Privacy Policy

Who operates this service

Bby Wow AI is operated by 黄卫仁 (individual), trading as AI Creative Workspace. Privacy questions and data requests can be sent to mijika666@gmail.com.

Information we collect

When you sign in with Google, we receive your account identifier, name, email address and profile picture. When you create a video, we process the portrait you upload, your consent confirmation, generation settings, task status and the resulting video.

Payments are handled by Waffo Pancake as merchant of record. We receive order, product, amount, currency, refund and customer-reference data needed to deliver credits, but we do not receive or store your full card number.

We also process technical logs such as IP address, browser type, device data, timestamps, error reports and security events. If you contact support or file a content report, we retain the message and our response.

How we use information

We use your photo and chosen duration only to provide the requested AI dance video and maintain your task history. We use account and order data to deliver credits, issue receipts, prevent fraud and provide support.

We do not use your uploaded portraits or generated videos to train our own models. We do not sell personal information or send marketing email without a separate opt-in.

AI and content safety

Uploaded portraits are checked by an automated content-safety classifier before a render is submitted. A generated-video keyframe is extracted with fal.ai and screened by the same classifier before the MP4 is stored and shown to you. Flagged requests are blocked, the affected render is failed and the account credits are returned.

Generation uses Wan 2.2 Animate Replace through fal.ai. A user-confirmed consent statement and human report review supplement the automated checks. We keep moderation decisions and related task records for safety, audit and abuse-prevention purposes.

Storage and retention

Media is stored in encrypted Cloudflare R2 storage. Uploaded photos are deleted automatically 7 days after upload. Generated videos are kept for 30 days after they finish. You can delete a video earlier from My videos.

Account, order, credit, consent and safety records may be retained for as long as needed to operate the account and meet tax, fraud-prevention, dispute and legal obligations. On account deletion, we remove active media and account data, while limited transaction or safety records may be retained where law requires it.

Service providers and international processing

We use Cloudflare for hosting, storage, queues and email delivery; Google for sign-in; fal.ai for video rendering and frame extraction; OpenAI for image moderation; and Waffo Pancake for payments and merchant-of-record services. These providers may process data in other countries under their own security and privacy terms.

The AI renderer receives a short-lived signed URL for your photo and a reference video. The renderer may process the request outside your country. We do not authorize providers to use your uploaded media for their own model training.

Cookies and analytics

We use essential cookies and browser storage for sign-in, security, error recovery and your light or dark theme preference. The service cannot authenticate an account without them.

We also use a first-party attribution cookie (vt_attr, kept for 90 days) to record the referring website or campaign that brought you to the service. It is used only to measure sign-ups and purchases and is not shared with advertising networks.

If you open a friend’s invite link, we set a cookie (vt_ref, kept for up to 30 days and removed once you sign up) so the invite can be credited. To prevent abuse of invite rewards, we store a salted hash of your IP address with the invite, not the address itself. Neither of you can see the other’s account details.

We use Plausible Analytics to measure aggregate page views and referral sources. Plausible is designed to operate without cookies and does not track users across websites.

Your privacy rights

Depending on where you live, you may have rights to access, correct, export, delete or restrict processing of your personal information, and to object to certain processing. Use My account → Settings to export your data or delete your account, or email mijika666@gmail.com.

You may also have the right to complain to your local data-protection authority. We will not discriminate against you for exercising a privacy right.

Security and children

We use access controls, signed media URLs, encrypted transport, retention rules, rate limits and audit logs. No internet service is completely secure, but we limit collection and access to what is needed to operate the service.

The service is for adults aged 18 or over. We do not knowingly collect information from children. Report suspected child-safety content immediately to mijika666@gmail.com and the relevant emergency or child-protection authority.

Changes and contact

We may update this policy as the service, providers or law change. Material changes will be reflected by the date above and, where appropriate, an in-product notice. Questions or requests: mijika666@gmail.com.