Privacy Policy

1. What This Policy Covers

This policy explains what information Tiny Desk AI (the "Service", configured for tinydesk-ai.net) collects, how it is used and shared, and the choices you have. By using the Service you agree to this policy. Tiny Desk AI is live at https://tinydesk-ai.net. Payment is currently by PayPal. The Service is operated by SHENG LI, an individual based in mainland China, who is responsible for the processing described here; contact support@tinydesk-ai.net.

2. Your Photos, in Short

• Uploaded photos are used only to fulfill the photo-restoration or video-generation request you authorize and to run configured automated safety checks on those inputs. They are sent to our AI providers for those purposes and nothing else.
• We do not use your photos to train our own models, and we do not sell them.
• Only upload photos of yourself, people who have given permission, or animals whose photos you are authorized to use; never upload a minor’s photo without a parent or guardian’s consent.
• You can ask us to delete your photos and videos at any time via a support ticket.

3. Information We Collect

• Account information. Your email address, display name, authentication records and preferences needed to operate your account. Passwords for email accounts are stored as salted hashes, not plain text. You can sign in with Google or with email and password; the sign-in screen shows the current options.
• Content you provide and create. The main office-band tool accepts one person photo, two separate people photos (A as lead singer, B as saxophonist), one two-person photo (left as lead, right as saxophonist), or one pet photo. Additional band members are generated; five separate identity uploads are not supported. We process the active photo inputs, selected model, resolution, duration, format, language and task records, together with outputs and generated original sound. Independent name and still-photo restoration tools use their own displayed inputs; they do not start a band video automatically.
• Gift links. If you create a gift link, people who open it see its message, credit allowance and available status. We record claims and show the sender the number claimed. The public gift page does not include account or payment details.
• Payment information. Payments are currently processed by PayPal, which handles your payment details; we keep the order, subscription and transaction references needed to reconcile entitlements and do not store full payment-card numbers.
• Technical data. Server logs may include IP addresses, timestamps and request metadata. Session cookies keep you signed in and remember your language preference. Account and request signals help prevent abuse and repeated submissions.
• How you found us and what you did on the site. When optional analytics are enabled and the required consent is given, we record permitted page, referral, campaign and interaction information with visitor and session identifiers. This can include adding photos, changing settings, requesting generation, opening checkout or requesting a download. Account and task identifiers can link relevant records after sign-in. Necessary business records are kept separately to operate the service and reconcile orders and credits.
• Analytics. On the public production site we use Google Analytics 4 (Google LLC) to measure page visits, but only after you choose “Allow analytics” in the consent banner; until then no Google Analytics script loads and no analytics cookies are set. Advertising features and Google signals are off. You can change your choice at any time in analytics settings. We do not use Plausible, DataFast or advertising services.

4. How We Use Information

• To operate an enabled request: only the active photos and required generation settings are sent through Kie or Metaso to the selected AI provider. Independent photo restoration sends the inputs required for that still-image request.
• To keep the Service safe: the configured SeeAPI process checks required text and image inputs before provider generation. If required checks or accessible media are unavailable, generation remains unavailable. We do not claim that every finished video has received a separate output-safety review.
• To store and serve private media. Media is stored in private Cloudflare R2 with database task metadata and resource references. Access is restricted by account authorization or time-limited, purpose-specific links. Uploads and generated outputs are not automatically published to a gallery; external reference videos are separate from private user outputs.
• To maintain order, subscription, credit, refund and gift records, and to reconcile payment events.
• To maintain security: preventing abuse and duplicate charges, enforcing the content rules in our Terms, and debugging failed renders.
• To improve the Service: measuring permitted usage when analytics are configured and consented to, and investigating errors reported through support.
• To run the business: keeping the transaction and credit records needed for reconciliation, accounting and support.
• To help you continue work: browser draft storage can keep prepared photos and settings so a sign-in or canceled checkout does not erase your work. Local photo drafts expire after 24 hours. This is separate from server-side task and media retention.
• To send service communications related to your account when the relevant delivery service is configured.

We do not sell your personal information.

5. How Information Is Shared

Only with parties needed to run the Service:

• AI rendering providers through Kie or Metaso, receiving only the selected inputs required for an enabled, authorized video or still-photo restoration request;
• Infrastructure providers, including private Cloudflare R2 and the configured database host;
• PayPal, authentication and optional analytics providers, only when the corresponding integration is enabled and needed as described above;
• SeeAPI, which receives the text or images needed by the configured safety checks;
• Configured service-communication providers, only as needed to deliver account notices;
• Authorities, where required by law or to protect the Service, its users, or people depicted in content.

Private media. Uploads and generated videos are not automatically published in a public activity feed. Public gift links show only their gift description, allowance and status; account and payment details are not part of that public page.

6. Retention and Deletion

• Your photos and videos are kept so you can view and download them, until handled under an applicable deletion request or operational retention rule. Finishing a render does not immediately delete its uploads. There is no promise of automatic media deletion or a particular backup rotation schedule.
• To request deletion of photos, videos, or your account, open a support ticket and identify the media, task or account involved. Records needed for legal, payment or security purposes may need to remain after media removal.
• Transaction history, credit changes, gift claims and security records are retained for reconciliation, accounting, support and abuse prevention.
• Browser analytics have a 90-day retention setting. This does not promise that every business record or backup is erased at exactly 90 days or that deleting an account automatically deletes all related records. Browser photo drafts have a separate 24-hour expiry.

7. Security

Access to stored files is restricted by account authorization or time-limited links. The site is served only over HTTPS. No storage or transmission method is perfectly secure, so we cannot guarantee absolute security; please use a strong, unique password.

8. Your Choices and Rights

• View and download your videos in your account; edit account details in settings.
• Depending on where you live, you may have rights to access, correct, export, or erase your personal data — exercise them via a support ticket.
• If someone uploaded your photo without permission, contact us and we will remove it.
• You can use the site’s consent choices where shown, and limit analytics cookies through your browser settings or extensions.

9. Children

The Service is not directed at children under 13 (or the higher minimum age where you live). We do not knowingly collect their data; if you believe a child has provided data or a minor's photo was uploaded without guardian consent, contact us and we will delete it.

10. International Processing

We and our providers may process data in various countries. Processing by Kie, Metaso, SeeAPI and any other enabled provider is subject to that provider’s applicable terms and privacy practices. Contact us if you need information about a particular processing request.

11. Changes and Contact

We may update this policy; the date above (October 28, 2026) reflects the latest revision, and material changes will be announced in the product. Questions or requests: open a support ticket from your account menu (Settings → Support tickets), or email support@tinydesk-ai.net.