Privacy Policy

Information handled by the service

Depending on the enabled features, Halloween AI Dance may handle account identifiers and email addresses; authentication and session data; uploaded images, reference material and prompts; generated videos and related task records; credit balances and credit movements; order and transaction metadata; support communications; IP addresses; and ordinary server and security logs.

Why this information is processed

Depending on the enabled features, this information is used to authenticate users, operate generation requests, apply content safety checks, reserve or return credits, process purchases, store and deliver private results, prevent abuse, troubleshoot failures, respond to support requests and comply with legal obligations.

Third-party processing

For enabled generation requests, uploaded photos and generation parameters may be transmitted to Alibaba Cloud Model Studio Wan 3.0 to create videos. Uploaded photos are sent to Replicate for NSFW checks. Waffo Prompt Scan receives only text prompts, not photos. These providers process data under their own terms and privacy practices. Their retention periods and any use of data for model improvement have not been verified; no zero-retention or exclusion from model-improvement use is promised here.

Purchases, when enabled, are processed through Waffo hosted checkout. Waffo handles payment credentials through its checkout; Halloween AI Dance may keep order and transaction metadata needed for fulfillment, support, accounting, fraud prevention and disputes.

Private storage and access

Supabase Auth provides account authentication, and Supabase provides access-controlled storage for private user uploads and generated results. Access to private results is authorized by the application and may use time-limited signed links. This does not make those files publicly listed or permanently public. Cloudflare R2 is used separately for public reference and demo assets.

Retention and deletion

Temporary moderation copies and generation inputs are deleted only through the cleanup paths implemented by the deployed service. Generated-video, account, order, task and log retention must be specified before launch: [DATA_RETENTION_POLICY]. Retention periods and deletion schedules for uploaded photos, generation inputs and outputs, account data, orders, tasks and logs have not yet been confirmed by the operator. Until that policy is configured, no automatic deletion deadline is promised here. Applicable data-protection rights are unaffected.

You may contact [email protected] to request access to or deletion of personal data. Requests may require identity verification and remain subject to applicable legal, security, accounting and dispute-retention obligations. This contact process is not a claim that an automated self-service deletion workflow exists and does not guarantee immediate or automatic deletion.

Cookies and local access

The service uses cookies or equivalent storage needed for authentication, secure anonymous One-Time order access, sessions and fraud prevention. Clearing browser data may remove access to anonymous order history.

Your requests and contact

Subject to applicable law, you may have rights to request access, correction or deletion of personal data, or to object to or restrict certain processing. Send privacy questions and verified requests to [email protected].

One-time browser delivery

For an enabled One-Time Pass, the anonymous order is associated with a secure browser session. After the payment provider confirms the order, that session starts generation and authorizes the private preview and download. New One-Time orders do not require a site delivery email.

The same browser can reopen its Guest orders while the secure session remains available. If browser data is cleared, the order ID alone cannot restore access; support may require payment-receipt verification. Download and save completed videos promptly.