Privacy Policy
What we collect
Your email address and password hash (account), the prompts you submit and the videos generated from them (service operation), token purchase records (billing), and standard server logs (security). Payment card details are handled entirely by our payment provider and never touch our servers.
What we use it for
Operating the Service: authenticating you, generating your videos, maintaining your token balance, and preventing abuse. We do not sell personal data and we do not use advertising trackers.
We use Google Analytics to count visits and see which pages are used. In the EU, the EEA, the UK and Switzerland it counts you only after you agree on the small notice at the foot of the page, and you can decline. Elsewhere it runs by default. It never sees your email address, your requests or your videos.
To make your video, the text of your request, any pictures you attach and any reference video you attach are sent to outside AI services that write and build the video. We send them only what is needed to make your video.
Where it lives
Account data is stored on our servers in the EU/US. Generated videos are stored privately and delivered over links that expire. A published video can be watched by anyone, and search engines such as Google may list it, for as long as you keep it published.
How long we keep it
Account data for as long as your account exists. You can delete your account yourself from your profile page. Your videos, the requests you typed, the pictures and music you uploaded, your public profile, your comments and your email address are then removed from the site at once. The files of your videos and the pictures you uploaded are deleted from our storage at the same moment. A few older copies can stay in our storage, for example an earlier version of a video that was made again, or the working files of a video that was restarted or failed. Ask through the contact page and we remove them by hand.
Records of what you paid and of how your tokens were used are kept, because bookkeeping law requires them. They no longer carry your email address. Copies of our database kept for recovery after a failure are replaced within 30 days. A copy of each email we send you is kept for up to 7 days after it is sent, and longer if it could not be sent. Emails about your orders that already reached our own inbox stay there. Our payment and age-check providers keep their own records under their own policies.
Your rights
You can request a copy of your data or its deletion at any time through the contact page, or delete your account yourself from your profile page. EU/EEA users have the rights set out in the GDPR, including complaint to a supervisory authority.
Age verification
Where the law of your region requires age verification, verification is performed by a specialised third-party provider; we receive only a pass/fail result, never your identity documents.