Privacy policy

Tiny Desk AI is the service responsible for the processing described here. For privacy requests, contact hello@tinydeskai.dev.

Data we use

We process your account name, email, login identity and preferences; photos you submit; prepared images and generated videos; task status, credits and order records; support requests, replies and attachments; and security signals needed to prevent abuse. Essential cookies maintain sign-in and language preferences. We do not store complete payment card details.

Why we use it

We use this data to provide the requested generation, keep your work accessible, manage payments and credits, secure accounts and respond to support requests. Registration, verification, password recovery, payment and creation notifications relate to your account activity. Ordinary sign-ins do not trigger a notification by default. You can change optional work notifications in your email preferences.

Processing providers

Cloudflare hosts our application, database, private storage, security checks and transactional email. Google handles Google sign-in. Depending on the configured generation provider, Apimart or fal.ai and the selected image/video model providers process submitted media to produce your requested result. Input photo safety checks may also use fal.ai independently of the generation provider. When purchases are enabled, the payment partner identified at checkout (Creem or Waffo Pancake) handles payment data, taxes and receipts as merchant of record. A payment-channel change does not transfer your earlier transaction to a different provider. Their processing and retention practices also apply. Data may be processed outside your country.

Content checks are separate from checkout. When selected, Waffo Prompt Sift checks our preset text prompts; photos are not sent to that text endpoint. Authorized reviewers may inspect submitted photos and generated clips before delivery. If automated video scanning is enabled, Sightengine receives a private copy of the clip for safety checks. We retain review decisions, file hashes and enforcement records for security and compliance; these records are not public.

Support requests are available to authorized staff. Cloudflare receives and stores email sent to our support address, including its headers and attachments, in private storage for our support team to handle in the Tiny Desk AI support inbox. Replies and support notifications are sent through Cloudflare. Email conversations remain separate from your in-site ticket history; receiving an email does not create or verify a website account. We verify account ownership before disclosing private data or making sensitive account changes.

We do not sell personal data. We do not automatically publish customer work as examples. Public examples are separately selected and authorized. Temporary model input links are private capabilities that expire after at most one hour; link expiry does not by itself delete the provider’s copy.

A temporary photo draft can be saved in your browser when you leave to sign in or buy credits. It expires after one hour and is removed on the next cleanup or after submission. It is not a public upload.

Storage and your choices

Temporary model input copies expire from our dedicated input storage after one day. Your account’s original photos, prepared images and creations remain in private storage with your saved tasks until deletion or account closure, subject to operational and legal needs. Payment, fraud-prevention and accounting records may need to be retained separately. Providers may retain their own copies under their policies.

To request access, correction, export, deletion or account closure, contact hello@tinydeskai.dev from your account email. We verify ownership before acting. We protect data with access checks, encrypted connections and restricted credentials; no online service can guarantee absolute security.

Updates and contact

We update the date above when this policy changes and provide notice of material changes where appropriate. Send privacy questions to hello@tinydeskai.dev.

For supported adult-photo dance effects, Apimart requires the photo to enter its free private asset review before video generation. We request deletion of the exact provider asset after the job reaches a confirmed final state, and retain a cleanup result for operations. An unconfirmed submission or deletion can require follow-up; an expired input link alone is not proof of provider deletion. Consent is your declaration, not a claim that Tiny Desk AI has independently verified the person’s identity.

Optional source measurement

If you allow measurement, a signed first-party cookie remembers the source category (such as ChatGPT or Perplexity) and your first public landing page for up to 30 days. We do not store a full referring URL, search query, AI conversation, IP address or advertising identifier in this record. On registration, this source can be linked to your account and aggregated with saved creation and confirmed payment records. Account-linked attribution follows account retention; unlinked visits expire after 30 days and are removed during cleanup. Owner activity, internal tests, Test payments and zero-value orders are excluded from revenue reporting. Use “Measurement choices” in the footer to decline or stop account-linked measurement. Declining does not prevent sign-in, generation or purchasing. We honor Global Privacy Control and Do Not Track for this measurement. Cloudflare also provides basic aggregate site analytics.

Guest purchases

You may enter your email and pay before signing in. We privately save your selected photo, purchase, generation request and credits against that email. This does not verify your email, register a password or create a login session. A confirmed payment funds only the requested generation; unused credits remain with that email. Viewing or downloading requires verified sign-in with the same email. New users finish registration through a secure emailed link or Google. We use a necessary, HttpOnly receipt cookie for up to seven days to show limited payment and job status in the original browser; it never unlocks media. Unsubmitted photo drafts expire after 24 hours and are removed during scheduled cleanup; accepted tasks follow our normal private-media retention. Guest payment and creation notices are transactional. Optional source measurement may be attached to a guest order only with permission.

Google Analytics and advertising

When enabled, Google Analytics loads only after you allow measurement. It measures public pages using cookies for up to 30 days and processes browser/device information and network information under Google’s policies. We send a public page address without its query string, a referring origin, a normalized campaign source category, and a public page label; we do not send your email, uploaded media, private creation links, order identifiers or account identity. Advertising signals and personalization are disabled for our Analytics integration. We ask again before using an earlier source-measurement permission for Google Analytics. Decline or withdraw through “Measurement choices”; new Analytics collection stops.

If advertising is enabled on an approved public page, Google AdSense and its partners may use cookies and device/network information to serve and measure ads. Google’s advertising consent messages manage applicable regional choices separately from our optional measurement banner. Advertising is excluded from sign-in, checkout, account, admin and private creation pages. Installing site-verification metadata or an ads.txt file does not itself serve an ad. See how Google uses information from partner sites.