Privacy Policy

Information we use

We process your account name, email address, login session information, uploaded files, prompts, generated videos, generation status and credit transactions. Security records may include your IP address and browser information. We use this information to authenticate you, deliver videos, handle billing, prevent abuse and answer support requests.

Service providers

Cloudflare provides hosting, database, private media storage and account email delivery. Higgsfield receives generation files and prompts and applies its own content filters. Sightengine receives prompts and media only if additional moderation is enabled. Google provides optional sign-in.

Stripe and PayPal process the payment methods we offer. They collect payment-tool information under their own policies; we do not store full card numbers. We store account-linked order identifiers, amounts, currency, payment status, refunds and dispute records and share necessary transaction information to process payments and resolve issues. These providers may process information outside your country.

Website analytics

We use Google Analytics to understand visits, traffic sources and page usage, and Microsoft Clarity for interaction analysis, heatmaps and session replay. These services may collect device and browser details, page URLs and interactions, and use cookies or similar identifiers. Account forms and private workspace content are masked in Clarity. We do not send your account email, password or prompt as custom analytics events. Tracking is not initialized on password-reset links.

See Google's privacy policy and Microsoft's privacy statement for how these providers process data. Browser privacy controls and content blockers may limit analytics collection.

We also measure purchase conversion using first-party acquisition records: campaign labels, referring domain, landing path, approximate country/region from Cloudflare, and experiment group. A signed acquisition cookie lasts up to 90 days; recent non-direct attribution uses a 30-day window. Order records preserve the attribution observed when checkout begins. We link analytics with an opaque account ID rather than your email, and tag checkout references for session investigation. The new acquisition cookie is not set when your browser sends Global Privacy Control or Do Not Track. Missing or blocked tracking can leave sources unknown.

Media access and retention

We do not publish your uploads or results to a public gallery by default. Generation and moderation providers receive temporary access to the files they need. Approved results are available in your account for 30 days. You can delete completed videos earlier from My videos. Source videos and reference images expire after 7 days. Providers may retain their own copies according to their policies, so deleting a result here does not promise immediate deletion from every provider system.

Accounts and payment records

Account details remain while your account is active. We retain transaction and security records as needed to reconcile purchases, handle disputes and meet applicable record-keeping obligations. Contact us to request access, correction or deletion of your personal data. We may need to verify account ownership before acting and may retain records required for those purposes.

Cookies and storage

Essential cookies keep you signed in and protect account actions. Your browser also stores your color-theme preference and workspace draft so you can resume it. Drafts store file references and settings; they are not public. Analytics providers may use additional cookies as described above.

Security and your choices

Access to private media requires account ownership or a limited-time provider link. Do not upload confidential information that you are not authorized to share with the processors listed above. No system can promise absolute security. You can sign out, clear local browser data and contact us about privacy concerns.

Age and permission declarations

When you request a quote or confirm a generation, we record your account and task identifiers, server confirmation time, declaration and policy version, language, the statements shown, and source and reference file identifiers. The statements concern adulthood, acceptance of the terms, permission to use the material and acknowledgement of processing. We use these records to administer the service, investigate misuse and handle complaints or disputes.

These are uploader declarations, not identity checks or independently verified consent from other people. If you are the depicted person, your confirmation records your own authorization; for other people, you must obtain and retain their consent. We do not routinely ask for identity documents. Declaration records may remain after media expires or is deleted where necessary for disputes, security or legal duties; privacy requests can be made through our contact page.

AI processing, training and provider retention

Faces, voices and other personal information in your files may be processed by the generation provider to perform the requested transformation. A general upload declaration does not replace separate consent or another requirement applicable to sensitive or biometric processing. Do not submit information you are not authorized to share for this processing.

Higgsfield’s API terms permit use of API inputs and outputs for model training unless the workspace opts out or an applicable agreement provides otherwise. Its terms allow up to 10 business days to process an opt-out and contain exceptions for certain models. We have not confirmed an effective opt-out for our workspace; do not assume your files are excluded from provider training.

Providers control their own retention under applicable terms. Deleting media from AibbyWow does not immediately erase provider copies, request history or prior training use. See the provider policies linked below; contact us about processing choices before submitting sensitive material.

Contact

YUAN JUN operates this independent service. For questions about these policies or your account, contact us. Contact.