Privacy policy

1. Information we process

We process account name, email, password hash and session records; uploaded consented adult photos, shot templates, scene descriptions and consent timestamps; file names, duration and storage metadata; generation requests, provider request IDs, status and completed outputs; credit reservations and ledger entries; and order, payment-event and refund identifiers. We do not store your complete payment card details. We accept still photos only, not user audio or video uploads.

Necessary session cookies support sign-in, anonymous preparation and access to owned media. The current application does not include advertising or third-party marketing analytics. If that changes, the relevant information and choices must be provided before the new processing starts.

2. Purposes and providers

We use this information to authenticate you, prepare and generate a requested photo video, deliver and recover results, maintain your credit balance, reconcile purchases and refunds, answer support requests and prevent misuse. Where applicable, the legal bases are performing the requested service or contract, compliance with legal obligations, legitimate service/security interests and consent where required. Photo submission requires the adult subject's explicit consent.

Cloudflare provides application hosting, D1 database, private R2 storage and background queues. Brevo handles transactional password-reset emails. After human input approval, fal and its Flux Kontext and Kling providers receive the photo, generated still frames and prompts as needed. No video input is sent to a model provider. Human reviewers access inputs and intermediate frames to assess safety and consistency. Media is exposed to the provider using restricted, temporary signed access, not an unrestricted public user-media library. A provider may retain copies under its own applicable terms; deletion in our Dashboard is not a promise that an external provider has erased its copies.

Waffo processes payment details as merchant of record and sends order/payment/refund notifications to us. Its buyer terms and privacy policy govern its own payment processing. Support requests are sent to the published operator contact address. We share data only as needed for these purposes, legally required disclosures or a lawful business transition with appropriate protection. This service does not sell your photo descriptions, dance videos or account information as marketing data.

3. Access and security

Application media access is limited to its owner and temporary provider access. Passwords are hashed; server API keys are not client assets. A successful password reset revokes prior authenticated sessions. No system is perfectly secure; contact support promptly about unauthorized access without sending your password, reset token or full payment details.

Hosting and providers may process data outside your location. The operator must use applicable contractual and lawful transfer arrangements where required; applicable legal obligations govern these transfers. We do not claim that this service stores all data in your home country or that all providers have an identical retention policy.

4. Retention and deletion

Uploaded photos in our storage become eligible for deletion 30 days after upload; completed outputs become eligible 30 days after completion. Inputs used by an active task remain protected until it finishes. Scheduled processing runs in batches and retries storage failures, so 30 days is the cleanup eligibility point rather than a guarantee that every byte is erased at an exact minute. Intermediate frames hosted by fal are subject to its retention terms; we do not claim to erase provider copies on our schedule.

You can actively delete owned media in Dashboard. Application access is revoked immediately; storage deletion is retried if necessary. Media deletion does not delete task, order or credit records, remove already-downloaded copies or expire purchased credits. No reference footage is part of the service.

Account and session information is retained while necessary to provide the account and prevent misuse. Order, ledger and refund records are retained as required for accounting, tax, disputes, fraud prevention and applicable legal obligations, rather than the 30-day media rule. Once retention is no longer necessary, eligible personal data should be deleted or de-identified. Applicable legal retention obligations are considered when handling an erasure request.

5. Your requests and choices

Use Dashboard for file deletion and Account to sign out or reset your password. Account erasure is not currently self-service. Email support to request access, correction, account closure/deletion, or another privacy right available under applicable law. We will verify the requester using proportionate existing account information, assess the request and explain any legally required retention or restriction. Do not send identity documents unless specifically required for a justified verification process.

You may have rights to object, restrict processing, receive a portable copy, withdraw consent or complain to the competent privacy authority, depending on applicable law. Withdrawing consent does not invalidate prior lawful processing. Only consented adult photos are accepted; content-related complaints can be sent to support with a relevant task or file identifier.

6. Changes and contact

Material changes will be published with an effective date. Contact support@aidancevideos.com with your account email and the request; never include passwords, payment-card details or private reset links.