Privacy Policy
Last updated:
What we collect
The photos you upload, the video we make from them, your email address if you give it to us, and a payment confirmation from Stripe. Card details go to Stripe only; we never see or store them.
To stop automated abuse and payment fraud we use Vercel BotID browser checks, a signed visitor cookie and short-lived attempt counters. We store a hashed network identifier, not your raw IP address. Stripe and Vercel process security signals under their own privacy policies.
To see which steps of the site work, we keep anonymous usage events (such as “photo uploaded” or “checkout started”) linked to a random ID in your browser, together with the traffic source category, the referring site’s domain, campaign (utm) tags and the landing page — no IP address, device fingerprint or full referring URL.
Optional Google Analytics
We use Google Analytics to measure visits, page views and traffic sources. Google may receive browser and device information and process your IP address to do this. Visitors from the EU/EEA, the UK and Switzerland get analytics cookies only after choosing “Allow analytics”; elsewhere analytics is on by default. Anyone can turn it off or change their choice at any time below; the choice is saved in your browser.
We send only public page categories and referring domains with a limited set of source and medium tags. URL queries, fragments and private video IDs are excluded, and we never send email addresses, prompts, uploaded media, private links or tokens. Ad personalisation and Google Signals are off. See the Google Privacy Policy.
How we use it
Your photos go to our AI video provider only to make your video. We don't sell your data, share it for advertising, or use your photos to train models. Your email is used to deliver your video and any updates you asked for.
If you agree to offers from us on Stripe's checkout page and don't finish the purchase, we may send up to two reminders about that unfinished video — never after you've bought. Every reminder has a one-click unsubscribe link.
How long we keep it
Uploaded photos and generated videos are deleted automatically after 30 days. Abuse counters and failed-payment records expire within 24 hours and are removed by scheduled cleanup. The visitor cookie lasts 30 days.
Contact
To have your data deleted sooner, email support@zombieai.app.