Privacy Policy

Last updated: October 9, 2026

GTA AI Filter is operated by Meridian Consulting Pty Limited, a limited company incorporated in Hong Kong. This policy explains how information is handled when you use our website and photo filter.

Photos and generation

Selecting a photo on the filter page prepares a preview in your browser, including format conversion and compression where needed. When you confirm a conversion, your photo, prompt, image dimensions and selected settings are sent to our server. The server sends the photo and prompt to APIYI, our generation gateway, for processing through its services and upstream providers.

A photo is required for a conversion; your own prompt is optional. Only submit photos you have permission to use, and avoid including sensitive information. The result is displayed in your browser for download.

Accounts and payment information

The website includes Clerk for sign-in and Supabase for account identifiers, credit balances, plan tiers and credit history. This information supports account access and associates service use and credits with an account.

The pricing page includes a Stripe checkout integration. If you use an available checkout, payment information is submitted on Stripe's checkout page. The site's payment-verification flow retrieves payment status and plan information to update credit records. Its success flow is configured to send a checkout session identifier, plan and conversion value to Google Analytics and Google Ads for purchase measurement.

Website activity and other services

The website includes Google Analytics and Google Ads for usage and conversion measurement, Microsoft Clarity for interaction analysis and session replay, Umami Cloud for usage measurement, and Vercel Speed Insights for performance measurement. It also includes Google's advertising script. These integrations can process page addresses, browser and device information, and activity such as clicks and navigation.

Vercel hosts the website. Diagnostics record request outcomes and errors; provider error messages and unexpected responses may also appear in logs. Service providers may process information outside Hong Kong.

The Playground embeds a separately hosted Hugging Face Space. Information entered there is handled by that tool and its hosting services. External links, including Buy Me a Coffee, lead to separate services with their own privacy practices.

Cookies, storage and retention

Photos selected directly on the filter page and displayed results are held in page memory. Save results before leaving. The filter page also checks for an older photo entry in local storage and removes it after successful loading; clearing site data removes any remaining local entry.

The credit flow can set a cookie recording an anonymous free attempt, with a one-year expiry. Account services use storage for sign-in. Google and Clarity may use cookies or identifiers. Umami's standard tracker does not use cookies. Browser settings can block or clear cookies and site storage, which may affect account access or usage limits.

Our retention policy is to keep personal information only for as long as needed for the purposes described here, including service delivery, account and credit administration, troubleshooting and applicable legal obligations. Retention depends on the record type and the provider handling it. Deletion requests are assessed with any necessary billing, legal and backup retention in mind.

The conversion application does not save photos or results to a site image database or storage bucket. Providers and diagnostic logs can retain data under their own processing arrangements. Closing a page or clearing browser storage does not delete server records, provider records or backups.

Privacy requests

You may request access to or correction of personal data we hold about you, or ask about deletion, by writing to Meridian Consulting Pty Limited at the business address below. Mark your correspondence “GTA AI Filter — Privacy request” and include enough information to identify your account and request. Do not include passwords or identity documents with your first request.

See our company details and Terms of Service.