Invit3D
0
Back to Dashboard

Security Policy

How Invit3D protects your sensitive AI data and credits

AI Reference Photo Protection

  • Your uploaded reference photos are stored in private, access-controlled storage. Only you and the platform can access them.
  • Photos are never exposed to other users, guests, or the public. They are used solely as identity references for your AI-generated invitations.
  • You can delete your reference photos at any time from the Account Settings page, and they are permanently removed from storage.
  • Photos are never used to train AI models or shared with third-party services for any purpose beyond generating your invitation.

Identity Preservation

  • Invit3D enforces identity preservation by default on all AI image generation. Facial features, skin tone, and distinguishing characteristics from your reference photos are maintained.
  • Each generated image is validated against your source references. If identity drift is detected, the system flags the output and can regenerate with stricter preservation rules.
  • Identity preservation cannot be disabled. This is a base-level feature that ensures every AI-generated image faithfully represents the people in your reference photos.

Credit Security

  • Your AI credit balance is stored in a server-side wallet that only the platform can modify. You cannot directly edit your balance.
  • Credits are deducted atomically before each AI generation begins. If a generation fails, credits are automatically refunded to your wallet.
  • Credit purchases are verified through Stripe webhooks before being granted. Duplicate webhook deliveries are deduplicated to prevent double-charging.
  • Daily generation limits (50 per user) and platform spend caps ($50/day) protect against runaway usage and unexpected charges.

Data Encryption

  • All API keys and provider credentials are encrypted at rest using AES-256-GCM encryption with a server-side master key.
  • Credentials are never exposed to the browser, frontend code, or public API responses. Only masked display versions are shown in the UI.
  • All communication between your browser and the platform uses HTTPS encryption in transit.

Failed Generation Policy

  • If an AI generation fails for any reason (provider error, timeout, or invalid output), credits are automatically restored to your wallet.
  • The system maintains a detailed audit trail of every generation attempt, including status, cost, and error messages.
  • You can view your complete generation history on the Credit History page for full transparency.

Data Retention & Deletion

  • You can request deletion of your AI reference photos, generated assets, and event data at any time.
  • Deleted data is permanently removed and cannot be recovered.
  • The platform does not retain personal data longer than necessary to provide the service.

Questions or Concerns?

If you have questions about how your data is handled, contact support through the Help Center. We take your privacy and security seriously and are committed to transparency in all our data practices.