Privacy Policy

We process the information needed to run the service and handle your purchase:

• Your verified purchase email, support messages, and optional account information.
• Order references, amounts, currency, and payment status. The checkout provider handles payment details; we do not store full card numbers.
• Your selected photos, intermediate clips, generated videos, posters, and delivery records.
• Service usage and connection information needed for access, security, and error handling. Optional usage reports can include language and screen-size category.
• Cookies used for preferences, access, and optional analytics, as described below.

We use this information to provide and improve the service, process purchases, and deliver results. We also send confirmations and security notices, answer support requests, and prevent fraud or abuse.

The Hotel Lobby preset sends your two selected photos and fixed creative instructions to SeeAPI for video generation with Seedance 2. SeeAPI describes its processing in its data handling guide and Privacy Policy. Its stated storage policy has no scheduled automatic expiry for stored input and output files. Provider deletion requests need separate review.

Video clips showing the generated people and preset audio tracks are then sent to fal for lip synchronization. Our integration uses fal’s default retention behavior. Request inputs, outputs, and hosted media have provider-specific retention rules. See fal Data Retention and its API Services Terms.

Private media links supplied to these providers expire after one hour. Link expiry does not delete a copy already retrieved. Our seven-day access period does not control provider-held copies. We cannot promise that every provider or downstream model deletes files on our schedule or applies identical training rules.

When generation is available, we send uploaded photos, sampled video frames, and video posters to OpenAI's Moderation API for automated content-safety checks. These checks can block an upload or hold a result from delivery. They do not inspect every frame or the audio track. They do not verify age, identity, consent, or intellectual property rights. See OpenAI's API data controls for its data handling.

Private media is stored in Cloudflare R2. Verification codes and delivery notices use our configured email provider. Support email uses Cloudflare Email Routing and Google Gmail, which process those messages.

When payment is available, checkout identifies the payment provider and its terms. We share the purchase email and order details needed for payment, not your photos. Review the provider’s privacy policy before paying.

Download your video within 7 days after it is ready. After 7 days, the file may be deleted. Verify the same delivery email to recover access on another device during that period.

Scheduled cleanup removes our private photos, intermediate clips, final videos, and posters when it runs successfully. Failed cleanup is retried. Expired access does not prove immediate deletion. Order, task, and cost records may remain for support and accounting. Private photos do not enter the public gallery.

We retain content-check records with video tasks, including check results, times, model versions, request identifiers, and file hashes. These records do not contain copies of photos or sampled frames. Task and content-check records may remain after the seven-day media access period for security and support. They currently have no scheduled automatic deletion.

We record first-party service events such as email verification, checkout, confirmed payment, generation, and download requests. Their properties do not include photos, full prompts, email addresses, or payment secrets.

Optional behavior events can include page visits, sample playback, photo selection, format choices, creation and checkout clicks, result visits, download clicks, and sharing actions. These help identify errors and understand the steps visitors take. A click does not prove payment, successful generation, completed download, or external sharing.

Reports may include the referring domain, limited campaign labels, language, and screen-size category. Recorded page paths exclude query strings, access tokens, and private result IDs. We do not record photo contents, file names, or form text in these events.

Where analytics consent is required, optional visitor identifiers and behavior events wait for acceptance. You can decline optional analytics when asked for consent. Necessary order and service records have separate support, security, and accounting purposes.

A visitor cookie lasts up to 180 days, a visit cookie lasts 30 minutes, and a verified guest access cookie lasts up to 30 days. Missing visitor identity stays unlinked. Clearing cookies or changing devices can break the link. Cookie expiry does not delete earlier event records; those records have no scheduled automatic expiry.

We do not sell personal information. We share data with providers needed to supply the service under their applicable terms. We may also share data to meet legal obligations or lawful requests, or to protect our rights, property, safety, and users.

We restrict private media access through authenticated access and temporary links. No transmission or storage system is completely secure.

Email hi@kickclap.com from your purchase or account email to request access, correction, export, or deletion. We may verify your authority before acting. Order and audit records may need separate retention for accounting, security, or applicable obligations.

Requests involving provider-held copies need separate handling. We do not promise immediate deletion from every provider. Do not email private photos, passwords, verification codes, or card details.

We may update this policy. We will identify material changes by updating the page date and, where appropriate, providing a notice through the service.

For privacy questions, email hi@kickclap.com. For a payment or delivery issue, see Refunds & Cancellations.