Privacy Policy

1.1 Information you provide

• Account information: your email address (if you sign in with a one-time email code), or the name, email address, and identifier returned by Google (if you sign in with Google). We don't use passwords.
• Photos you upload: images of people (including human faces) and of pets. See Section 3 for how we treat facial images.
• Videos you upload: source clips you upload to recreate, if you don't use one of our templates.
• Content and inputs: the templates, options, and resolution you choose, any text you enter, and any messages you send us.
• Launch list: if you ask us to tell you when the app opens, your email address.
• Community feed and reports: see Section 4.
• Payment information: purchases are processed by Stripe. We do not receive or store your full card number; we receive transaction details (such as the pack bought, amount, country, and payment status) from Stripe.

1.2 Information collected automatically

• Device and usage data: device type, operating system, browser, language, IP address, and how you interact with the Service. To prevent abuse of free credits, we store a one-way hash of your IP address and of your normalised email address rather than the values themselves.
• Campaign information: if you arrive from an ad or a link with campaign tags (such as "utm" parameters), we keep those tags with your account so we can tell which channels bring people to the Service.
• Cookies and similar technologies: see Section 7.

1.3 Media we generate

• Generated outputs: the videos the Service creates from your inputs, and associated metadata (such as length, resolution, and the template used).

We use your information to:

• Create your account and sign you in (including sending you one-time sign-in codes);
• Generate the videos you request (this requires sending your photos, source clip, and inputs to third-party AI providers; see Section 5);
• Run automated safety checks on uploads and generated videos (see Sections 3 and 5);
• Provide, maintain, and improve the Service;
• Process purchases and keep your credit balance;
• Send sign-in codes and purchase receipts, and, if you joined our launch list, tell you when the app opens;
• Email you when a video is ready. For videos made with free credits, that email also tells you about paid credits. Every one of these emails has an unsubscribe link, and you can opt out at any time;
• Run our Community feed (see Section 4);
• Detect, prevent, and address fraud, abuse (including attempts to collect free credits more than once), and content that violates our Terms;
• Comply with legal obligations.

We do not sell your photos or videos, and we do not use your uploaded photos, source clips, or generated videos to train our own AI models.

The Service puts you, or people you have permission to include, into a video, so the photos you upload usually show human faces. We process these images solely to provide the Service.

• We use facial images only to create the videos you request and to run safety checks on them. We do not use them for facial recognition, identity verification, or to build a biometric database, and we do not sell them.
• Automated safety checks: before a photo or clip is used, automated systems check it for prohibited content, including whether anyone in it appears to be under 18. This check estimates apparent age from the image; it does not identify who anyone is. Images that fail the check are not used.
• You must have the right to upload any photo of a person. By uploading an image containing another person, you confirm you have that person's consent. Do not upload images of anyone under 18.
• Facial images are kept until you delete them or your account, or until they are deleted under our inactivity rule (see Section 8).

4.1 What is public

• Videos made with free credits appear publicly in our Community feed, and we may show them as examples on our website (for instance, under the template used to make them). We tell you this before you use free credits.
• Videos made with paid credits are private. Anyone you send a share link to can watch that video; share pages are not listed in search engines.
• A public video shows the video itself, the template used, and the date. Your name, email address, and account details are not shown. The photos you uploaded are not shown separately.

4.2 Making your own version

Other people can make their own version of the same template from a public video ("Make this one"). They use their own photos; they never receive yours.

4.3 Removing a video

You can remove your video from the Community feed at any time. Removal stops it being shown, but we cannot recall copies that other people may already have saved or captured (for example, by screen recording) while it was visible.

4.4 Checks and reports

Before a video appears in the Community feed, it passes automated safety checks (see Section 5). Anyone can report a public video; a report hides it while our team reviews it. We record reports (the video, the reason given, and the reporter's account if signed in) and every moderation decision.

The core of the Service is AI generation. To create your video, we send your uploaded photos, source clip, and related inputs to third-party AI processors, which process your content to return a generated result:

• AI video model providers: the companies that run the Genjutsu video models, including the model's developer, Higgsfield AI, and a model-hosting provider. They process your photos and clip to generate your video and keep them for a limited time under their own terms (currently up to 7 days), after which they delete them. We are an independent service and are not affiliated with Higgsfield AI.
• OpenAI and Anthropic (Claude): automated safety checks on uploaded photos, frames from uploaded and generated videos, and any text you enter.

By using the Service you understand that generation cannot occur without transmitting your content to these providers.

We share limited information with service providers who help us operate:

Hosting, processing, and storage

• Vercel: website and web app hosting.
• Railway: backend processing and database hosting.
• Cloudflare R2: storage of uploaded and generated media.

Authentication

• Google (Google Sign-In), if you use that sign-in option.

Payments

• Stripe: payment processing and tax calculation.

Communications

• Resend: email delivery (sign-in codes, "your video is ready" emails, and the launch announcement).

Analytics and advertising (see Section 7)

• Google Analytics, TikTok Pixel, Microsoft Clarity, and Hotjar.

Each provider is authorized to use your information only to perform services for us.

On our website and web app, we use cookies and similar technologies:

• Google Analytics: usage and traffic analytics.
• TikTok Pixel: measuring advertising performance and building and measuring ad audiences. This may involve sharing identifiers and event data with TikTok.
• Microsoft Clarity and Hotjar: session recording and heatmaps to understand how people use our pages. Microsoft and Hotjar process this data as described in their own privacy statements.

Some of these technologies involve sharing personal information with advertising and analytics partners, which may be considered a "sale" or "sharing" of personal information under certain US state laws (see Section 10).

You can control cookies through your browser settings and opt out of certain tools (for example, the Google Analytics opt-out browser add-on, or TikTok's ad settings).

• Retention: we keep your account information, uploaded photos, source clips, and generated videos until you delete them or delete your account, subject to the inactivity rule below.
• Inactive accounts: if you don't use your account for 90 days, we email you in advance and then delete your uploaded photos, source clips, and generated videos. Your account and any unexpired paid credits are kept until the credits expire (see our Terms of Use).
• Account deletion: you can delete your account from your account settings or by emailing support@genjutsugenerator.com. When you delete your account, we delete your uploaded photos, source clips, generated videos, and associated personal data from our active systems, normally within 24 hours, except where we must keep limited records (such as purchase and credit records) to meet legal, tax, fraud-prevention, or dispute-resolution obligations. Residual copies may persist in backups for a limited period before being overwritten.
• Safety and moderation records (exception): records of reports and moderation decisions are kept for as long as reasonably necessary to handle disputes and enquiries from authorities. Media flagged by our safety checks is stored privately for review and deleted after 30 days, unless the law requires us to keep or report it.
• Content sent to third-party AI providers is subject to their retention practices (see Section 5).

Depending on where you live, you may have rights to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data;
• Object to or restrict certain processing;
• Port your data;
• Withdraw consent where processing is based on consent.

To exercise any right, email support@genjutsugenerator.com. We will respond as required by applicable law. You may also have the right to lodge a complaint with your local data-protection authority.

If you are a US resident, you may have rights under state laws such as the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other states, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information and targeted advertising.

Because we use advertising and analytics technologies (Section 7), we may "share" personal information for targeted advertising. You can opt out by emailing support@genjutsugenerator.com. We do not knowingly process the personal information of anyone under 18.

We use service providers located in the United States and other countries, and our media storage and processing are in the United States. Your information may be transferred to, stored, and processed outside your country of residence, where data-protection laws may differ. Where required, we rely on appropriate safeguards for such transfers.

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18, and our safety checks reject photos of people who appear to be under 18. If you believe a minor has provided us information, contact support@genjutsugenerator.com and we will delete it.

We use reasonable technical and organizational measures to protect your information, including private storage and short-lived links for your files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, notify you.

Questions about this Policy or your data? Contact us at support@genjutsugenerator.com.