Privacy policy

Last updated October 11, 2026. This is an implementation-aligned draft and is not a claim of legal review. The site operator must add legal identity, jurisdiction, and contact details before production.

Data we process

Supabase processes account identifiers, authentication methods, and sessions. During live generation, Cloudflare R2 stores private reference images and output videos. fal.ai receives short-lived access to the chosen portrait and authorized source template to generate the video. We record orders, job states, safe error codes, estimated model cost, and download-link requests.

Analytics and cookies

Essential authentication and security storage does not depend on analytics consent. GA4 loads only after Accept Analytics, receives allowlisted non-PII events, and does not receive emails, filenames, private media URLs, user IDs, prompts, or payment credentials. Google Search Console verification does not add visitor tracking. You can reopen Cookie Preferences at any time.

Retention and deletion

Reference images are configured for seven-day retention and generated videos for 30 days, subject to operational deletion jobs and backup constraints. Internal operational events default to 90 days. Accounting data may require longer retention after payments launch. Signed-in users can request account deletion from Account settings.

Rights and safety

Do not upload a person or work without appropriate rights and consent. Safety, abuse prevention, legal compliance, and fraud records may be retained where required.

Contact

Replace the placeholder contact address on the Contact page before publishing.