Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how rumpelstiltskin ("we", "us") collects, uses and protects your personal information when you use our website and services.

Information we collect

• Account information: your email address, and your name and profile picture if you sign in with Google.
• Content: the photos, prompts, names and chat messages you submit, and the images, videos and replies we generate for you.
• Billing information: your orders, subscriptions and credit history. Our payment provider holds your card details. We never see or store them.
• Technical information: your IP address, browser and device type, and error logs.

How we use your information

• To create and secure your account and sign you in.
• To generate and store your images, videos and chat replies.
• To manage your credits, purchases and subscriptions.
• To send service emails, such as sign-in links and notices that a video is ready.
• To prevent fraud and abuse, fix errors and meet legal obligations.

We do not use your uploads or results to train AI models. We do not sell your personal information.

Service providers

We share your information only with providers that help us run the Service, and only as much as each one needs:

• Vercel: website hosting.
• Our database host: stores your account and billing records.
• Cloudflare R2: stores your uploads and generated files.
• Alibaba Cloud Model Studio (Bailian / DashScope): generates images with Wan 2.6 (wan2.6-t2i), image-to-video results with Wan 2.7 (wan2.7-i2v-2026-04-25), and rap duo and photo effect videos (such as the zombie couple) with Wan 3.0 (wan3.0-video), and writes rap lyrics and chat replies with DeepSeek models it hosts. It processes your prompts, chat messages and photos in mainland China.
• Waffo Pancake: processes payments as our Merchant of Record. When prompt screening is enabled, it also receives image and video generation prompts to check content safety before generation.
• Resend: delivers our emails.
• PostHog (US Cloud): measures page visits, signups, image/video generation outcomes, checkout starts and successful payments so we can improve the Service. We store a random browser identifier and the last signed-in account identifier in local storage for up to 30 days. After sign-in, we link earlier visits to your pseudonymous account identifier to measure conversion. Signing out or switching accounts resets the browser identifier. Business events include limited product, credit and catalogue-price metadata. We do not send prompts, photos, email addresses or payment credentials. We use pseudonymous person profiles for this linkage, without names or email addresses. We do not enable session replay.
• Google: signs you in, if you choose Google sign-in.

We also share information when the law requires it.

Cookies and local storage

• A session cookie keeps you signed in.
• A language cookie remembers your language.
• A cookie remembers whether the dashboard sidebar is open, for 7 days.
• Your browser's local storage remembers your theme choice.
• Local storage holds the analytics identifiers described above for up to 30 days.

We do not use advertising or analytics cookies.

Data security

We use HTTPS for all traffic. Your files are private. We open them only through signed links that expire after one hour. We limit who can access production systems.

Retention

We keep your information while your account is open. Photos you upload to make a video are deleted about 24 hours after upload. Images and videos you generate stay in your library until you delete your account. When you delete your account, we delete your personal information within 30 days, unless the law requires us to keep it longer. We keep billing records for as long as tax and accounting laws require.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to restrict or object to its use, and to withdraw consent. You can delete your account on your profile page at any time. For other requests, email support@airumpelstiltskinvideo.com. We reply within 30 days. You can also complain to your local data protection authority.

Emails

We send only service emails, such as sign-in links, video notices and subscription notices. We do not send marketing emails.

Where we process data

We and our providers process data in the United States, mainland China and other countries. Where the law requires it, we protect international transfers with appropriate safeguards.

Children

The Service is for people aged 18 and over. If we learn that we hold information about a minor, we delete it.

Third-party services

Waffo checkout and Google sign-in follow their own privacy policies.

Changes

We may update this policy. If the changes are material, we will tell you by email or in the Service at least 15 days before they take effect.

Contact

Questions about this policy: support@airumpelstiltskinvideo.com.