Privacy

Draft — not yet reviewed by a lawyer, and not yet in effect. Do not take payments against this.

Not yet published. Operated by Jason Wang, a sole proprietor located in Houston, Texas. Questions: jason.j.wang@gmail.com.

What we hold

Your email address, so you can sign in, so we can tell you a video is ready, and — separately — so we can email you about the product. That last one has its own section below.
An email address without an account. If you typed your address into a box on this site and never finished signing up, we kept it. See below; you can have it removed in one click and without asking us.
Your Google account id, if you signed in with Google — the identifier Google gives us, plus the email address on that account. Not your password, which we never see, and no access to anything else in your Google account.
The video and photograph you upload, and the video we make from them.
A record of your renders — settings, timings, and whether each one worked.
Payment records. Card details go from your browser straight to Stripe and never reach our servers. We keep the amount, the date, and Stripe's reference.

About the video of your face

To cut you out of your background we run a model that separates a person from what is behind them. It is worth being precise about what that is and is not:

It finds a person. It does not identify who you are.
We do not build a face template, a faceprint, or any other biometric identifier, and we do not match you across videos or against any other collection.
Nothing you upload is used to train a model, ours or anybody else's.
If you use the appearance tool, your video is sent to fal.ai to be processed and comes back changed. That is the one tool that sends footage of you anywhere, it only runs when you ask for it, and it costs a credit — so it is not something that can happen by accident.

Email we send you, and how to stop it

There are two kinds and they are governed differently.

Email about something you did — your video is ready, your password was reset, a receipt. You cannot turn these off while you have an account, because they are the account working.
Email about the product — new features, examples, occasional offers. Every one of these has an unsubscribe link, and it works immediately and permanently. One click, no sign-in, no reply required, no "are you sure".

If you gave us your address but never created an account, marketing is the only kind you can receive, so unsubscribing removes you entirely. Unsubscribing does not close an account or delete anything else — for that, see below.

Postal address, because the law that governs marketing email requires one: Jason Wang, a sole proprietor located in Houston, Texas. Write to us at jason.j.wang@gmail.com for the street address.

How long we keep it

Your uploads: 30 days after the last render that used them, then deleted. We keep them that long so you can re-render without uploading again.
Finished videos: until you delete them or close your account. They are the thing you paid for, so we do not put a clock on them.
Payment records: seven years, because tax rules require it.
An address with no account: until you unsubscribe, then only the fact that it unsubscribed — which we have to keep, or we would have no way of knowing not to email it again.

Who else touches it

Only companies doing a specific job for us, and none of them may use your files for anything else:

Stripe — payments.
Modal — the machines that process your video.
Cloudflare R2 — file storage.
Render — the servers running the website.
An email provider, for the "your video is ready" message.
Google, but only if you use the Google sign-in button — and then only to confirm the sign-in is genuine. Your files never go there.
fal.ai, and only if you use one of the tools that draws or changes an image. Drawing a backdrop from a description sends them your description and nothing else. Editing a photograph sends them that photograph. Changing how you look sends them your video. None of the three happens unless you ask for it, and nothing is sent for an ordinary render.

We do not sell your data, and there is no advertising here to sell it to.

Deleting it

You do not have to ask us. Delete a single run — and the video, the photograph and the result that came from it — from your past runs. Delete your whole account from the credits page. Both happen immediately, not on a queue.

One thing survives, and we would rather say so here than have you find out: your purchase history. Amounts and dates are a tax record we are required to keep. Everything that ties those rows to you — your email address, your password, your card on file — is erased with the rest, so what remains identifies nobody.

You can also ask for a copy of what we hold, or correction of anything wrong, at jason.j.wang@gmail.com. Depending on where you live you may have further rights under Texas, California or EU law, and we will honour those too.

Children

The service is not for anyone under 18, and we do not knowingly collect anything from one.

Security

Files are stored encrypted, moved over encrypted connections, and each job is processed in a container that is given access to that job's files and nothing else. No system is perfect; we will tell you promptly if something happens that affects you.