Privacy policy

Information we process

We store account details, authentication sessions, prompts, uploaded references, generated videos, orders and credit transactions. Stripe handles payment card details; this application does not store them.

Usage analytics

Usage analytics is on by default. The control below this privacy policy turns it off for the current browser tab, and turning it off stops collection in this tab immediately. It records page paths and action categories, using anonymous and session IDs scoped to this tab, plus the authenticated account ID when you are signed in. It does not record prompts, images, credentials, query strings or administrator activity. Browser Global Privacy Control keeps collection off. Raw events are kept for up to 90 days and removed by the scheduled cleanup, and signed-in events are deleted with the account. If you register while analytics is on, the registration event links this tab to your new account for conversion analysis; earlier anonymous rows are not rewritten. Signing in to an existing account does not claim anonymous history. Registration, verification, payment and generation facts are recorded separately as service records, even when analytics is off. While analytics is on, we keep a coarse first-observed source (such as Google or a known AI service) and a public landing-page path. Only recognized source hints and a paid-campaign flag are used; we do not store raw referrer URLs, search terms, campaign values or ad click identifiers. This source is fixed when a new account is created and stays until account deletion; anonymous source records expire after 90 days. We do not infer a source when none is present. A creation flow ID can link steps within the same draft, including a sign-in handoff.

Google Analytics

We use Google Analytics 4 to measure visits to public pages. The Google tag loads by default on public pages once the app is running. It is not loaded on private account pages or administrator routes, and it is not loaded while analytics is turned off in this tab or your browser sends Global Privacy Control. We send page paths without query strings or fragments, and we do not send your prompts, uploads, account ID or email. Google receives technical data such as your IP address and browser information, and may use analytics cookies. We manage Google Analytics data separately from our 90-day internal event records. Advertising consent and Google signals stay disabled. Turning analytics off stops further collection in this tab and clears accessible Google Analytics cookies for this site. Cookies are shared across tabs, so another tab where analytics is on may create them again; this does not delete data already sent to Google.

Service providers

Cloudflare hosts the application, database, workflows and private media storage. Better Auth manages authentication. Google processes Google sign-in. Resend sends account emails. Yir and its routed model providers process submitted prompts and reference media. Waffo receives the final generation text prompt for a pre-generation content-safety check. According to Waffo's documentation, this check is stateless and does not retain the prompt text after it returns. We keep the scan reference and verdict metadata for support and investigation, without adding a second copy of the prompt to safety logs.

Private media

Generated videos are scheduled for deletion 30 days after they finish saving to your library, with an email reminder 3 days before removal; delayed reminders postpone removal. Uploaded reference images become eligible for deletion 7 days after upload when no active video uses them, and local removal waits until the external provider confirms its copy is unavailable. Task and billing records are retained separately. Uploads and videos require account authorization. We do not publish user work to the official showcase automatically. Do not include sensitive personal information in your prompts or references. Authorized staff may review relevant prompts, uploads, outputs and records to investigate safety reports, as described in our content review policy.

Deletion and choices

You can delete individual completed videos and uploads, revoke sessions, or delete your account in Settings. Account deletion removes application records and stored media. Separate third-party retention policies may apply to submitted inputs and payment records.