Privacy

The operating entity: The operating entity will be confirmed before checkout opens.

We use account identifiers, email addresses, order records and generation records to provide sign-in, purchases and your private workspace. Google or email authentication is handled through Supabase; payments are handled through the configured Stripe or Waffo Pancake service when enabled.

The two selected role photos are kept locally in your browser for up to one hour to restore your draft and role assignments after sign-in or checkout. It is cleared after a generation is submitted or you sign out, and expired drafts are removed when you next visit. Choosing photos alone does not upload them. Removing a role photo clears that photo from the local draft without deleting the other role.

Both role photos are sent to SeeAPI for image checks and generation using our fixed scene script. There is no custom prompt field. A time-limited media link lets the provider access the upload. This is third-party processing; your photos are not published in a public gallery.

Upload links expire after 24 hours. Expired uploads are removed on the next maintenance pass, triggered by website traffic or a configured scheduler. Expired links are denied even before storage cleanup runs. Job, moderation and credit records are retained for billing, security and support. Exact retention terms for those records and the provider's processing terms will be finalized before checkout opens.

When first-party analytics is enabled, we use a signed 30-day cookie and our own event table to measure page visits, sign-in, photo selection, checkout and video delivery. Events may be associated with account, order and job records. Analytics events do not contain photo content, filenames, email addresses, verification codes, free-text prompts or private media links. Events are scheduled for removal after 90 days on the next maintenance pass; billing records are handled separately. No third-party analytics or session replay is included.

Generated media is served through an authenticated route after output checks. The provider may also retain its own generated assets under its terms.

Contact: patrickwu1992@gmail.com.