Privacy Policy

Introduction

wavememe ("we", the "Service") generates short AI videos from a face photo you upload. This Privacy Policy explains what we collect, how we use it, where it is processed, and how long we keep it — with a specific, public retention schedule for face photos.

Information We Collect

1. Account information — your email address and basic profile when you sign in (Google sign-in or email link).
2. Uploaded media and generated content — the face photos you choose to upload, reference images, audio or video you add in the agent, and the videos generated from them.
3. Payment information — payments are processed by our payment processor (currently Stripe). We never see or store your full card number.
4. Usage and device data — pages visited, feature usage, funnel events, approximate device and browser data, and UTM/referrer attribution parameters.
5. Cookies — small files used for sign-in sessions and preferences.

Face Photos: What We Do and How Long We Keep Them

This section is our public retention schedule for face data.

• Your uploaded photo is used for exactly two things: automated pre-screening (whether it contains one clear face, whether the content is allowed, whether the person appears to be an adult), and rendering your video — the final video's face is taken directly from your uploaded photo. Processing intermediates produced while rendering (frame-swap intermediate clips and the per-frame quality-check reports) are kept in the same controlled storage for quality and safety review; they are not part of your library and are covered by the randomized-URL protections below. When you delete a finished video from your library, the video and every rendering intermediate associated with it are deleted as well. Independently of that, rendering intermediates are automatically deleted within 48 hours of the job starting, whether or not you delete the video — only the finished video stays in your library.
• Original uploaded photos and reference media you add in the agent are permanently and automatically deleted within 48 hours of upload, whether or not a generation succeeds. Deletion is enforced by scheduled storage cleanup, not by manual action.
• Uploaded files are stored under randomized, unguessable URLs, so a file link cannot be guessed or derived from the file's content. New uploads and finished videos are sent with instructions not to cache them.
• Finished videos stay in your library until you delete them. You can delete them at any time, and deletion immediately disables their share pages.
• We do not sell face photos, do not use them for advertising, and do not use them to train our own models.
• Automated face and age estimation results are used only to accept or reject the upload and are not kept beyond the upload's own lifetime.

Where Your Data Is Processed (Processors and Cross-Border Transfers)

To generate your video, your photo and the images derived from it are transmitted to the AI providers that run the models. Depending on the providers active at the time, this includes:

• Google (Gemini) — United States — photo compliance precheck.
• Replicate, Inc. — United States — frame-by-frame face replacement (the face-swap engine), sung-line lip-sync, video compositing (the ffmpeg batch carrier), and an alternative photo precheck, when these providers are in use.

Hosting, file storage, and task queues run on Cloudflare (global network). Payments are processed by Stripe. Transactional email (for example, sign-in and security notices) is sent via Resend.

This means your face photo may be transferred to and processed on servers located in the United States. By using the Service and confirming the upload consent, you consent to these transfers. We transmit photos to these providers solely to fulfill your generation request; their own terms and privacy policies govern their handling.

How We Use Information

We use the data we collect to:

• Provide, maintain, and improve the Service.
• Process transactions and send related confirmations.
• Send technical notices, security alerts, and support messages.
• Respond to your questions, feedback, and support requests.
• Detect, prevent, and address fraud and abuse.

Data Sharing

We do not sell your personal information. We share data only in these limited cases:

• With the service providers listed above who help us operate the Service, limited to what each provider needs to perform its function.
• To comply with legal obligations or respond to lawful requests from public authorities.
• To protect our rights, property, or safety, or that of our users.

Data Security

We use industry-standard measures: encryption in transit, access controls, randomized unguessable file URLs, and automated 48-hour deletion of original uploads. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.

Your Rights and Choices

You can access, update, export, or delete your personal information:

• Delete any generated video directly from your library at any time.
• Request account deletion or deletion of any other personal data by opening a support ticket from your dashboard.

Where local law grants additional rights — for example the Illinois Biometric Information Privacy Act (a public retention schedule, consent, and deletion), GDPR, or CCPA — we honor them for all users regardless of where you live. The retention schedule above is the public schedule those laws refer to.

Children's Privacy

The Service is for users 18 and older. We do not knowingly collect personal information from minors, and photos of minors are prohibited. If you believe a minor's photo has been uploaded, contact us and we will remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes are announced by updating the date at the top of this page and, where appropriate, by a notice in the Service.

Contact Us

Privacy questions and deletion requests: open a support ticket from your dashboard.