Privacy Policy

Who is responsible?

AI Zombie Video Generator is operated as an individual-run service. Contact [email protected] for privacy, access, correction, deletion, account closure or complaints.

Information we process and why

We process your Google account identifier and verified email to authenticate you; reference photos and selected story settings to prepare requested videos; task identifiers, status and timestamps to deliver results; and order, payment-status and credit records to fulfill purchases and investigate billing. We process support messages to respond to requests. These purposes support providing the requested service, protecting accounts, resolving disputes and meeting applicable legal obligations. We do not sell personal information or use uploaded photos to train our own AI models.

Photos and generated videos

Selected photos stay in the browser until you submit a story. Submitting encrypts photos on our Railway-hosted server. The active encrypted payload expires after 24 hours or is cleared earlier when the video task is created. Reference photos are sent to Kie.ai for ByteDance Seedance 2.0 Fast generation. Upload processing does not intentionally retain a separate local photo archive.

Generated videos are stored privately. Only the owning account can access its available result. Our active server copy expires 30 days after it is first saved, including videos awaiting review. The deletion worker runs periodically while the service is operating, and access requests also enforce expiry. Service downtime can delay physical cleanup; it resumes when the service restarts. Download a copy before expiry. Deleting or expiring a file does not cancel an order or automatically create a refund.

Content review and providers

Waffo Prompt Sift receives the template prompt for input screening. Gemini output review is currently disabled; the normal generation flow does not send completed videos to Gemini. Previously collected review records contain task references, decisions, category results and timestamps.

Railway hosts our application, database and private media; Cloudflare provides domain, network and email-routing services; Google provides sign-in; Kie.ai supplies upload and generation infrastructure, including its kieai.redpandaai.co upload endpoint; Waffo Pancake supplies checkout and prompt review. Support email is forwarded to an operator-managed mailbox. Providers receive the information needed for these functions and may process it outside your country under their own terms. We cannot promise deletion of provider-controlled copies on our local deletion schedule or make blanket promises about their training practices.

Retention and deletion

• Saved photo payloads: up to 24 hours in our active database, cleared earlier when the saved task starts.
• Generated video files: 30 days from first local saving, or earlier on deletion. Minimal task and accounting references remain so deletion cannot re-trigger generation or change credits.
• Detailed content-review logs: 90 days. Minimal request identifiers and completion tombstones remain with the task to prevent duplicate paid review calls.
• Accounts and task metadata: retained while your account is maintained; request account closure and deletion through support. Completed videos can be deleted using their Delete video button. Processing tasks require a support request.
• Orders, credits and financial records: retained as necessary to maintain purchased balances, resolve disputes and meet applicable accounting, tax and legal obligations. We explain any exception when responding to a deletion request; we do not promise immediate deletion of records that must be retained.
• Backups and provider-managed logs: deletion from active storage is not a promise of immediate physical erasure from backups or third-party systems. We will explain the applicable limits when processing your request and apply deletion instructions to data restored into service.

Your requests and our process

Email support from your registered address, stating whether you want access, correction, video deletion or account closure. Include the relevant task or order reference if available. We may ask for proportionate account verification, but do not send passwords, identity-document numbers or card security codes. We acknowledge requests within 3 business days and aim to complete verified requests within 30 calendar days, or any shorter period required by applicable law. If an applicable exception or permitted extension is needed, we explain the reason and next steps. We assess active tasks, unused credits and transaction-retention obligations before closing an account; a deletion request is not a waiver of refund rights.

Depending on your location, you may also have rights to a copy of your data, portability, restriction, objection, withdrawal of consent and a complaint to the relevant authority. Contact the same address to exercise these rights or challenge a decision.

Sign-in, cookies and embedded examples

Google sign-in does not give us access to Gmail, Drive or your Google password. An HTTP-only session cookie is valid for up to seven days; a temporary login cookie expires after ten minutes. Signing out revokes the current session. These validity periods describe authentication, not deletion of every account record. Sample thumbnails load from YouTube servers; clicking a sample loads a YouTube player that can receive network information and set its own cookies.

Payment information and security

Card details entered at Waffo checkout are handled by Waffo, rather than stored as complete card numbers in our application. We use encrypted saved-photo payloads, account access checks and secure provider connections. No system can guarantee absolute security.

Children and authorized images

Do not submit unauthorized images or content exploiting or endangering children. Our family option does not grant permission to use another person's likeness. Contact support if you believe a child's information or an unauthorized image has been submitted, so we can investigate and remove it where applicable.

Changes

We update this page's date when the policy changes. Material changes will be communicated through the website or account contact where appropriate. New processing requiring consent will not rely on this notice as a substitute for that consent.