Privacy Policy

What this policy covers

This policy explains how Enzo Celebration AI at enzocelebrationai.com handles information when you turn a photo into an Enzo celebration AI video. For privacy questions or requests, email [email protected].

Information needed to run the service

• Account details: your email, name, profile image if provided, sign-in method and authentication records. Google supplies account details when you choose Google sign-in. Email-account passwords are stored as protected hashes.
• Your photo and videos: the photo you upload, the format you choose (9:16 or 16:9), the generated video and its status.
• Purchases and credits: orders, payment amounts and status, credit usage and refunds. Stripe processes payment details; we do not store complete card numbers or security codes.
• Visit and device information: IP address, approximate country, browser and session details, language, and referral or campaign information used to run the site and keep it secure.
• Support messages: what you send by ticket or email, attachments, and the related account, order or video details.

Only upload a photo you have permission to use. Avoid including unnecessary sensitive information in photos and support messages.

Why we process it

We process information to sign you in, create and deliver the videos you ask for, keep them available in your account, manage purchases and credits, investigate failures and answer requests. We also use connection records to prevent fraud and abuse.

Where a legal basis is required, this means performing the service you request, meeting legal obligations, protecting the legitimate interests of users and the service, and asking for consent for optional advertising measurement. You can withdraw that consent without losing access to creating videos or checkout.

We do not sell personal information, put your photos or videos in a public gallery, or use your photos to train our own AI models. External AI providers have their own data practices; we cannot make training or deletion promises on their behalf.

For content reports and appeals, we may review the information you send and the related uploads, videos and account records needed to look into safety or rights concerns. Those records follow the retention and disclosure rules in this policy.

Providers that receive information

We share only what each function needs:

• Google sign-in: account authentication when you choose it. Google Privacy Policy.
• Stripe: payments and refunds. Stripe Privacy Policy.
• Cloudflare: R2 storage and delivery of photos and videos; connection information may also be processed when Cloudflare provides site delivery or security. Cloudflare Privacy Policy.
• AI generation providers: your photo, our fixed video instructions and the resulting video, to produce the video you asked for.
• Hosting and email providers: what is needed to run the site and, when enabled, send account messages such as verification, password-reset or video-ready emails.

Providers may process information outside your country. The storage periods below cover systems we control; they do not guarantee that every provider deletes data at the same time. We may also disclose necessary records to comply with the law or respond to fraud, security incidents and legal claims.

When enabled, Cloudflare Turnstile checks the browser during email sign-up and sign-in to reduce automated abuse. Cloudflare processes browser and network signals for this check. We send the verification token to Cloudflare to validate it; we do not send your password or photo to Turnstile.

Cookies and local drafts

Sign-in and preference cookies support normal use. Referral or campaign cookies can last up to 30 days; a random browser identifier used to prevent abuse can last up to 365 days. Browser storage also remembers limited interface state.

An unfinished video is saved locally in the current browser tab: settings in sessionStorage and your photo in IndexedDB. It can be restored after refreshing, signing in or returning from checkout. Starting a video clears its local draft and photo straight away. A draft expires 24 hours after its last edit, and expired data is cleared the next time you open the creator.

Clearing site storage may remove a draft, preferences or your sign-in session. It does not cancel a video already started or erase account records. Photos already uploaded to our servers follow the storage periods below.

Photo and video storage periods

• Uploaded photos: deleted 24 hours after your video succeeds or fails. Photos never used for a video expire 24 hours after upload. A photo still needed for an unfinished task is kept until that task is resolved.
• Finished videos: available for 30 days after completion.

Download before the expiry shown on your video page. After expiry, playback and download on the website stop and the files are scheduled for deletion. We do not offer permanent video storage.

Deleting a video from My videos hides it from your account; it does not immediately delete stored files or disable a media link someone already has. The storage schedule still applies. Account, payment, credit and support records are kept separately as needed to run the service, resolve open requests, prevent fraud and meet legal record-keeping duties.

Access and security

Your account pages show only your own videos. Media is served through direct links on our media domain, so anyone who gets a link may be able to open it. Share links only with the people you intend to.

We use protected authentication, account access controls and HTTPS. These measures reduce risk but cannot guarantee absolute security. Tell us if you suspect unauthorized access.

Optional advertising measurement

When enabled, Google Ads and Google Analytics measurement load only after you accept. Events may include a transaction identifier, amount, currency, page information and advertising click identifiers. We do not add your photo, name or email to purchase measurement events, and advertising personalization is disabled.

When measurement is enabled, use "Advertising privacy choices" in the footer to reject or change your choice. The choice is saved for up to 180 days. Rejecting measurement does not affect creating videos or checkout. See Google's Privacy Policy.

Your choices and requests

Depending on the law that applies to you, you may ask to access, correct, copy or delete your information, or to restrict or object to its processing. Email [email protected], including for account deletion. We may verify that you own the account, and we keep records the law requires or that relate to unresolved transactions. You can also contact your local data-protection authority.

Get the required permission before uploading another person's photo, including a parent or guardian's consent for a child's photo. Someone who cannot legally use the service on their own must involve a parent or guardian where required.

Changes and related policies

We will update the date above and explain material changes on the website. Read the Terms of Service for usage rules and the Refund Policy for purchases and failed videos. Privacy contact: [email protected].