Privacy Policy

1. Who this policy covers

This policy explains how Genjutsu AI ("we", "us", or "the service") handles personal information when you visit our website, create an account, upload media, use AI video tools, purchase credits or subscriptions, or contact support. For privacy questions, contact support@genjutsuai.dev.

Images and videos can contain personal information about you and other people. Only upload material you are entitled to use and share for AI processing, including any necessary permission from the people depicted. Our Terms of Service explain these responsibilities.

Our website is genjutsuai.dev.

2. Information we handle

• Account and sign-in information: name, email address, profile image, account identifiers, authentication records, and session information. If you use an available third-party sign-in option, we receive the profile information that provider shares with us. We do not receive your third-party account password.
• Creative inputs and results: uploaded photos, reference videos, any audio they contain, filenames, media properties, prompts, selected settings, prepared clips, generated results, and associated task identifiers and status records. This can include a person's likeness, movements, voice, and background details.
• Billing and credits: selected products, order and transaction identifiers, payment status, subscription periods, credit grants, consumption, and adjustments. Payment providers process card or other payment credentials; our application does not store full card numbers or card security codes.
• Technical and usage information: IP address, browser and device information, session activity, error and security records, and referral information associated with your visit or registration. Optional analytics or advertising integrations may collect additional browsing information when enabled.
• Support communications: information you send by email or through support tickets, including attachments and the details needed to investigate your request.

3. Why we use this information

We use information to create and secure accounts, prepare and validate inputs, perform requested AI edits, deliver results, track task progress, process purchases, administer subscriptions and credits, and respond to support requests. We also use relevant information to diagnose errors, maintain service reliability, prevent fraud and abuse, enforce our terms, moderate content, and meet legal obligations.

Where applicable data protection law requires a legal basis, these activities rely on performing our contract with you, complying with legal duties, or our legitimate interests in running a secure and reliable service. Activities requiring consent, including certain tracking or processing of sensitive information, require the appropriate consent under applicable law. You may withdraw consent where processing relies on it; withdrawal does not undo earlier lawful processing.

4. AI processing and service providers

Creating a video requires processing your prompt and relevant media outside your browser. Our generation workflow uses KIE and the model providers involved in the selected task. Content-safety checks use SeeAPI and may process prompts, images, videos, or sampled frames. Providers may receive prepared or intermediate media as well as original inputs. A generation result may also be checked before it becomes available to you.

Infrastructure providers host the application, database, and media storage; the Cloudflare setup uses Workers and private R2 storage. Payment processing may use Stripe or Creem, depending on the checkout offered to you. Available sign-in, email delivery, analytics, and advertising providers receive the information needed for the enabled feature.

AI providers' retention and any use of submitted content for their own model improvement depend on the applicable provider arrangements and policies. This policy does not guarantee that every external model provider offers zero retention or excludes all training use. Contact us before uploading sensitive material if you need information about the processing arrangements for a particular task.

We may also disclose information when legally required, to investigate abuse or protect rights and safety, or in connection with a business transfer subject to applicable privacy requirements. We do not sell your uploaded media or grant ourselves a right to use it in public promotional materials merely because you used the service.

5. Media access and publication

Media access is restricted through account authorization or limited-access links used for processing. Relevant providers may receive time-limited links to retrieve media for generation or moderation. These links are access credentials: anyone who obtains a valid link may be able to use it until it expires. Private storage does not prevent the processing described in this policy.

Uploading a file or completing a generation does not automatically publish it in our public showcase. Public use in a gallery or promotional material requires separate permission. Content you choose to share elsewhere is also subject to that destination's practices.

6. Cookies, local storage, and optional tracking

Cookies and browser storage support sign-in sessions, language preferences, appearance settings, and other essential functionality. Blocking them may affect sign-in or preference storage.

When enabled, analytics integrations such as Google Analytics or Plausible help measure visits and usage. Advertising integrations, when enabled, may use cookies or similar technologies and process browsing or device information. Availability and data practices depend on the active integration. You can manage cookies in your browser and use any consent controls offered on the website. Where consent is required, non-essential tracking must be subject to that consent; this policy itself is not a consent mechanism.

7. Retention and deletion

We retain account information, uploaded and generated media, task records, support communications, and billing information for the purposes described above, taking account of account activity, the need to deliver or troubleshoot tasks, security, disputes, and legal recordkeeping requirements.

The service currently has no single automatic deletion period covering all uploaded and generated media. An expiring access link does not mean the underlying file has been deleted. Removing a file from the editor or closing your browser also does not necessarily delete a file already uploaded to our servers. To request deletion of media or your account, email us with the relevant account email and task identifiers. Do not include passwords or full payment details.

We will assess and handle deletion requests under applicable law. Some transaction, security, or dispute records may need to be retained, and backup copies may remain until the applicable backup cycle ends. External providers may maintain separate copies under their own retention rules and legal obligations. Download results you need to keep; the service is not a permanent archive.

8. Security and international processing

We use access restrictions and signed processing links to help protect media and account information. No online service can guarantee absolute security. Keep your credentials and media links private and report suspected unauthorized access to us.

Our infrastructure and service providers may process information in countries other than your own. Where applicable law requires safeguards for an international transfer, the transfer must be covered by the relevant lawful mechanism and protections. Contact us for information about transfers relevant to your use of the service.

9. Your choices and rights

Depending on your location and the law that applies, you may have rights to access, correct, delete, or receive a copy of your personal information; restrict or object to processing; withdraw consent; and complain to a competent data protection authority. You can edit available profile details in your account and send other requests to support@genjutsuai.dev, including if you are depicted in someone else's uploaded content.

We may need proportionate information to verify identity and authority before releasing or deleting account data. We respond within the time required by applicable law and explain any lawful reason a request cannot be fully fulfilled. Closing an account and cancelling a subscription are separate requests; tell us if you need both.

10. Age requirements and policy updates

The service is intended for adults aged 18 or older and is not directed to children. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take appropriate action.

We may update this policy to reflect changes to the service or information practices. The date above identifies the latest version. For material changes, we will provide additional notice where required. New processing that requires consent will not be authorized merely by changing this page.

11. Contact

For privacy requests, media concerns, or questions about this policy, email support@genjutsuai.dev. Signed-in users can also open a support ticket.