Privacy Policy

This Privacy Policy explains how PicToDance ("we," "us," or "our") collects, uses, shares, and protects information when you use PicToDance (the "Service"), whether as a signed-in account holder or as an anonymous visitor trying it without an account.

1. Information We Collect

Account information

When you create an account, we collect the information you provide, such as your name and email address, and, if you sign in with a password rather than a third-party provider, authentication credentials managed by our authentication provider. If you sign in with Google, we receive basic profile information (name, email address, and profile image) from Google in accordance with your Google account settings.

Photos and generated videos

Before upload, your browser creates an optimized copy of your photo and removes source metadata such as EXIF data. We store that optimized copy and the video generated from it, along with basic metadata such as the dance you chose, the aspect ratio and resolution, and when it was created. If you try the Service without an account, we still process your photo to generate a preview, but nothing is saved to an account until you sign up.

Payment information

If you purchase a credit pack, payment is handled entirely by the payment processor shown at checkout (Freemius, Anyway, Polar, or Creem); we never see or store your full card details. We receive and store confirmation that a purchase was made, which credit pack, and the amount, so we can grant your credits and keep a purchase history.

Communications

If you contact us directly (for example, by email), we keep a record of that correspondence to respond to you and improve our support.

Technical information

Like most web services, our infrastructure providers automatically log standard technical data such as IP address, browser type, and request timestamps, used for security, troubleshooting, and abuse prevention.

To protect the anonymous free trial from automated or repeated use, we use Cloudflare Turnstile, request rate limits, a first-party trial cookie, and a temporary one-way keyed representation of the visitor's network address. The network value is retained for up to 24 hours, is used only for abuse prevention, and cannot be used to recover the original address from our stored record.

Creator program information

If you use a creator link or code, we store the referring creator, referral date, signup and purchase status, and related commission records. We do not show creators your name, email address, payment details, or other identifying customer information.

2. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service, including generating your video;
• Authenticate you and secure your account;
• Process payments and track your video credit balance;
• Respond to support requests and communicate with you about the Service;
• Monitor, secure, and improve the Service, including diagnosing issues and preventing abuse;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your photos or videos to train our own machine learning models.

3. How We Share Information

We do not share your information with third parties except as described here. We use a small number of infrastructure providers to operate the Service, each of which processes data on our behalf and is contractually restricted from using it for their own purposes:

• AI video generation (Viggle): your uploaded photo and the dance you select are sent to Viggle to generate your video. Viggle processes this solely to render the video and return it to us.
• Authentication and database services (Firebase, by Google): used to manage account sign-in and to store account and video history records.
• File storage and content delivery (Cloudflare R2): used to store your uploaded photos and generated videos and to serve them globally. A generated video's storage link is not indexed or listed publicly, but anyone who has the exact link can view it, the same as any file shared by direct link; treat a video's link as something you control by choosing who you send it to.
• Payment processing (Freemius, Anyway, Polar, or Creem): the processor selected for the Service handles your payment details under its own privacy policy. We receive only the order information needed to grant credits and maintain purchase records.
• Security and abuse prevention (Cloudflare Turnstile): used to check whether an anonymous free-generation request appears to come from a person rather than an automated system. Cloudflare processes technical request information under its own privacy terms.

We may also disclose information if required to do so by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues. If our business is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy.

4. Data Retention

We retain account information, photos, videos, and purchase history for as long as your account is active. If you delete your account, we permanently delete your photos, videos, and account data from our systems and third-party storage, except purchase records we are required to retain for accounting or legal purposes, and except for a short operational delay before removal from backups or caches completes.

5. Data Security

We use reasonable technical and organizational measures designed to protect your information, including encrypted connections (HTTPS/TLS) between your browser and our systems, server-side verification of every request that reads or changes your account data, and access controls limiting who can read or write your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have rights to:

• Access, correct, or update the personal information in your account;
• Request deletion of your account and associated data;
• Object to or restrict certain processing of your information;
• Request a copy of your data in a portable format;
• Withdraw consent, where processing is based on consent, without affecting prior lawful processing.

You can update your account details, delete individual photos and videos, and permanently delete your account directly from your account settings. For any other request, contact us using the details in Section 9 and we will respond within a reasonable time.

7. Cookies and Local Storage

We do not use third-party advertising cookies. Your account session is maintained through our authentication provider's standard session mechanism, stored in your browser. If you generate a video before signing up, we temporarily hold a reference to it in your browser's local session storage so it's still there once you finish creating an account; this is cleared automatically once that video is saved to your account.

A creator referral link sets a first-party referral cookie for up to 30 days. It is used to preserve the first valid referral through signup and attribute an eligible first purchase. It is not used for third-party advertising.

After an anonymous generation is accepted, we set a signed, HTTP-only first-party cookie for up to one year to remember that the browser has used its free trial. The cookie does not contain your photo, video, name, email address, or raw network address. If generation fails, the trial allowance is returned and the cookie is cleared.

8. Children's Privacy

The Service is not directed to children, and accounts may only be created by someone at least 18 years old (see our Terms of Service). We understand that the photo an account holder uploads may depict a child, for example a parent generating a video of their own kid, that upload is the responsibility of the adult account holder, who must have the right or parental authority to submit it. We do not knowingly allow a child to create an account. If you believe a child has created an account or that we hold information about a child in a way this Policy doesn't account for, contact us and we will take appropriate steps to review and delete it.

9. International Data Transfers

Our infrastructure providers operate global networks, which means your information may be processed or stored in countries other than your own, including the United States. Where required, we rely on appropriate safeguards, such as standard contractual clauses or equivalent mechanisms offered by our providers, to protect information transferred internationally.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will take reasonable steps to notify you, such as by email or an in-product notice, before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at contact@pictodance.online.