Privacy policy

Operator and contact

this service is operated by Nong Bao Yi, an individual developer based in China. Contact the support and reporting page for privacy questions, access requests or deletion requests.

Information we process

This site has no Google, GitHub or email/password login. Your first upload, balance check, visit to My creations or checkout creates an anonymous user and a session cookie. Browsing the homepage does not create a user. This cookie links your browser to server-side videos and remaining videos. Switching browsers or clearing browser data means they cannot be recovered. To prevent abuse, we store a keyed hash of the IP and creation-attempt timestamps, allowing at most 10 attempts per rolling hour by default.

Selecting a photo displays a local browser preview. Photos, subject types, selected roles and quality are also saved locally as a draft for this browser tab so they can be restored after refresh or checkout. Drafts expire after one hour and expired drafts are removed the next time local draft storage is accessed. Clearing this site’s browser data removes these drafts. A draft is not sent to our server until you submit a generation. Submitting it sends the image to our server and image moderation service. Approved images are stored and sent for video generation. Generation records include your account identifier, task status, input and output addresses, and credit activity; we do not store the full base64 image in the task database. Only upload adult portraits, pet photos you have permission to use. Do not upload unnecessary sensitive personal information.

When purchases are available, we keep order, payment-status and credit records to deliver purchases, handle refunds and prevent duplicate charges. We do not store full payment card numbers. Support emails contain the information you choose to provide.

Storage and protection

Anonymous user, order and task records are stored in our PostgreSQL database. Uploaded images and generated videos are stored in Cloudflare R2. this service uses HTTPS for media transfer and authenticated database connections; R2 encrypts stored objects at rest. Administrative access and write operations are restricted using credentials and access controls.

Media are served through HTTPS URLs on our media domain for processing, playback and download. Anyone who obtains a media URL may access that file while it remains available; these URLs are not private, account-authenticated storage. Avoid sharing links you do not want others to access. No security measure guarantees absolute protection.

Service providers

• Neon: PostgreSQL hosting for account, order and task records.
• EvoLink / ByteDance Seedance 2.5: EvoLink receives submitted images for moderation, original lyric generation and video generation. Videos use ByteDance Seedance 2.5.
• Waffo: payment processing as Merchant of Record (MoR) when checkout is available, including transaction and refund handling.
• PayPal: processes payments and refunds when you choose PayPal at checkout, including transaction and payer information.
• Cloudflare: website hosting, delivery, security and R2 media storage.

These services process data needed for their functions under their own applicable terms and privacy policies. Because the operator is in China and infrastructure includes the United States and global services, data may be processed outside your country. this service's R2 deletion schedule does not control independent copies retained by third-party processors.

Retention

• Uploaded source images: R2 lifecycle rules expire objects under uploads/motion/ after 1 day from upload.
• Generated videos: R2 lifecycle rules expire objects under uploads/motion-results/ after 7 days from upload. Download videos you wish to keep.
• Lifecycle expiration is processed asynchronously, so removal is not guaranteed at an exact hour. These rules cover user media, not the site's reusable template assets.
• Account data are retained while your account is active, until you request account deletion. Deleting a media object does not itself remove the associated task or account record. Limited order, refund or security records may be retained where needed for legal obligations, disputes or fraud prevention; we explain any applicable exception when handling your request.

Your requests

Email the support and reporting page to request access, correction, account deletion or earlier media deletion. We may verify ownership before acting. Deletion requests are handled by the operator; sending an email does not immediately delete data. We will explain the scope of deletion and any records that must be retained. Provider backups and independent processor records follow their respective retention procedures.

Cookies and acquisition source

Session cookies support login. A source cookie lasting up to 30 days records broad channels such as ChatGPT, Perplexity, Gemini, other or unknown and may be associated with orders for revenue attribution. This source tracking does not record your AI prompts or full referring-page URL. You can clear cookies through your browser, which may sign you out.