Privacy Policy

What we collect

• Account details from Google sign-in: your Google account identifier, name, email address, email verification status and profile picture.
• The photo you upload and the options you choose (subject, food, scene, length and resolution).
• The videos generated for you.
• Order records: price, status and payment references. Card details are entered on Stripe’s checkout page and never reach our servers.
• Basic technical data, such as IP address and browser type, processed by our hosting provider for security and to keep the service running.

Google sign-in: access and purpose

Google sign-in is optional for browsing our homepage, examples, pricing and legal pages. It is required to create an account, pay for a video and retrieve your order history. We request only basic identity permissions: openid, email and profile.

We use your Google account identifier and verified email to recognize your account, your name and profile picture to display your profile, and your email to associate purchases, refunds and support requests with you. We do not request access to Gmail messages, Google Drive files, Google Photos, Contacts or Calendar.

Signing in does not import your Google photos into the video generator. You choose a reference image from your own device separately. Google is our sign-in provider, not our video generation provider.

Google user data: sharing and limited use

Google account data is stored in our Cloudflare-hosted account database. Stripe receives the account email and payment-related information needed for checkout and refunds. We do not send your Google profile, Google account identifier or authentication tokens to the AI video model.

We do not sell Google user data, use it for advertising or profiling, or use it to train or improve generalized AI or machine-learning models. Access is limited to operating the features you request, support, security and legal obligations. We do not allow human access to Google user data except with your consent for a specific purpose, when necessary for security or to comply with applicable law.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Account storage and security

We store your account profile and the link to your Google account in our database, alongside session records that may include IP address, browser information and expiry times. Depending on the sign-in flow, authentication credentials such as OAuth tokens may also be stored to operate authentication. They are not sent to the video provider.

We use HTTPS for data in transit and account-based authorization for account and order APIs. Administrative access is restricted to operating and supporting the service. No storage or transmission method can be guaranteed completely secure.

How we use it

We do not sell your data, do not send marketing email, and do not use your photos or videos to train AI models.

• To generate the video you paid for and show it to you.
• To take payment, issue refunds and keep accounting records.
• To answer your support requests and send essential service emails.
• To prevent abuse and keep the service secure.

Retention

• Our Cloudflare R2 storage uses a 7-day lifecycle for uploaded photos and archived generated videos. Deletion is processed by the storage service and may not occur at the exact expiry time. Download videos before they expire.
• This lifecycle applies to our media storage, not copies you download, browser drafts or data retained by the AI provider under its own policies.
• Order and payment records are kept as long as tax and accounting rules require.
• Your account is kept until you ask us to delete it.

Who processes your data

We use a few service providers, each only for its part of the service:

• Cloudflare: hosting, database and file storage.
• Google: sign-in and Google Analytics 4 website usage measurement.
• Stripe: payments and refunds. Purchases may be sold through Link, Stripe’s reseller service, which then acts as the seller of record and handles sales tax.
• SeeAPI and its underlying Seedance 2 video service: receive your uploaded reference photo, the scene prompt and output settings to generate your video. These are separate from Google account data. Provider-side retention and processing are governed by the provider’s policies; our R2 deletion schedule does not delete provider-side copies.

Photo and video URLs

Reference photos and archived results are served through media.windowpeep.com so the generation service can fetch inputs and you can download results. The media URLs can be opened by anyone who has the link; account protection on your task history does not make these media links private. Do not upload sensitive or intimate images or share a media URL you want to keep confidential.

Removing a photo from the editor clears the current selection; it does not by itself delete an earlier uploaded copy. To request earlier removal of an uploaded photo or video, contact support@windowpeep.com with the relevant order or media URL.

Cookies and local storage

We use authentication and language cookies and browser storage needed to operate the service. While you set up a video, your photo and choices may be saved in your browser so they survive sign-in. You can remove this local copy by clearing site data in your browser. Google and Stripe may use their own cookies when you use sign-in or checkout. We use Google Analytics 4 to understand page views, traffic sources and website interactions. Google may collect page URLs, referrers, browser and device information, approximate location and cookie identifiers. We disable Google Signals and advertising personalization in our tag and do not send your Google account profile, uploaded photos, generated videos or payment details as analytics event parameters. You can restrict analytics using your browser cookie controls or a tracking blocker.

Your choices and rights

You can download your videos at any time before they are deleted. To access, correct or delete your personal data, or to delete your account, email support@windowpeep.com from your account email. Depending on where you live, you may also have the right to object to processing or to complain to a data protection authority.

You can also use the delete-account control in your dashboard. Deleting an account removes its profile, linked authentication records and sessions. Financial records required by law and media subject to the storage lifecycle may remain; request media removal separately if needed.

You may revoke Google access at any time through Manage your Google connections. Revoking access stops future Google authorization but does not itself delete data already held by Window Peeper AI; use the account deletion control or contact us to request deletion.

Children

Window Peeper AI is not intended for anyone under 18, and photos of minors must not be uploaded. If you believe a minor has used the service, contact us and we will delete the data.

Changes and contact

We will post any changes to this policy on this page and update the date above. Questions: support@windowpeep.com.