Privacy policy

This policy explains what Tiny Desk AI ("we") collects when you use the service, why, and what control you have. The short version: we use your photo to render the video you asked for, keep both privately, and delete them when the retention period ends or when you ask.

What we collect

• Account data: your email address and name, and your profile picture if you sign in with Google.
• Photos you upload and the videos rendered from them.
• Purchase records: which pack you bought, the amount and the payment status. Card details are handled by Stripe and never reach our servers.
• Technical data: IP address and browser user agent for each signed-in session, used for security and fraud prevention. Your account also keeps the country your connection last came from and the language you last used the site in, which decide whether and in which language we may email you an offer.
• Usage analytics: PostHog, hosted in the EU, records which pages you visit and which buttons you use, and may replay a session to help us fix problems; typed text is masked and your photos and videos are never captured. Google Analytics measures visits and how people find the site.
• Advertising measurement: the Google Ads tag records whether a sign-in or purchase followed an ad click. While you are signed in, the Google tag sends a hashed form of your email address with those events (enhanced conversions), so Google can match them to an ad click without receiving the address itself. If you arrive from a Google ad, a cookie keeps that ad's click id for 30 days, and if you buy, our server tells Google that the click led to a purchase, with its amount and our order number, so the sale counts even when the tag could not run. If you arrive from a PropellerAds ad, a cookie keeps that ad's click id for seven days, and if you create an account, upload your first photo or buy, we tell PropellerAds that the click led to a sign-up, a photo upload or a purchase, and for a purchase how many videos it bought; nothing else about you is sent.
• Price tests: we sometimes show different prices to compare them. While a test runs, a cookie keeps which price your browser was shown for a first video, so it stays the same on every visit, and your account keeps it when you sign up.

How we use it

• To render your video: your photo and the template clip are sent to our video-generation provider.
• To run your account, process payments, refund failed renders and send transactional emails.
• To email you an occasional offer, such as a discount on your first video, if you have an account and are outside the European Economic Area, the United Kingdom and Switzerland. Every offer email has an unsubscribe link, and unsubscribing does not stop sign-in codes or emails about your videos.
• To keep the service secure and prevent abuse.

We do not sell your data, and we do not use your photos or videos to train AI models.

Cookies and Google's advertising features

Google Analytics on this site uses Google signals: for visitors who are signed in to a Google account and have ads personalisation turned on, Google associates their visits with that account. This gives us aggregated reports on demographics and interests, and lets us build audiences, such as past visitors, that we may show ads to on Google. These reports never identify you to us.

If you visit from the European Economic Area, the United Kingdom or Switzerland, the site sets no advertising, analytics, PropellerAds or price-test cookies: Google's tags send only cookieless signals that Google uses to model conversions in aggregate, and PostHog keeps its identifier in memory for that visit only. When we cannot tell which country you are visiting from, the site sets no ad click or price-test cookies either, and if you use it in German, French, Spanish, Italian, Portuguese, Dutch or Polish, Google's tags and PostHog also run this way.

You can turn off personalised Google ads at myadcenter.google.com, block Google Analytics with Google's opt-out browser add-on, and see or delete what Google has associated with your account at myactivity.google.com.

Processors we rely on

• Cloudflare: hosting, database and file storage.
• Kie.ai, OpenRouter or fal.ai, and the AI video model vendors they run: video generation from your photo.
• Stripe: payment processing.
• Resend: transactional and offer emails.
• PostHog (EU): usage analytics and session replay.
• Google: optional sign-in, Google Analytics, and Google Ads measurement and audiences.
• PropellerAds: measuring which of its ads led to a sign-up, a photo upload or a purchase.

Each processes data only to provide its part of the service, under its own privacy terms.

Trend clips by other creators play in TikTok's own player. It loads only when you press play, and TikTok's privacy policy applies to it.

Retention

Finished videos and the photos used to make them are kept for the period shown with your pack (30 days for a single video, one year for multi-video packs) and then deleted automatically. Photos uploaded but never used for a render are deleted after two days. You can delete any video and its photo at any time from My videos, and delete your whole account from Account settings.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data, or object to its processing. Most of this you can do yourself in the app; for anything else, email us at support@tinydeskai.social.

Photos of other people

Only upload photos of yourself or of adults who have agreed to it. If you believe a video of you was made without your consent, contact us and we will remove it.

Children

The service is not intended for anyone under 18, and photos of minors are not allowed.

Changes

If we change this policy in a meaningful way, we will update the date above and notify account holders.