is reactive rather than proactive: we do not run automated CSAM scanning at generation time, and we do not retain Outputs for retrospective review. The Content Policy prohibits CSAM, NCII, and other abuse, and on credible report or other actual knowledge of a violation we will terminate the relevant Account and, where required, file a CyberTipline report with NCMEC under 18 U.S.C. § 2258A.

If you believe content generated through the Service violates these Terms, infringes your rights, or constitutes non-consensual intimate imagery within the meaning of the TAKE IT DOWN Act, email support@remasked.com. We will acknowledge and act on valid takedown requests within forty-eight (48) hours, in line with our obligations under the TAKE IT DOWN Act. Because our retention windows are short and we do not host published content, the practical response to a valid takedown is termination of the offending Account (which blocks future generations) and deletion of any Outputs still in temporary storage.

We respond to valid law-enforcement requests in accordance with applicable law. We do not voluntarily disclose user data except as set out in our Privacy Policy.

13. Adult content and platform positioning

Remasked is positioned as a privacy and identity-separation tool for creators, not as an adult content platform. The Service does not produce or distribute sexually explicit content as such, and we do not provide adult-content templates, suggestions, or libraries.

Remasked does not restrict the type of content your photo depicts, only whose face appears in it. The self-only rule and the prohibition on non-consensual intimate imagery apply absolutely. We may at any time decline to process, or refuse to continue processing, content categories that present unacceptable legal, payment-processor, or reputational risk, and we may revise this position as the legal and commercial landscape changes.

14. Account deletion and data retention

You may delete your Account at any time from your Account settings. Account deletion is the mechanism by which you exercise your right to erasure under GDPR Article 17 and your right to withdraw biometric consent under Section 4.

On Account deletion we permanently delete your Persona image, Face Embedding, remaining Quota and Credits, referral codes, email address, and Account metadata. Outputs in temporary storage are deleted on the normal seven-day schedule (or sooner). All personal data — including biometric identifiers — is permanently removed from active systems within thirty (30) days of Account deletion. Backups containing biometric data are purged within thirty (30) days of the corresponding active-system deletion. We may retain a minimal record of the fact of deletion and of any prior Terms breach where required to comply with law or to defend legal claims.

Specific rights granted by GDPR, UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), BIPA, and similar laws are described in the Privacy Policy. To exercise any of these rights, contact support@remasked.com.

15. Service availability and changes

We provide the Service on an "as available" basis and may modify, suspend, or discontinue any part of it at any time, with or without notice. We will give reasonable advance notice of changes that materially reduce paid functionality, and where required by law we will offer a pro-rated refund for any prepaid period that becomes unusable as a result.

We may update these Terms from time to time. Material changes will be communicated via email or in-app notice. Material changes to how we process biometric data, or to your rights and obligations, will require your renewed acceptance before you can continue using the Service.

16. Disclaimers

To the maximum extent permitted by law, the Service, the Personas, and the Outputs are provided on an "as is" and "as available" basis, without warranties of any kind, whether express, implied, statutory, or otherwise. Remasked specifically disclaims warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, uninterrupted operation, error-free operation, and that any Output will satisfy any specific biometric, aesthetic, or third-party platform-acceptance outcome.

Without limiting the generality of the foregoing, you acknowledge that face-swap and persona-generation pipelines are probabilistic, that some Outputs may exhibit visual artifacts, that persona properties are tested and tuned but not guaranteed, and that no representation is made about whether any third-party platform will accept Outputs for publication.

17. Limitation of liability

To the maximum extent permitted by law, in no event will Remasked, its officers, directors, employees, affiliates, or agents be liable to you for any indirect, incidental, consequential, special, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, business opportunity, or substitute services, however caused and on any theory of liability, even if Remasked has been advised of the possibility of such damages.

Remasked's aggregate liability arising out of or relating to these Terms or the Service, on any theory of liability, will not exceed the greater of (a) the total fees paid by you to Remasked in the twelve (12) months immediately preceding the event giving rise to the claim, or (b) one hundred U.S. dollars (USD 100).

Nothing in these Terms limits or excludes any liability that cannot lawfully be limited or excluded — including liability for fraud, fraudulent misrepresentation, gross negligence, or willful misconduct, or any non-waivable consumer-protection right.

18. Indemnification

You agree to defend, indemnify, and hold harmless Remasked and its officers, directors, employees, affiliates, and agents from and against any claim, demand, action, loss, liability, damage, cost, or expense (including reasonable attorneys' fees) arising out of or relating to (i) your use of the Service, (ii) your breach of these Terms, the Content Policy, or applicable law, (iii) your infringement or misappropriation of the rights of any third party, including any photo subject other than yourself, or (iv) any Output you publish or otherwise distribute, including any failure to comply with mandatory disclosure obligations under the EU AI Act Article 50 or analogous law.

We reserve the right, at our own expense, to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which case you agree to cooperate with our defense.

19. Governing law, dispute resolution, and venue

These Terms are governed by the laws of the State of Wyoming, United States, without regard to conflict-of-law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Mandatory binding arbitration. Except for the carve-outs below, any dispute, claim, or controversy arising out of or relating to these Terms or the Service ("Dispute") will be resolved exclusively by final and binding individual arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules then in effect. The arbitration will be conducted in Sheridan County, Wyoming, or by remote/video hearing at the arbitrator's election; the arbitrator's award may be entered as a judgment in any court of competent jurisdiction.

Class-action waiver. You and Remasked each agree that Disputes will be brought only in your or our individual capacity and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person's claims and may not preside over any form of representative or class proceeding. If this class-action waiver is held unenforceable as to any Dispute, that Dispute (and only that Dispute) will be severed from arbitration and proceed in the courts identified below.

Carve-outs. Either party may (i) bring an individual claim in small-claims court if it qualifies, and (ii) seek injunctive or other equitable relief in court to protect intellectual property, confidential information, or to enforce the self-only rule and the prohibitions in Section 7.

Court venue for non-arbitrable matters. For any Dispute that is not subject to arbitration, the exclusive venue is the state or federal courts located in Sheridan County, Wyoming, and each party consents to personal jurisdiction there and waives any right to a jury trial to the extent permitted by law.

Mandatory consumer rights preserved. Mandatory consumer-protection rights of users resident in the EU, UK, or other jurisdictions that do not permit a foreign choice of law, mandatory arbitration, or class-action waiver for consumer contracts are not displaced by this clause to the extent the law of the user's residence requires otherwise.

20. Miscellaneous

20.1 Entire agreement. These Terms, together with the Content Policy and Privacy Policy, are the entire agreement between you and Remasked regarding the Service and supersede all prior agreements on the same subject matter.

20.2 Severability. If any provision of these Terms is found to be unenforceable, that provision will be enforced to the maximum extent permissible and the remaining provisions will remain in full force.

20.3 No waiver. Our failure to enforce any provision is not a waiver of our right to do so later.

20.4 Assignment. You may not assign or transfer these Terms or any rights under them without our prior written consent. We may assign these Terms to an affiliate or in connection with a merger, acquisition, or sale of assets, on notice to you.

20.5 Force majeure. Neither party is liable for delay or failure to perform caused by events beyond its reasonable control, except for payment obligations.

20.6 Notices. We may give notices to you by email to the address associated with your Account or by in-app notice. You must give notices to us by email to the relevant address in Section 21.

20.7 Relationship. Nothing in these Terms creates any partnership, agency, joint venture, or employment relationship between you and Remasked.

21. Contact

Stonefall Ventures LLC d/b/a Remasked.

For all communications — general questions about these Terms or the Service, privacy questions or data-subject rights (including deletion), and takedown requests under the TAKE IT DOWN Act or the Content Policy — email support@remasked.com.