Privacy Policy
This notice describes the information used to operate Rumpelstiltskin AI Dance, deliver private media, protect purchases, and support account holders.
Effective date:
1. Where this policy applies
This policy covers rumpelstiltskin-ai-dance.com, its public pages, sign-in, private workspace, checkout return, generation workflow and support channels. Questions about these practices may be sent to [email protected].
2. Information connected to an account
We may keep an email address, display name, password hash or Google account identifier, authentication history, video balance, settings, order and generation records, support correspondence, and account-security state. We never receive a Google password.
3. Portrait input and generated media
Portraits are uploaded only after an authorized generation request and are stored in a private site-specific bucket. Input objects are removed when processing reaches a final state. Completed media remains private to the account and is exposed through short-lived signed links rather than a public bucket.
4. Checkout and transaction records
The service records pack selection, amount, currency, payment status, entitlement delivery and limited reconciliation identifiers. The card processor handles payment-card fields; our application does not store full card numbers or security codes.
5. Abuse and payment protection
Limited IP, device, browser, location, account-linkage and checkout signals may be converted into restricted security records. They are used to rate-limit abuse, investigate delivery or payment disputes, and prevent repeated fraudulent attempts.
6. Public-site measurement
Approved public pages may use a dedicated Plausible identity and a dedicated Microsoft Clarity project. Upload, email and other creative-input fields are masked, and login, checkout, dashboard, administration and private-media routes are excluded from session recording.
7. Operational providers
We use specialized providers for hosting, content delivery, private object storage, generation, authentication, payment processing, analytics, fraud prevention and transactional support. Each receives only the data needed for its task and applies its own legal terms.
8. Retention and safeguards
Temporary portraits are deleted after the job ends. Account, order, entitlement, private-result, support and security records are kept only for delivery, access, fraud prevention, accounting and dispute needs. Controls include HTTPS, tenant-scoped queries, private buckets and expiring media URLs.
9. Choices, rights and changes
You may avoid Google sign-in, clear browser storage, update eligible account details, or request access, correction, deletion or restriction where applicable. Some transaction and security records may be retained when law or dispute prevention requires it. The service is not directed to children under 13 and this notice may change as the product or law changes.