Privacy Policy

We collect information you give us directly, plus a small amount from your use of the service. In practice, this means:

• Your photo and video — the photo you upload, and the video we make from it. The photo is passed to our AI processing partner through a signed link that expires after an hour, and it is deleted from their systems within 24 hours. It is used for exactly one thing: running your generation. Never shown publicly, never used to train models. The finished video is saved on our servers so you can watch and download it.
• Account details — if you create an account: your name, email address and sign-in credentials. If you buy a pack, we keep the order record and your billing email. Card details are handled by our payment provider — they never reach our servers.
• Messages you send us — anything you write to our support inbox, and the address you write from.
• Basic visit data — an anonymous visitor number we set as a first-party cookie, used to count visits and see which pages work, plus session replays and heatmaps of how pages are used — form fields are masked. None of it is tied to who you are, and none of it follows you across other sites.

We use your information to:

• Make the video you asked for, and let you watch and download it.
• Run your account and your purchases, and send the service emails that come with them — receipts, password resets, pack confirmations.
• Keep the service working and safe: rate limits, abuse prevention, basic debugging.
• Understand how the site is used, in aggregate, so we can make it better.

We don't sell your personal data, and we don't share it for advertising. If you subscribe to our newsletter, every email has a one-click unsubscribe.

We don't train AI models on your photos or videos. Your photo is used for one thing: making the video you asked for. We pass it to our AI processing partner only to run that generation, and the result comes straight back to you.

The video is generated with ByteDance's Seedance model, a third-party AI model that we choose and pay for. You don't need an account anywhere else to use it.

We share personal data only with the providers that help us run the service: our payment provider to process purchases, our email provider to send service emails, our AI processing partner to generate videos, our hosting provider to serve the site and store your videos, and Microsoft Clarity, which records masked session replays so we can see how pages are used. Each of them gets only what it needs for its job.

We may also disclose information if the law requires it, or to protect people's rights and safety. If the service is ever part of a business transfer, this policy keeps applying until you're told otherwise.

We keep data only as long as we need it:

• Your videos — kept for 7 days after delivery so you can watch and download them, while videos on an account stay until you ask us to delete them. A refunded order loses its download links.
• Your photo — used to run the generation; we don't keep a separate copy of it on our servers.
• Account and purchase records — kept while your account is open, plus as long as tax and accounting rules require.
• Visit statistics — kept for up to 12 months, in anonymous form.
• Support emails — kept for as long as we need them to help you, then deleted.

Your connection to the site is encrypted (HTTPS), card payments are handled by our payment provider so card numbers never touch our servers, and access to production data is limited to the people who need it. No small team can promise perfect security — but if a breach ever affects your data, we'll tell you and the authorities, as the law requires.

Our providers and the AI systems behind the service run in different countries, so your data may be processed outside the country you live in. Wherever it goes, it stays covered by this policy and by our contracts with those providers.

Depending on where you live (including under GDPR and CCPA), you can:

• Ask what personal data we hold about you, and ask for a copy.
• Ask us to correct it or delete it.
• Object to or restrict certain processing, and withdraw consent where we rely on it.
• Complain to your local data protection authority.

Email support@mycarfly.com and we'll help — we answer within 30 days, and we never treat you differently for exercising a right.

We use a small number of cookies: one to keep you signed in, one to remember your language, a first-party visitor number to count visits anonymously, and two small cookies from Microsoft Clarity, our session-replay tool. Clarity records clicks, scrolling and other page interactions into replays and heatmaps; anything you type into form fields is masked. The recordings are stored by Microsoft. Visits are also counted by a cookieless analytics tool that runs on our own servers. No advertising cookies, no cross-site tracking pixels, no data sales. You can block or clear cookies in your browser — the site still works; only signing in needs them.

When things change, we update this page and the date at the top. If a change is material, we'll email account holders before it takes effect.

Questions? Email support@mycarfly.com — we're happy to help.