Privacy policy

1. Information we process

We process account name, email, password hash and session records; uploaded photos and reference videos; file names, duration and storage metadata; generation requests, provider request IDs, status and completed outputs; credit reservations and ledger entries; and order, payment-event and refund identifiers. We do not store your complete payment card details. Do not upload medical, financial or identity documents as generation inputs.

Necessary session cookies support sign-in, anonymous preparation and access to owned media. The current application does not include advertising or third-party marketing analytics. If that changes, the relevant information and choices must be provided before the new processing starts.

2. Purposes and providers

We use this information to authenticate you, prepare and generate a requested aura video, deliver and recover results, maintain your credit balance, reconcile purchases and refunds, answer support requests and prevent misuse. Where applicable, the legal bases are performing the requested service or contract, compliance with legal obligations, legitimate service/security interests and consent where required. A person's agreement to appear in an uploaded image is distinct from an account holder's purchase authorization.

Cloudflare provides application hosting, D1 database, private R2 storage and background queues. Transactional password-reset email is not configured in this preview. If generation is enabled later, Replicate and the Kling model provider receive the photo and reference video when a generation is submitted. Media is exposed to the provider using restricted, temporary signed access, not an unrestricted public user-media library. A provider may retain copies under its own applicable terms; deletion in our Dashboard is not a promise that an external provider has erased its copies.

Waffo processes payment details as merchant of record and sends order/payment/refund notifications to us. Its buyer terms and privacy policy govern its own payment processing. Support requests are sent to the published operator contact address. We share data only as needed for these purposes, legally required disclosures or a lawful business transition with appropriate protection. This service does not sell your uploaded photographs, aura videos or account information as marketing data.

3. Access and security

Application media access is limited to its owner and temporary provider access. Passwords are hashed; server API keys are not client assets. A successful password reset revokes prior authenticated sessions. No system is perfectly secure; contact support promptly about unauthorized access without sending your password, reset token or full payment details.

Hosting and providers may process data outside your location. The operator must use applicable contractual and lawful transfer arrangements where required; applicable legal obligations govern these transfers. We do not claim that this service stores all data in your home country or that all providers have an identical retention policy.

4. Retention and deletion

Uploaded image/reference file bytes are scheduled for deletion 30 days after upload; completed output bytes 30 days after completion. Inputs used by an active task remain protected until the task finishes. Scheduled processing runs in batches and retries storage failures, so 30 days is the cleanup eligibility point rather than a guarantee that every byte is erased at an exact minute.

You can actively delete owned media in Dashboard. Application access is revoked immediately; storage deletion is retried if necessary. Media deletion does not delete task, order or credit records, remove already-downloaded copies or expire purchased credits. Published licensed reference footage is separate from your private uploaded copy and may remain in the public catalog.

Account and session information is retained while necessary to provide the account and prevent misuse. Order, ledger and refund records are retained as required for accounting, tax, disputes, fraud prevention and applicable legal obligations, rather than the 30-day media rule. Once retention is no longer necessary, eligible personal data should be deleted or de-identified. Applicable legal retention obligations are considered when handling an erasure request.

5. Your requests and choices

Use Dashboard for file deletion and Account to sign out or reset your password. Account erasure is not currently self-service. Email support to request access, correction, account closure/deletion, or another privacy right available under applicable law. We will verify the requester using proportionate existing account information, assess the request and explain any legally required retention or restriction. Do not send identity documents unless specifically required for a justified verification process.

You may have rights to object, restrict processing, receive a portable copy, withdraw consent or complain to the competent privacy authority, depending on applicable law. Withdrawing consent does not invalidate prior lawful processing. Do not submit another person's likeness without the necessary rights and consent; content-related complaints can be sent to support with a relevant task or file identifier.

6. Changes and contact

Material changes will be published with an effective date. Contact lliu07113@gmail.com with your account email and the request; never include passwords, payment-card details or private reset links.