Last updated: March 2026
HappyHorsesAI.org ("the Service", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered video generation service. By using the Service, you consent to the data practices described in this policy.
1. Information We Collect
1.1 Account Information
When you sign in via Google OAuth, we collect:
- Email address
- Display name
- Profile picture URL
- Google account ID (for authentication purposes only)
We do not collect or store your Google password.
1.2 Uploaded Media Files
When you use the video generation service, you may upload:
- Reference images (JPEG, PNG, WebP) for image-to-video generation
These files are processed temporarily and automatically deleted after processing is complete. We do not permanently store your uploaded media. Temporary storage during processing uses encrypted servers.
1.3 Usage Data
We collect non-personal usage data including:
- Task type (video generation)
- Task status (processing, completed, failed)
- Credits consumed
- Timestamps of actions
- Browser type and device information (via standard HTTP headers)
1.4 Payment Information
Payment processing is handled entirely by Stripe. We do not collect, store, or have access to your credit card numbers, bank account details, or other financial information. We only receive confirmation of successful payment, the amount paid, and the associated Stripe transaction ID.
2. How We Use Your Information
- Service delivery: To process your video generation requests and deliver results
- Account management: To manage your account, credits balance, and transaction history
- Authentication: To verify your identity and maintain session security
- Service improvement: To analyze aggregate usage patterns and improve service quality (no individual files are used)
- Customer support: To respond to your inquiries and resolve issues
- Legal compliance: To comply with applicable laws, regulations, and legal processes
We do NOT use your uploaded images or videos to train AI models. We do NOT sell, rent, or share your personal information with third parties for marketing purposes.
3. Data Storage and Security
3.1 File Processing and Deletion
- Uploaded files are processed on secure, encrypted cloud servers
- All uploaded reference images are automatically deleted after processing is complete
- Generated result files are available for download for a limited period and then automatically deleted
- We do not create permanent copies or backups of your uploaded media
3.2 Security Measures
- All data transmission uses TLS/SSL encryption (HTTPS)
- JWT-based authentication with short-lived access tokens
- Database connections use encrypted channels
- Server infrastructure protected by enterprise-grade firewalls
- Regular security monitoring and incident response procedures
4. Third-Party Services
We use the following third-party services, each with their own privacy policies:
We share only the minimum data necessary with each service. For example, Stripe receives only the payment amount and metadata — not your uploaded files.
5. Cookies and Local Storage
We use browser local storage (not cookies) to store:
- Authentication tokens (access token and refresh token)
- Cached user profile data (name, email, credits balance)
We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. We do not participate in any advertising network.
6. Your Rights
Depending on your location, you may have the following rights under applicable data protection laws (including GDPR, CCPA, and similar regulations):
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate personal data
- Right to Deletion: Request deletion of your account and all associated data
- Right to Restriction: Request restriction of processing of your personal data
- Right to Data Portability: Request a machine-readable copy of your data
- Right to Object: Object to processing of your data in certain circumstances
- Right to Withdraw Consent: Withdraw your consent at any time by ceasing to use the Service
To exercise any of these rights, contact us at privacy@happyhorsesai.org. We will respond to verified requests within 30 days.
7. Data Retention
- Uploaded media files: Deleted automatically after processing (typically within minutes)
- Generated result files: Available for download for up to 7 days, then automatically deleted
- Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request
- Transaction records: Retained for 7 years as required by financial regulations
- Server logs: Retained for up to 30 days for security and debugging purposes
8. Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete such data.
9. International Data Transfers
Your data may be processed in the following regions: Japan (Vercel serverless functions), Singapore (database), and the United States (Stripe payments, Cloudflare CDN). By using the Service, you consent to the transfer of your information to these locations. We ensure that all transfers comply with applicable data protection regulations, including GDPR standard contractual clauses where applicable.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
11. Contact Us
For privacy-related inquiries, data requests, or concerns, contact us at:
- Privacy inquiries: privacy@happyhorsesai.org
- Data deletion requests: privacy@happyhorsesai.org
- General support: support@happyhorsesai.org
- Legal matters: legal@happyhorsesai.org
