Privacy Policy

Who we are and how to contact us

Tiny Desk AI Team operates Tiny Desk AI Video Generator at tinydeskvideo.net. For privacy, access, correction, export or deletion requests, email support@tinydeskvideo.net. You do not need an account to email us. Signed-in users can also open a support ticket. We may ask for proportionate proof of account ownership before disclosing or changing private data.

Information we process and why

• Account and session data: your name, email address, authentication records and profile information supplied by an enabled sign-in provider, to create your account and protect access. Authentication stores password hashes rather than readable passwords.
• Creative material: uploaded portraits, selected scenes, prompts, role mappings, requested parameters and generated video/audio, to carry out your generation request and deliver private results.
• Task and billing records: model and prompt versions, provider task identifiers, status, errors, credit reservations, orders, transaction references and refund records, to track work, fulfill purchases and resolve failures.
• Technical and support information: IP address and request/device information used for sign-in, abuse prevention or operational logs; messages and attachments you send to support; and limited product events. Do not send passwords, payment-card details or API secrets to support.
• Referral information: first-visit referral and campaign parameters may be recorded for acquisition reporting and associated with an account at registration.

Where applicable, processing needed to deliver requested account, generation and payment services is based on performance of a contract. Security, fraud prevention and service diagnostics rely on legitimate interests, subject to applicable rights; necessary financial recordkeeping may be required by law. Optional consent-based processing uses consent where required. A checkbox confirming portrait rights is not a waiver of the depicted person's privacy rights.

Photos, AI providers and audio

Only upload photos of consenting adults that you are authorized to use. Do not upload identity documents, highly sensitive images or photos of minors. We use portraits as visual generation references, not to authenticate people or build a face-recognition identity database.

When real generation is available and you submit a task, the configured PolarisCore service receives the scene, portrait references, prompt, settings and, when selected, a reference soundtrack through temporary storage links. This lets the external provider retrieve and process those specific files. Applying a fixed soundtrack after rendering is separate from generating or accurately synchronizing singing.

Mock mode returns a synthetic test video; it does not animate your likeness or send your portrait to a paid generation model. The generator identifies the currently available mode. Tiny Desk AI does not run a model-training pipeline on your uploads. We do not promise that an external provider has zero retention or excludes training unless its applicable terms and account settings establish that. Provider policies and processing locations must be assessed separately.

Storage, sharing and service providers

Uploaded media and outputs are stored privately; production media storage uses Cloudflare R2. Owner access is checked, and video links additionally expire after approximately 15 minutes. Such controls reduce unauthorized access but cannot guarantee absolute security. Private reference links are shared with the model provider to fulfill a task. We do not publish your portraits or outputs as examples without separate permission.

Stripe processes hosted credit purchases when configured. We retain order and payment-reference information, not full payment-card numbers or CVCs. Hosting, database, authentication, transactional-email, analytics and support providers may process the information required for their enabled function. Data may be processed outside your country. Where applicable law requires transfer safeguards, the operator must establish them with the relevant providers; this page does not certify a particular storage region or transfer agreement.

Cookies, browser storage and optional integrations

Necessary cookies support sign-in, language and preferences. Guest concept drafts stay in browser local storage until deleted or site data is cleared. Referral/campaign cookies can persist for up to 30 days. An enabled cookie-choice banner remembers the choice for up to 365 days.

Google Analytics, Plausible, advertising, external sign-in and live-chat tools depend on site configuration. Where consent controls are enabled, optional analytics, ads, chat and acquisition attribution wait for acceptance; a configured Google sign-in service still contacts Google when you choose that sign-in method. You can use browser controls to manage or clear cookies and reset your saved choice. When the banner is enabled, it appears again after the saved choice is cleared. Rejecting optional tracking does not disable necessary account or generation functions.

Retention and deletion

We keep account records while needed to provide your account, and uploaded material and outputs while needed for your requested tasks, access and support. The application currently has no automatic media-expiry schedule. Retention is reviewed against those purposes rather than a promise of indefinite availability. Billing, security and dispute records may need longer retention for legal obligations or claims; backup copies may remain until their normal replacement or cleanup.

The generator can delete an uploaded photo when no active task or scene template references it. That removes the private source object and marks its record deleted; it does not automatically remove a completed video, earlier provider processing or backups. Contact us to request account-wide, output or provider-related deletion and a description of any remaining retention requirements. We do not promise instantaneous erasure across external providers. Keep your own copy of outputs you need.

Your choices and rights

Depending on your location, you may have rights to access, correct, erase, export, restrict or object to processing, or withdraw consent without affecting prior lawful processing. Email the address above; we will assess and respond under the rules that apply to your request. You may also complain to your local data-protection authority where applicable. We do not use generation results to make decisions with legal or similarly significant effects about you.

Children and changes

The service is for adults aged 18 or older. Contact us if a child has supplied personal information. We may update this policy as practices change and will show the revision date; material changes will be communicated where required. Read the Terms of Service, Refund Policy and Contact page for related information.