Privacy Policy

This policy applies to Island Boy AI. We process account information such as your email, display name, sign-in provider identifier and session; uploaded photos and selected role types; task identifiers, progress and generated videos; and order, credit and payment-status records. Operational requests may include IP addresses, timestamps and errors for security, rate limiting and troubleshooting.

We use this information to provide sign-in, check image safety, generate and deliver videos, process purchases, maintain credit balances and prevent misuse. Do not upload sensitive documents or unnecessary personal information. Upload only photos you are entitled to use, and obtain consent from adult human subjects.

Cloudflare provides hosting, D1 database and R2 storage. Uploaded photos are processed by the configured image-safety service, SeeAPI, and by APIMart for image preparation and access to the Seedance generation model. Google processes Google sign-in when used. Stripe processes payment details on its checkout; our application receives transaction and order information rather than your full card details. These providers apply their own privacy and retention terms. Processing may take place outside your country. Our storage deletion schedule does not establish the providers' deletion schedule.

We attempt to delete our uploaded-photo copies after task completion or failure. Remaining uploads are configured to expire after 1 day under R2 lifecycle rules. Generated videos are configured to expire after 7 days. Lifecycle processing may occur after the expiry threshold rather than at an exact hour. Download videos you want to keep. Account, order, credit, task and security records are separate from media and are retained as needed for service operation, purchase support, fraud prevention and applicable recordkeeping obligations.

Essential cookies maintain sessions and language choices. Browser session storage remembers a task identifier so its progress can be recovered.

We use Cloudflare Web Analytics to measure visits and website performance. Its JavaScript beacon loads from static.cloudflareinsights.com/beacon.min.js and reports page views, visited page paths, referral sources, country, browser, operating system and device type, together with page-load timing and Core Web Vitals. According to Cloudflare, this analytics service does not use cookies or local storage for analytics and does not fingerprint visitors or track individuals across websites. These analytics are separate from our necessary sign-in cookies and local form drafts. See Cloudflare Web Analytics and its data and metrics.

When you choose to sign in from the video form, we temporarily save your selected photos, role types and permission confirmation in this browser to restore your selection after sign-in. This action alone does not upload the photos. The local draft can be restored for 30 minutes and is deleted when read, including when it has expired. If you do not return, it may remain in browser storage until a later visit or until you clear site data.

You can ask about access, correction or deletion at support@islandboyai.com. We may verify your identity before handling a request; some transaction records may need to be retained. Information sent to a third-party provider is also subject to that provider's policies. We use access controls and temporary signed media URLs, but no online system can promise absolute security. Changes will be reflected by the policy's revision date.