Privacy policy
Short version: your photo is sent to the video model to make your video and is not kept on our servers, the finished video is saved in your browser, and if you buy videos we keep a small record of the purchase.
Last updated 2026-10-11
Who we are
AI Effect Video (aieffectvideo.com) is run by Zehong Liu, who is responsible for the personal data described here. Questions about your data: support@aieffectvideo.com.
Your photo and your video
When you choose a photo, your browser shrinks it (to at most 1536 pixels on the long side) and saves it again as a JPEG. This removes most of the information stored inside the file, such as the camera and the GPS location. The photo leaves your device only when you press the button to make a video.
Our server then uploads the photo to the storage of fal.ai (“fal”) and asks fal to run the video model (MiniMax Hailuo H3, made by MiniMax). We ask fal to delete the uploaded photo after about 1 hour, to keep the finished video for about 7 days and then delete it, and not to keep the request itself. While they exist, both files sit at long, unguessable web addresses that anyone who has the address could open; we do not publish or share these addresses. fal may pass the photo to the company that made the model to run it. fal states in its terms that it does not use customer content to train its own products. We cannot see whether or how long the model maker keeps a photo it receives this way; if a photo must not leave your control, do not upload it.
We do not store your photo on our servers. We keep a record of each video job (when it started, which effect, whether it worked, and the address of the finished video at the provider) so that your browser can collect the video; the address is deleted after 8 days. We do not look at your photos or videos, show them anywhere, use them to recognize or identify people, or use them to train AI models.
A photo of a person is personal data about everyone in it. We use it only to make the video you asked for (performance of a contract). Upload photos only of yourself, of people who agreed, or of your own pet, as the acceptable use policy says.
The finished video is saved in this browser on your device (in the browser’s IndexedDB storage), so you can watch and download it again. We keep the last 10 videos for 30 days. You can delete a saved video at any time with “Delete” next to it, and clearing this site’s data in your browser deletes all of them. Anyone who uses the same browser profile can open them, so delete them on a shared computer.
Free use
To keep the free video fair, we count free videos per visitor per day. For this we store a keyed hash of your IP address combined with the date, never the address itself. The hash changes every day, so it cannot be used to connect your visits on different days, and we delete it after 7 days. Paid videos are not linked to your IP address.
Before a free video, Cloudflare Turnstile checks that a person is using the page. Turnstile loads only when you start a free video. Cloudflare processes technical data such as your IP address and browser details for that check, and also uses it to improve its bot detection under its own Turnstile privacy policy. It is not used to identify you or for advertising.
Buying videos
Checkout takes place on a payment page run by Waffo Pancake, a service of Waffo.com Limited (“Waffo”), which sells the videos to you as our merchant of record. Waffo collects your payment details and email address, sends your receipt and processes this data under its own privacy policy. We never see or store your card number.
Your browser creates a random wallet code before checkout. It is not linked to your name. After the payment we store:
- the wallet code, the pack you bought and the videos it added,
- Waffo’s order number, the amount charged and the order status (paid or refunded),
- the email address on the order, as Waffo passes it to us,
- a record of videos used: when each video was started and finished, which effect, and whether it was made, without the photo.
In your browser we keep the wallet code and, while a checkout is open, a note of which pack you are buying.
Where you came from
When you start a checkout, we record which website or link brought you to this site. We keep the domain of the site you came from, the campaign tags on the link (utm_source, utm_medium, utm_campaign), the first page you opened on this site, and your approximate country, which Cloudflare infers from the network you connect from. Your IP address is not stored with this information. We save this information with your wallet code, whether or not you complete the payment, and with your orders, to find out which channels and countries bring users to the site. We do not record the full address of the page you came from or your city. This information contains no name or contact details.
Your browser keeps the referring domain, the campaign tags and the first page you opened in its session storage until you close the tab, so they can be sent at checkout. No cookie is set for this.
Why we may use it
We use the purchase record to deliver what you bought and to let you recover your code (performance of a contract), and to handle refunds and disputes, prevent fraud and abuse of the free video, keep our own accounts, and see which channels and countries bring users to the site (our legitimate interests). Analytics runs only with your consent.
Hosting
The site, the API and the database run on Cloudflare; the database is hosted in the United States. To deliver pages and protect the service, Cloudflare processes technical data such as your IP address and browser type in its logs.
Analytics and cookies
If you accept analytics cookies in the cookie bar, we use Google Analytics 4 to count visits and see which pages are used. Nothing is loaded from Google before you choose, and you can change your choice with “Cookie settings” at the bottom of every page. Google Analytics is set up without Google’s advertising features.
Who receives data
We do not sell or rent personal data or use it for advertising. It is shared only with the services that run the site: Cloudflare (hosting, database, Turnstile), fal.ai (making the videos) and, through them, MiniMax (the companies that made the video models), and Waffo (payments, receipts, refunds), and Google (analytics, only with your consent). These services may process data outside your country, including in the United States, Hong Kong and mainland China. Email you send to our support address is delivered through Cloudflare to a mailbox hosted by Tencent (Foxmail), so Tencent (Foxmail) processes those emails for us. We do not “sell” or “share” personal data as those words are used in California law.
How long we keep it
Photos: not kept by us; deleted by fal after about 1 hour. Videos: deleted by fal after about 7 days; the address of a video is deleted from our records after 8 days; the copy in your browser stays until you delete it or for 30 days.
We keep the email address on a purchase until 12 months after its videos expire (12 months after purchase), so you can still ask about it. After that we delete the email address and keep only the order number, the pack, the amount and the dates for our accounts.
Hashed IP addresses used for the free video and for receipt look-ups are deleted after 7 days.
You can ask us to delete your purchase record. We then delete the email address and keep only the order number, the pack, the amount and the dates for our accounts. Your wallet code keeps working, but it can no longer be recovered with your email address.
Your rights
Depending on where you live (for example, the EU, the UK, or California), you can ask to see, correct, or delete your personal data, to receive a copy of it, or to object to how we use it. Write to support@aieffectvideo.com, ideally from the email address you paid with, and we will reply within one month. You can also complain to your local data protection authority.
Children
The site is not aimed at children. Photos of anyone under 18 may not be uploaded, and packs are sold by Waffo only to buyers aged 18 or older. If you believe a child has given us personal data, or a photo of a child was used, write to us and we will delete what we hold.
Changes
If we change this policy, we will update the date at the top of this page.