Privacy Policy

In a nutshell

• We collect what we need to make your video, run your account and take payment.
• Your photos are used only to make the video you asked for and are deleted automatically once they are 14 days old.
• Payments are handled by PayPal. Your full card number never reaches us.
• Want your account or uploads deleted? Email support@skull-cap-ai.com.

Information we collect

Account information. Your email address and name, plus either a password (we only store a secure hash of it) or the basic profile from a sign-in service such as Google, if you use one.

Your photo. The photo you upload. Your browser shrinks each photo to at most 1600 pixels on its longest side before upload.

Your videos. The link to each finished video, its format, its status and when it was made.

Orders and credits. The pack you bought, the amount and date, the PayPal order reference, and each credit charge and refund. These records show what you paid for and what we delivered.

Technical information. IP address, browser type and request logs, kept by our hosting provider for security, abuse prevention and rate limits. A sign-in cookie keeps you logged in. If you came from a link with campaign tags (such as utm_source), a cookie remembers those tags for 30 days so we can tell which links bring people in.

Free preview checks. When you ask for the free preview, your browser makes a one-way hash (SHA-256) of a few of its settings: browser, language, number of processor cores, screen size, time zone and how it draws a small test image. We store that hash, your account and a one-way hash of your IP address with the preview record, only to keep it to one free preview per account and device and to limit previews per IP address each day. The hashes can't be turned back into those settings or your IP address. Cloudflare Turnstile also runs a bot check on the preview button.

Usage analytics. Google Analytics counts visits and page views. Microsoft Clarity gives us anonymous behaviour analytics: clicks, scrolling and where people get stuck on a page, so we can fix steps that confuse people. It is not used to identify you. Clarity hides typed form fields such as your email and password, and we hide your uploaded photos and finished videos from its recordings. Both tools may set cookies. Microsoft handles Clarity data under the Microsoft Privacy Statement.

There are no advertising trackers on the site, and your photos are never used for anything except making your video.

Why we use it

• to make your video and show it to you;
• to run your account, take payment, add credits and refund failed renders;
• to answer your emails;
• to stop fraud, abuse and uploads that break the Acceptable Use Policy;
• to meet our legal, tax and accounting obligations.

Who helps us process it

A few service providers each handle one part of the job:

• AI video provider. Gets your photo and a description of the scene, renders the video and hosts the finished file. It never sees your email or payment details.
• Cloudflare. Hosts the site and the database, stores uploaded photos in our own Cloudflare R2 storage, and runs the Turnstile bot check on the free preview.
• Google Analytics and Microsoft Clarity. Measure how the site is used, as described above.
• PayPal. Handles payments under its own privacy policy.
• Email delivery service. Sends account emails such as sign-up confirmation and password reset.

Some of them work outside your country, including in the United States. We do not sell or rent your personal information.

How long we keep things

• Uploaded photos: stored in our own Cloudflare R2 storage and deleted automatically by a 14-day lifecycle rule. The deletion runs in the background once a photo is 14 days old, so it can happen a little after the 14 days are up.
• Generated videos: hosted by the video provider. We keep each render's record (time, status, credits used) and the link to the video for at least 180 days, so you can download it again and so we can prove delivery if a payment is disputed. You can ask us to delete it sooner. Download any video you want to keep.
• Account information: until you ask us to delete your account.
• Order and credit records: for as long as tax and accounting rules require, usually several years.
• Server logs: briefly, normally a few days.

Your choices and rights

You can ask to see, correct, export or delete your personal information, or object to how we use it. Email support@skull-cap-ai.com from your account's address. We reply within 2 business days and finish requests within 30 days. Records we have to keep for tax or fraud reasons stay until that obligation ends.

Depending on where you live (for example the EU, the UK or a US state with a privacy law), you may have further rights under local law, including the right to complain to a data protection authority.

If you are in someone else's photo

If a photo of you was uploaded without your OK, email support@skull-cap-ai.com with the details. We'll delete the photo and the related records we hold, and where we can, ask the video provider to remove the video.

Children

The site is for adults only, and photos of anyone under 18 are not allowed. If we find out we hold a child's information, we delete it.

Security

The whole site runs over HTTPS. Uploaded photos are stored under names that can't be guessed without the photo itself, and they expire on their own. No system is perfectly safe, but we keep access to your data to the minimum.

Updates

When this policy changes, the date at the top changes too. We'll flag major changes on the site.

Contact

support@skull-cap-ai.com