Privacy Policy

What we collect

When you sign in we receive your name, email address and profile picture from Google. When you create a video we store the photo you upload and the video we generate. Payment details are handled by our payment partner; Tiny Desk AI never sees your card number.

How we use it

Your photo is used to provide the video generation you request and enforce the photo-permission and content rules. Account information is used for sign-in, credits, task delivery and support. We do not send marketing email, sell personal data or use your photos to train our own models. Upstream providers process submitted media under their own terms and retention policies.

Storage and retention

Files are stored with our infrastructure provider in encrypted form. Uploaded photos are deleted automatically 1 day after upload and generated videos are kept for 30 days after they finish, unless you delete them or your account sooner. Order and payment records are kept as required for tax and accounting. When you delete your account we keep only a one-way hash of your email address, so the same email cannot claim the sign-up bonus twice.

Safety checks and current availability

We have no separate site-level automated image classifier or output-review service enabled. The video request enables the model provider’s built-in safety checker; this is not a guarantee that all prohibited content will be detected. We enforce photo-permission rules, access controls, rate limits and the reporting process described in our Terms of Service. Public contact and report forms are rate-limited; no separate CAPTCHA service is currently enabled. Generation is subject to service availability and account restrictions.

Cookies and analytics

After you accept analytics, we keep a random checkout-attempt identifier in sessionStorage for up to 30 minutes, linking a purchase click, sign-in, checkout request and return. We may internally link that attempt to your existing account and order; these identifiers are not sent to third-party analytics. Path records are deleted after 30 days, and withdrawing consent clears the local identifier and stops further path collection. Declining does not prevent purchasing. Separate package view/click counts have no visitor identifier. We do not collect card inputs, payment-provider page contents, photos or videos in this analysis.

The site uses a few cookies and similar browser storage that it needs to work, such as your sign-in session and your light or dark theme preference.

To diagnose technical failures, we retain redacted error categories, normalized routes, static code locations and random error references for 30 days. We also count key actions in daily aggregates. These records do not include photos, form content, query strings or raw exception messages.

We also set a first-party cookie (vt_attr, kept for 90 days) that records how you first and most recently reached us, such as a referring website or campaign link. We use it only to see which channels lead to sign-ups and purchases, and we do not share it with advertising networks. It is only set after you accept analytics cookies in the banner, and withdrawing consent deletes it.

If you accept analytics cookies, Microsoft Clarity records clicks, scrolling and navigation on public pages before you sign in, using cookies such as _clck and _clsk. Page content is masked, photos and videos are excluded, and account, checkout, private work and admin pages are not recorded. Microsoft processes browsing and device information to provide this service. We do not send names, emails, photo files or account/order identifiers to Clarity. It is not loaded before acceptance; you can withdraw under Cookie settings, which stops recording and removes its site cookies.

Service providers and cross-border processing

Cloudflare provides application hosting, database, private media storage and incoming support-email forwarding. Google provides account sign-in. Support email is forwarded to the operator’s monitored mailbox. Waffo Pancake handles checkout and payment information entered there. Generation instructions must also pass its text-safety check before enabled model submissions; this does not inspect uploaded images or output videos. Resend delivers service notifications such as credit confirmations, video-generation results and operational alerts, and processes recipient email addresses and notification content. Photos and videos remain accessible through signed-in private pages rather than email attachments.

For an authorized generation request, fal.ai receives the submitted portrait, the fixed performance reference and generation instructions to run Nano Banana 2 (fal-ai/nano-banana-2/edit) and Kling 2.6 Standard Motion Control (fal-ai/kling-video/v2.6/standard/motion-control). These providers may process data outside your country. Deleting media from our storage does not itself guarantee immediate deletion from provider systems; their own terms and retention rules also apply. Analytics providers are described above.

Privacy contact

This policy applies to the Tiny Desk AI website at https://tinydeskaiclips.com. Contact support@tinydeskaiclips.com with questions about account data, photographs, generated videos or requests to exercise your data rights.

Your rights

You can download or delete your videos at any time. In Settings you can export a copy of your data as JSON or delete your account. For any other privacy request, email support@tinydeskaiclips.com.