Privacy policy
AI Tiny Desk is an independent tool that turns photos you upload into a short AI-generated concert clip. This page says exactly what we keep, for how long, and who else touches it. Write to support@aitinydesk.run for anything on this page.
What we collect
- Account: the email address, display name and avatar that Google returns when you sign in. We never see your Google password.
- Photos you upload: the image files themselves, their type and size, and a checksum.
- Videos: the finished MP4 we rendered, stored in our private object storage.
- Payments: the order id, amount, currency, tax and the email on the receipt. Our merchant of record handles the card; card numbers never reach us.
- Usage: page views and three product events (sign-in, generate, purchase) through a self-hosted analytics server. It sets no cookies and stores no personal data; it records the page path, referrer, country and device type in aggregate.
- Operational logs: request errors and audit rows (for example "video queued" or "payment recorded") kept to run the service and resolve disputes.
How long we keep it
| Item | Kept |
|---|---|
| Uploaded photos | 7 days from upload, then deleted by an automated sweep |
| Finished videos | In your library until you ask us to delete them |
| Account record | Until you close your account |
| Invoices and tax records | As long as tax law requires |
| Error logs and audit rows | 30 days, except rows needed for a payment dispute |
Who processes it
- Supabase — database, sign-in and private file storage.
- kie.ai — the AI video model that renders your clip. It receives signed links to the photos you chose for that render only.
- Waffo — merchant of record for card payments, invoices and tax.
- Vercel — hosting for the site and its API.
We do not sell personal data, and we do not use your photos to train models of our own.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account, photos and videos. We answer within 30 days. In the UK and the EU you also have the right to object to processing and to complain to your data protection authority. Our lawful bases are performing the contract you asked for, our legitimate interest in running and securing the service, and — for analytics — our legitimate interest in aggregate usage counts, which carry no personal data.
Children
The service is for adults. You must be 18 or older to use it, and every person in a photo must be 18 or older.
Back to the generator · Privacy · Terms · Refund · Acceptable use