Privacy policy

This policy describes how FilmCraft handles personal information when you use filmcraft.video. FilmCraft operates from Panyu District, Guangzhou, Guangdong, China. Contact our support email for privacy matters. This policy covers processing by FilmCraft; external login, payment and AI providers also have their own privacy notices.

Google sign-in provides authorized profile details such as your name, email address and profile image. We keep account identifiers, sessions and preferences to operate your account. Google sign-in does not give us your Google password. We also store purchase and subscription records, payment status, amounts, currency, transaction identifiers and credit usage. Waffo Pancake handles card details; FilmCraft does not store full card numbers or security codes.

We process prompts, uploaded images, video and audio, reference media, project settings, generation history and output files to provide your creative workspace. Cloud generation sends relevant input to servers and providers; it is not entirely local processing. Content you choose to save is stored so you can return to it. We also process emails, feedback and attachments you send to support. Avoid submitting personal or confidential information you do not have permission to share.

Operating the website may involve IP addresses, browser and device details, request times, session identifiers, security events and error or performance logs. These help deliver requests, prevent abuse and diagnose failures. If configured, Google Analytics measures usage, Microsoft Clarity provides interaction diagnostics and Sentry receives error and performance data. Availability of these services depends on deployment configuration.

We use information to sign you in, store projects, run generation and exports, manage credits and payments, provide support and send necessary account or security notices. We also use appropriate technical information to maintain reliability and prevent fraud. Where applicable law requires a legal basis, processing relies on performing our agreement, meeting legal obligations, legitimate interests where permitted, or your consent where required. Optional processing based on consent can be withdrawn.

Cookies and browser storage keep you signed in, remember language and preferences, and support creative tools. Blocking essential storage can prevent these functions from working. Configured analytics tools may use their own identifiers or cookies. You can manage cookies through browser settings and use provider opt-out tools; this is separate from deleting your FilmCraft account. FilmCraft does not currently provide an in-site cookie preference center.

We share information needed to deliver the service with hosting, storage, database, email and security providers, including Cloudflare, Neon and Resend where used. Google provides sign-in and Waffo Pancake processes payments. Relevant creative inputs are sent to AI services selected for your task. Information may also be disclosed when lawfully required, to protect rights and security, with your authorization, or during a business transfer subject to applicable safeguards. We do not sell personal information.

Depending on your selected feature and model, prompts, reference media, generated files or file-access URLs may pass through Yir, Replicate or Vercel AI Gateway to model providers such as Google, OpenAI, Alibaba, ByteDance or MiniMax. Providers process and retain requests under their own terms. FilmCraft does not itself train models on your content without permission, but cannot promise zero retention or deletion of copies held in systems outside its control. Only submit voice or likeness references with the necessary permission.

Account and workspace information is kept while needed to provide your account and saved work. Moving an item to Trash is not permanent deletion. Permanent deletion removes the relevant records and stored files controlled by FilmCraft through the supported deletion flow; backups, security records and legally required transaction records may remain for their applicable retention periods. Ask support to close your account or request deletion. We do not claim a fixed automatic deletion schedule for every data category or deletion from third-party systems we do not control.

We use access controls and service-provider security features to protect information, but no system is completely secure. Keep your sign-in account and devices protected. Hosting and AI services may process information outside China and outside your country, under different data protection rules. Where applicable, cross-border processing must use legally required safeguards. We do not represent that every provider stores all information in a single country. Security incidents will be handled and notified as required by applicable law.

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction of processing, or object to certain processing and withdraw consent. Email support with the account concerned and your request; we may need to verify identity before acting. We will respond within the applicable legal deadline and explain any lawful limits, including required record retention. You may also complain to the competent data protection authority. These rights are not waived by using FilmCraft.

FilmCraft is intended for adults aged 18 and over. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action. Account, billing and security messages are necessary service communications. Any optional marketing based on consent must allow withdrawal; you can contact support to opt out. This does not stop essential service notices.

We update this policy when our services or data practices change and show the revision date on this page. Material changes will be communicated through the website or account email before they apply, unless an urgent legal or security requirement calls for immediate action. For privacy requests, security concerns or questions, contact the support address below. Review provider privacy notices when using their services.