Privacy Policy
What information is processed, why it is used, where it goes and how to request help with your data.
Last updated:
1. Who Handles Your Information
This notice explains the personal information processed for Picture to Video. The service is independently operated from China by an individual using the display name hui. Contact the operator about privacy at support@picturetovideo.net. The display name is not a claim of a registered company or a complete legal identity.
This notice covers our website and service operations. Third-party sign-in, checkout, model and hosting providers also process information under their own applicable terms and notices.
2. Information We Collect
- Account information: your verified Google email address, name when provided, Google account identifier and our internal account identifier. We do not offer password registration or retain Google OAuth access or refresh tokens in the account database.
- Session and browser information: signed session and short-lived sign-in cookies, locally saved input drafts, selected generation settings and a saved color-theme preference.
- Inputs and outputs: uploaded photographs, file type, size and dimensions, selected character roles, any prompt supplied through an available tool, edited reference frames and generated videos.
- Task and package records: request and Video Job IDs, status, timestamps, chosen duration and resolution, template and price snapshots, moderation reference identifiers, video-package uses, remaining videos, technical restorations, historical credit charges and refunds, and any operator review notes.
- Payment records: selected package, effect, resolution, video quantity, amount, currency, historical credits, order and checkout references, payment status and settlement timestamps. Payment-event hashes and processing outcomes support verification and prevent duplicate settlement. We do not store full card numbers or security codes.
- Support and safety records: emails you send, relevant evidence, privacy requests, reports, appeals, decisions and correspondence needed to handle a case.
- Operational data: necessary request, security and error information, which may include IP address, browser or network information processed by hosting services and diagnostic request references. Application error messages are designed to omit photos, credentials, raw payment payloads and database parameters.
3. How We Use Information
We use information to authenticate users; receive and screen inputs; send authorized requests to model providers; create, store and deliver videos; enforce ownership checks; calculate and settle video packages, historical credits and orders; prevent duplicate charges; provide support; investigate technical, quality and safety complaints; handle lawful refunds and privacy requests; maintain security; and comply with legal obligations.
Uploading photographs for generation sends them beyond your device. A browser preview or saved local draft is different from the provider processing and website storage used after submission. We do not claim that all processing happens locally or that all providers automatically delete your material after generation.
Photographs can reveal sensitive information. Do not submit identity documents, medical records, children's images or unnecessary intimate information. Processing another person's image requires appropriate rights and a lawful basis; consent alone does not make a prohibited generation permissible.
4. Legal Bases Where Applicable
Where the GDPR or similar rules apply, processing needed to supply your requested account, generation or purchase service relies on contractual necessity. Transaction records or lawful disclosures may be required by legal obligations. Proportionate fraud prevention, security and dispute handling may rely on legitimate interests, subject to your rights and an appropriate assessment. Consent is required for optional processing or sensitive information where applicable law requires it.
We do not treat acceptance of these policies as blanket consent to every possible use of a person's likeness, biometric information or other sensitive data. If a requested use cannot lawfully be supported, it must not proceed. You may withdraw consent for processing that relies on consent without affecting earlier lawful processing.
5. Service Providers and Sharing
| Provider | Information and purpose |
|---|---|
| Sign-in requests and authentication information. Google returns the verified profile information needed to create or recognize an account. Google Analytics 4 also processes website usage, browser/device and referral information to measure visits and page performance. | |
| PayPal / Waffo Pancake | Checkout, buyer email and account/order references, selected product and payment details needed to process purchases and billing disputes. PayPal supplies its payment SDK and hosted approval flow when selected; Waffo remains available for its existing orders. Sensitive payment credentials are supplied to the hosted payment flow, not our account database. |
| Kie.ai | Uploaded photographs, prompts, preset references and intermediate or generated media, for file hosting, model processing and task-status handling. |
| fal.ai | For the Tiptoe Recast workflow, the two uploaded photographs, reference video with audio and role-mapping prompt are sent for video processing. Temporary provider media URLs can be accessed by anyone holding the URL. We request a 24-hour media lifetime and disable request-payload history storage; these settings do not establish zero retention or guarantee deletion from every provider system. |
| SeeAPI | Image data or the same provider-hosted image URL, for image NSFW screening using its nsfw-filter-2 channel. It is not a comprehensive prompt or final-video safety service in the current integration. |
| Cloudflare | Website requests and relevant technical data for Workers hosting, network/security services and R2 private storage of submitted and generated media. Cloudflare Email Service processes sender/recipient addresses, transactional message content and delivery metadata for custom-order notifications, delivery links and verified refund notices. Photos and videos are not attached to these notification emails. |
| Supabase / PostgreSQL | Hosted database infrastructure for accounts, provider identity links, orders, video packages, historical credits, file metadata and tasks, using the website's separate application namespace and user. |
Provider-hosted processing URLs may operate under provider-specific access controls rather than your website login. Private website storage does not mean every temporary provider URL requires Google sign-in. We do not make submitted photographs or generated videos available in a public user gallery through the current task workflow.
Support correspondence is handled through the support mailbox and its delivery providers. Information may also be disclosed when necessary to comply with a lawful request, protect rights or investigate a serious incident, subject to applicable law. Provider retention, subprocessors and any provider model-training practices must be assessed under the relevant provider arrangements; this notice does not promise that every provider follows the same settings.
6. Retention and Deletion
The current system does not run a scheduled purge of generation files or database history. The categories below describe actual storage behavior, not a promise of deletion after an unimplemented number of days. You may request manual deletion or account closure through support, subject to identity verification and lawful retention exceptions.
| Category | Current behavior |
|---|---|
| Website-stored original photos and intermediate reference images | No fixed automatic expiry or scheduled purge. They remain stored until manual removal or another verified deletion action. Provider-hosted copies require separate provider handling. |
| Website-stored generated videos | No fixed automatic expiry or scheduled purge. They remain stored until manual removal or another verified deletion action; download availability is not a promise of permanent storage. |
| Account links, task history, specifications and review notes | No automatic time-based deletion. Manual requests are assessed against service needs and any applicable retention duties. |
| Orders, payment verification records and credit ledgers | No automatic time-based deletion. Necessary records may need to remain for accounting, fraud prevention, refunds or legal claims. Applicable legal periods depend on the transaction and governing obligations; deleting a photo does not erase a lawful billing record. |
| Effect browser drafts | The photos and package settings for each selected effect are saved in IndexedDB without an implemented time-based expiry. They can remain after sign-out. Clear this site's browser data to remove local copies. |
| Separate photo-to-video browser drafts | A draft older than 24 hours, or with an incompatible configuration version, is removed when that tool next loads the draft. This is not a background deletion timer and does not delete uploaded server copies. |
| Cookies, logs and support correspondence | The signed session expires after one day; sign-in state cookies expire after ten minutes and are removed when the callback is handled. Application logs and support correspondence have no implemented application-wide timed deletion rule. Infrastructure-provider retention can differ. |
We assess verified removal requests individually, explain any information that must be retained and separate necessary financial or dispute evidence from removable user media. Backups and provider copies may require additional handling. We do not promise immediate deletion of every downstream copy or deletion from a device you control remotely.
7. Storage and Security
The website uses HTTPS, verified Google sign-in, signed HTTP-only session cookies, origin validation, private R2 storage and account-ownership checks for task playback and downloads. The application database account is restricted to the website's own namespace. These measures reduce risk but cannot guarantee absolute security.
Protect devices, sessions and any downloaded copy. Clearing browser data does not erase server copies, and submitting a deletion request does not remove a copy that you or another authorized recipient has already downloaded.
8. International Processing
The operator is based in China and the service uses providers with international infrastructure. Information may be processed or accessed outside your country, including operator access from China. We do not represent that all information stays in the United States, the European Economic Area or your country of residence.
Provider-specific locations and arrangements depend on the services used. Transfers must satisfy the safeguards and other requirements of applicable privacy law. Contact support for information about a particular request or transfer. This notice does not itself establish a data-processing agreement, adequacy decision or contractual transfer safeguard.
9. Your Privacy Rights and Requests
Depending on the law that applies, you may ask to access or obtain a copy of personal information, correct inaccurate information, delete information, close your account, restrict or object to processing, withdraw consent, or exercise data-portability rights. You may also complain to a competent data-protection authority. Rights and lawful exceptions differ by jurisdiction.
Email support@picturetovideo.net from the address associated with your account, describe the request and include a relevant Video Job ID or order reference if useful. We use proportionate verification before disclosing or changing account data. Do not send a password, payment-card details or additional sensitive images as verification.
Requests are handled manually; there is no automatic account-export or closure endpoint. We respond within the applicable legal deadline and explain any lawful extension or refusal. Where GDPR time limits apply, the normal response period is one month, with notice of any permitted extension. Financial records, legal holds and unresolved obligations are considered separately from media deletion.
11. Children and Eligibility
The service is for people aged 18 or older. Do not create an account or submit images of children. Google sign-in is not an age-verification system. Contact support if you believe information involving a child has been submitted so it can be assessed and handled under the applicable safety and privacy rules.
12. Changes and Contact
We may update this notice when actual practices or legal requirements change. The date above identifies the version. Material changes receive notice where required by law. Privacy questions, requests and complaints can be sent to support@picturetovideo.net; see Contact for reporting instructions.