Privacy Policy

1. Information we collect

• Account information supplied through Google sign-in, such as name, email address, profile image, and account identifiers
• Prompts, uploaded reference assets, model settings, task identifiers, generated media URLs, and generation history
• Credit balances, credit transactions, subscription status, Stripe customer and transaction references, and refund records; we do not store full payment-card numbers
• Technical and usage information such as IP address, browser or device data, authentication sessions, error logs, page interactions, and security signals
• Messages and evidence you send to support, safety, or copyright channels

2. How we use information

• Provide authentication, generation, storage, account history, credits, subscriptions, and support
• Send prompts and required input assets to the model provider selected in the product
• Process payments, renewals, cancellations, upgrades, credit grants, and eligible refunds
• Detect fraud, abuse, prohibited content, service attacks, and account compromise
• Measure reliability and product usage, fix errors, and improve the service
• Comply with legal obligations and enforce our terms and safety rules

3. Service providers and disclosures

We share only the information reasonably needed for a provider to perform its service. Current categories include:

• Google for sign-in, analytics, and advertising services where enabled
• Stripe for checkout, subscriptions, billing management, and refunds
• WaveSpeed and the selected upstream model providers for generation inference
• Cloudflare for application hosting, databases, object storage, security, and network delivery
• Professional advisers, authorities, or counterparties when required by law, necessary to protect rights and safety, or part of a business transaction

4. Storage, transfers, and retention

Application records are stored on Cloudflare-hosted infrastructure, including D1-compatible database storage. Media may be stored on provider infrastructure and/or copied to object storage used by Cdance. Providers may process data in countries outside your own.

• We retain account and transaction records for as long as needed to provide the service, resolve disputes, prevent abuse, and meet legal or tax duties
• You can delete generated items through the product where the option is available
• Deleting an item may not immediately remove limited backups, security logs, payment records, or copies a provider must retain under its own policy
• Do not upload confidential or sensitive personal information unless it is necessary and you have authority to do so

5. Cookies and similar technologies

Essential cookies maintain authentication and security. Google Analytics and advertising services may use cookies or similar identifiers where enabled and permitted. Browser controls can restrict non-essential cookies, although parts of the service may work differently.

6. Your choices and rights

• Access and update available account information
• Delete individual generations through the product
• Cancel a recurring subscription through account billing controls
• Request account deletion, a copy of personal information, correction, or other rights available under applicable law
• Object to or restrict certain processing where the law provides that right

7. Security and children

We use HTTPS, access controls, provider security features, and operational safeguards. No online service can guarantee absolute security. Cdance is not directed to children who cannot legally consent to data processing or enter a service agreement in their location.

8. Policy changes and contact

We may update this policy as the product, providers, or law changes. The date above shows the latest revision. Questions or privacy requests can be sent to contact@cdanceai.com.