Privacy Policy

Overview

This policy describes what personal data Ozilai handles when you use the site, why we handle it, and what you can do about it. We try to hold as little as the service needs to function.

Data we hold about you

To run the service we gather these categories of data:

1. Account details — your name, your email address and anything else you enter when registering.
2. Activity on the site — we use Cloudflare Web Analytics to measure aggregate visits and website performance without analytics cookies. See the Cookie Policy for browser storage details and controls.
3. Technical details of your device — device type, operating system and browser, so the site works well on what you use.
4. Cookies — small files kept in your browser that remember settings and help the site behave consistently. See the Cookie Policy for specifics.
5. Billing data — handled by outside payment processors. Complete card numbers never reach our servers.

Photos and generated media

Your photo and the clip made from it are the most sensitive things we handle, so they get their own section.

• What is involved: the picture you upload, the settings you pick (length, aspect ratio, resolution, audio) and the video that results.
• Purpose: only to deliver the clip you asked for and to display it in your My Creations list.
• Outside processor: the video is generated by WaveSpeed (wavespeed.ai), an external video-generation service working on our behalf, which runs ByteDance's Seedance 2.0 model. We pass it the uploaded image and the preset required for the job. Your account details are not included.
• Model training: we do not use your uploaded photos to train any model of ours.
• How long it stays: photos and finished clips stay in your account so that you can download them again, until you delete them or your account has been inactive for 12 months, after which they are removed. Billing records are kept for as long as tax law requires. You can ask for a creation and its source photo to be deleted at any time and we will do it.
• No selling, no publishing: your photo and your clip are never sold, posted publicly, or shown to other users.
• What you can ask for: at any time you may request deletion of a creation, or a copy of the data we keep about you, through the email below.

Make sure you are entitled to use every photo you upload, including pictures of other people.

Why we use it

We process the data above in order to:

• run, maintain and develop the service;
• complete payments and send the related receipts;
• deliver technical notices, security warnings and support replies;
• answer your questions, feedback and requests;
• spot, prevent and deal with fraud or misuse.

Our legal basis

Where the GDPR applies, we rely on: performance of a contract to create your account and deliver the clips you order; our legitimate interests to keep the service secure and to prevent fraud and misuse; your consent where we ask for it; and legal obligation for billing and tax records.

Who else sees it

Your personal data is not for sale. It is passed on only when:

• a service provider needs it to help us operate the site, and is bound by confidentiality;
• the law requires it, or a public authority makes a lawful request;
• it is necessary to defend our rights, property or safety, or those of our users.

The providers that process data for us are: Cloudflare (hosting and content delivery), WaveSpeed (video generation, using ByteDance's Seedance 2.0 model), and the payment providers shown at checkout. Each processes data on our instructions and under contract.

Some of these providers operate outside your country, including in the United States. Where data leaves the EEA or the UK we rely on the transfer safeguards those providers have in place, such as standard contractual clauses.

Keeping it safe

We encrypt data while it moves, limit who can access it, and review our setup on a regular basis. No transfer over the internet can be guaranteed perfectly secure, but we keep working to protect what you give us.

Your choices

Depending on where you live, you may have the right to access, correct, export, delete or restrict the processing of your personal data, and to object to processing or to withdraw consent you have given. If you are in the EEA or the UK these are your rights under the GDPR and UK GDPR; if you are a California resident they are your rights under the CCPA/CPRA.

You can exercise any of them by writing to support@ozilai.io. We will respond within 30 days. You also have the right to complain to your local data protection authority.

The service is not intended for children. We do not knowingly collect personal data from anyone under 16, and if we learn we have, we will delete it.

Updates to this policy

When we change this policy in a meaningful way we will change the date at the top and, if suitable, tell you through the service.

Contact

The data controller for this service is its operator, reachable at support@ozilai.io. For questions about this policy, to exercise any of the rights above, or to ask for a creation and its source photo to be deleted, write to us there. We respond within 30 days.