Privacy policy
Last updated October 29, 2026
This policy explains the information Tiny Desk AI uses to create your videos and manage your account.
Information we collect
We use your account email and sign-in information, the portraits you select, the roles assigned to them, generation requests, credit records and finished videos. Security and support records can include an IP address, request time, error code, session ID and messages you send us. A support message may contain extra information you choose to provide. We do not need your full card number, account password or unrelated identity documents.
Why we use it
We use this information to sign you in, create and deliver your requested videos, show your credit balance and job history, investigate failures and abuse, handle your requests and meet legal obligations. Where a legal basis is required, processing can be necessary to provide the requested service, protect it against abuse or comply with law; consent is used where applicable. We do not sell uploaded photos or use them as testimonials without separate permission.
Who receives it
Cloudflare hosts the service and stores its data and files. Resend sends sign-in codes and generation-status emails using your email address and the message content. Support messages are received and stored through our Cloudflare-hosted inbox. If you choose Google sign-in, Google provides your account identity under its own policy. Video-processing providers receive the selected portraits and scene instructions to generate the performance. The video model is Seedance 2.5, developed by ByteDance. Providers may process temporary copies and task records under their own terms. Our private operational alerts contain issue codes and job identifiers, not your photos, videos or account email. Paid checkout is currently closed; if introduced, payment details will be collected by the named payment provider and the relevant privacy information will be shown before you pay.
Storage and retention
Access to an uploaded portrait expires after two days and access to a finished video after 30 days. Daily cleanup deletes expired media, which can take up to a further day after access expires. Account, credit, job, security and complaint records can remain where needed for the service, resolving disputes or legal obligations; media expiry does not mean every related record is erased. Provider copies follow the provider’s retention terms and may outlast our local copy. Download finished videos you want to keep.
Who can see your files
Uploaded portraits are checked against the signed-in account before they can be used for a request. A finished-video URL is a shareable access link: someone who receives it can open or forward it during its lifetime. We do not offer a public gallery of user submissions. Your own copies and copies shared elsewhere are outside our storage controls. Contact support if a link exposes content that should be restricted.
Cookies and browser storage
Account sessions use sign-in cookies. Referral information may be stored to understand how visitors arrive. This tab can store selected upload links and role choices in session storage so a refresh preserves your setup; it does not store the original photo bytes there. Optional visitor analytics are currently off. If enabled later, their tools, collection and any choices required by law must be explained before use. Photos and videos are not attached to analytics events.
Security and international processing
We use account access checks and transport security, but no internet service can promise complete protection. We do not claim that stored media is encrypted so that the operator cannot access it. Hosting and generation providers can process information outside your country, where protections may differ. Where applicable, you may ask for information about the safeguards for those transfers. Do not upload material you are not permitted to send to these providers.
Access, deletion and other choices
Contact the published support email to request access, correction, deletion, an export or an objection or restriction where the law gives you that right. Identify the account and request; we may ask for proportionate verification before disclosing or changing personal data. Deleting cookies does not delete an account or provider copies. Some records may need to be retained for fraud prevention, disputes or legal obligations; we explain any applicable limit. You may also contact the relevant privacy authority. We do not require you to create a new account to make a privacy request.
Adults only
The service is for adults aged 18 or over and accepts portraits only of adults who agreed to the synthetic performance. Do not submit children’s information. If you believe a child’s data or an unauthorised portrait has been submitted, use the reporting contact so we can investigate and restrict material within our control.
Updates and contact
We update the date on this page when the policy changes and provide notice of material changes where required. Use the support email shown on this site for privacy questions and requests. The operator’s legal name, location and monitored contact must be disclosed before public purchases open.
10. Reports, response times and appeals
Questions? Email support@tinydeskvideo.space.