Privacy

Photos and local processing

Choosing photos performs decoding, file size and dimension checks in this browser. Selected photos stay in tab memory. New server uploads are disabled in this product preview. We do not use a face or age recognition database. Browser persistent drafts contain IDs and options rather than photographs or signed media links.

Private stored media

When server uploads are enabled, source-photo reviews store normalized, metadata-stripped images in private storage. Owned asset routes enforce access; another account cannot read them.

Input photos and source-photo reviews expire 24 hours after upload; completed videos expire 7 days after storage. Expired files become inaccessible; scheduled cleanup removes stored bytes. Success, failure or cancellation does not extend expiry. Download before expiry.

Suppliers and deletion

When approved live generation is enabled, the selected video supplier receives short-lived photo links. Supplier processing/retention and potentially public vendor output links require review before launch. This product preview does not send photos to a model provider.

Deletion removes access to local copies and schedules removal of stored files. Deleting a submitted generation does not automatically return its credits; it may already have incurred supplier costs. Provider copies are not confirmed deleted. Logs and order records have no automatic retention guarantee; configure an operator policy before launch.

Optional analytics require consent and receive only controlled event fields. Photos, signed links, personal prompts and names are excluded.