Privacy Policy

How Viral AI Video processes uploads, reference clips, synthetic videos, account data, provider copies, and deletion requests.

Last updated: 2026-11-04

This policy explains how Viral AI Video ("Viral AI Video", "we", "us", or "our") handles data when you use the service. Photo-to-video generation can reproduce a person's likeness. Upload only your own photos, photos of consenting adults aged 18 or older, or permitted pet photos. Minors and public figures are prohibited under our Acceptable Use Policy.

1. Data We Process

Account and sign-in data: Email, account identifiers, sign-in sessions, and basic profile information supplied by a sign-in provider such as Google.
Uploads and reference materials: Portrait photos, reference videos or links, extracted video frames, prompts, notes, and saved breakdowns used by the studio, including submissions made as a guest.
Generation records: Selected effect, model, resolution, duration, reference settings, consent confirmations, task status, credit usage, generated videos, and provider responses.
Billing records: Plan or pack, order identifiers, amount, currency, subscription status, and payment or refund status. Stripe is the intended payment processor for new purchases. When checkout is enabled, card details go to Stripe rather than being collected in our application.
Technical and usage data: IP address, device and browser information, session or visitor identifiers, security logs, and usage or conversion events.
Support and safety records: Messages, reports, appeals, and information needed to investigate an issue.

2. Why We Use Data

We process data to sign you in, analyze reference clips, generate and deliver videos, maintain credits and subscriptions, respond to support requests, prevent abuse, and meet legal obligations. Depending on the applicable law and activity, this processing may be necessary to fulfill your request or contract, comply with a legal obligation, protect the service and others through legitimate interests, or rely on consent where required.

We do not use uploads or outputs to train our own models or publish them as marketing examples without separate permission. The service does not operate a facial-recognition database to track people across sessions. AI providers do analyze visual features, including faces, to perform generation or safety screening. We cannot promise that external providers never retain data or use it for model improvement unless their applicable terms or a verified agreement provide that protection.

Your request can involve the following recipients, according to the feature and deployment configuration:

Kie and its underlying model providers: Receive photos, prompts, generation settings, and, where selected, reference clips to produce videos. Their systems can also host generated files and expose delivery links.
Reference-analysis and safety providers: Receive the frames, instructions, or images needed for analysis or screening. The reference-breakdown service can use the configured DeepSeek-compatible vision endpoint.
Hosting, storage, and delivery providers: Host the application, databases, uploaded files, and generated media, including Cloudflare services where configured. Other provider storage and content delivery networks may also serve files.
Sign-in providers: Google receives sign-in requests when you choose Google sign-in.
Stripe: Will receive checkout and billing information when payment processing is configured and enabled.
Email and analytics providers: Process support or transactional messages and configured usage measurement.

We may disclose relevant information to investigate abuse, protect rights or safety, respond to valid legal process, or make a legally required report. We do not sell uploaded photos or generated videos. If a business transfer affects personal data, applicable notice and privacy obligations still apply.

4. Retention and Deletion

Finished-video expiration is set using the account entitlement when the task completes:

After expiration, application access ends and maintenance attempts to remove stored output files and clear task delivery data. The system also attempts to remove generation input references after a task reaches a terminal state and to clean abandoned temporary uploads after their configured expiry. These actions depend on scheduled maintenance, successful storage operations, and the type of file; they are not a guarantee that every copy is erased at an exact deadline.

Reference clips, extracted frames, prompts, and saved breakdowns are stored to support the studio and resume requests. The finished-video window above does not mean all reference materials, task metadata, or logs are deleted at the same time. Contact us to request deletion of these materials.

Account data is kept while needed to operate your account. Billing, accounting, security, support, and safety records may be kept longer for legal obligations, disputes, or abuse investigations. Aggregated usage records can also have a separate retention schedule. We remove or de-identify data when it is no longer needed, subject to those requirements.

Provider copies: Kie, underlying model providers, storage services, and delivery networks may hold separate copies or caches under their own retention practices. Deleting an application record or our storage object does not ensure deletion of provider-hosted URLs, caches, backups, or downloaded copies. We do not claim a provider deletion API or a fixed external deletion deadline. A deletion request to us covers data we control; we will explain any known limits when responding.

Google sign-in requests basic identity scopes (openid, email, and profile) to authenticate you and associate your account with purchases and credits. It does not request access to Gmail, Drive, Contacts, or Calendar. We do not sell Google sign-in data or use it to train AI models or target advertising.

You can revoke the app's access through your Google account permissions. Revoking access is different from deleting data already held in your service account; request account deletion from us if that is your intention. Required transaction or safety records may remain after account closure.

6. Cookies and Analytics

Essential cookies and local session information support sign-in, security, guest uploads, and studio continuity. Where configured, analytics tools such as Google Analytics or Microsoft Clarity can process usage events, identifiers, and browser or device information to help us understand visits and conversion. Optional analytics depend on the configuration and applicable consent choices. Do not put sensitive personal information in prompts or support fields that do not require it.

7. Moderation and Access

Automated prompt and image checks, provider checks, and investigation of reports can involve processing your content. Authorized personnel may access relevant information for support, safety, or legal requests. We do not promise that every upload or output receives a human review. Automated checks can miss prohibited content or incorrectly block legitimate requests, and cannot prove age, identity, or consent. See the Acceptable Use Policy for reports and appeals.

8. Your Rights and Choices

Depending on applicable law, you may have rights to access, correct, export, delete, restrict, or object to processing of your data, withdraw consent where relied upon, and complain to a data protection authority. Contact us using the account email when possible. We may request proportionate verification and will respond within the applicable legal time limits. Some information may be retained when the law permits or requires it; we will explain relevant exceptions.

To request deletion of a photo, reference clip, breakdown, video, or account, include the relevant task or record identifier. Do not send payment card details. Account deletion does not itself resolve subscription cancellation; contact us if you need both.

9. Children, Security, and International Processing

The service is for adults 18 and older and does not permit photos of minors. Report suspected child data or imagery to us so we can investigate, restrict access, and remove or preserve records as required by law.

We use technical access controls and protected connections to reduce unauthorized access. No system or delivery link is risk-free. Providers may process data outside your country. The safeguards and rights that apply depend on the provider, location, and applicable law; this policy does not assert that every provider has the same contractual protections.

10. Changes and Contact

We will show changes with an updated date and provide additional notice where required. For privacy questions or requests, email support@viralaivideo.org.