Privacy policy

Before you generate

Selecting a photo previews it on your device. The browser may resize and convert it to JPEG. We upload it only when you explicitly submit a generation request. A photo saved to resume Google sign-in has a 30-minute recovery window. It is removed on the next visit or when you remove the photo or sign out; browser storage can retain it until then.

Photos and videos

Submitted photos are normalized to JPEG and stored in private Cloudflare R2 storage. We send a short-lived URL to SeeAPI to check the input, then to fal to generate the video if the input passes. We do not submit generated output to an additional SeeAPI check; the model provider retains its safety checks. Their own retention terms apply to their processing. SeeAPI currently sets no automatic expiry for stored input files, task details or moderation results, and retains request logs for 60 days. Expiring our link does not erase a copy already retrieved by a provider. Provider deletion requests require a separate support process; see SeeAPI data handling and fal data processing.

Uploaded photos expire 7 days after upload. Downloadable results expire 7 days after delivery. Access is limited to the owning account or the visitor browser session. Losing the visitor cookie can prevent recovery; signing in and claiming your results links them to your account. Expiry cleanup runs periodically; a failed cleanup is retried.

Accounts and trial limits

Google sign-in provides your account identifier, name and email. Better Auth stores server sessions in Cloudflare D1. Essential cookies keep sign-in and visitor ownership working. A visitor cookie lasts up to one year. We store keyed hashes of network address and limited browser information to enforce trial limits; clearing browser storage does not reset the network limit. These records are not a claim to identify an individual.

Purchases and support

Waffo handles checkout and payment details. We keep order references, confirmed payment and refund amounts, account ownership and the credit ledger. We do not receive full payment-card information. Support forms store your email and message in D1 for operator review. Contact support to request deletion; necessary transaction or dispute records may require retention under applicable law. No specific legal retention term is claimed before the operator's applicable requirements are confirmed.

Optional analytics

When configured, Google Analytics and Microsoft Clarity load only after you allow optional analytics. Private result, account and purchase pages do not load them. We exclude photos, prompts, private URLs and account information from custom events. You can change your choice in the footer; refusing does not block the tool.

Your choices

You can remove a local photo before submission and delete owned uploaded media and results through My videos. For access, deletion or privacy questions, email support@orbitvideo.io. You must have permission to submit other people's images.