Privacy Policy

1. Who this policy covers

This policy describes how Rumpelstiltskin Dance AI ("we", "us", or "the service") handles information when you visit rumpelstiltskindance-ai.dance, create an account, buy generation credits, submit portraits, generate a video, or contact support.

Our service uses external AI, payment, hosting, and storage providers. This policy explains our service's handling of information; those providers also have their own terms and privacy practices for information they receive. See the Terms of Service for the product scope and permission required to submit a photo.

2. Information we receive

We process information you provide and records created while operating the service:

• Account information: your name, email address, account identifier, and authentication records. Email-and-password sign-in requires authentication information. If a social sign-in option is offered and you choose it, we receive the account information that provider shares for sign-in.
• Portraits and selections: one portrait in Solo mode or two in Duo mode, the selected mode, and your consent selection. Portraits may contain faces and other information visible in the image; submit only photos you are authorized to use.
• Purchase and credit records: the selected pack, order identifier, payment status, amount, currency, payment-provider identifiers, and credit grants, usage, and returns. Billing or customer information returned by the checkout provider may form part of the purchase record.
• Generation records: your account and request identifiers, template and mode, a fingerprint of the mode and photos to recognize repeated requests, generation instructions, task status, timestamps, provider task identifiers, result links, and failure or delivery information.
• Support information: your messages and any other information you choose to include in a ticket or support request.
• Technical and usage information: information needed to serve a request and protect the service, such as IP address, browser or device information, session data, and request or error records. Configured analytics or support tools may also receive website usage information as described below.

Payment-card entry takes place through the payment provider's hosted checkout. The application does not ask you to enter a full card number into a support ticket or generation form. Do not share payment credentials or account passwords with support.

3. What happens to your photos

Selecting a photo displays a preview in your browser. Selection alone does not submit it to the AI generation provider.

To preserve a selection while you visit hosted checkout, the service may save the chosen mode, one or two photos, and your consent selection in this browser's IndexedDB storage. That draft has a 24-hour validity period. An expired draft is removed when the service next reads it; closing the browser does not guarantee that stored bytes are erased at the 24-hour mark. Browser settings can remove this site's data. Avoid leaving a draft on a shared device.

When you start generation, your portrait or portraits are sent through our server to KIE's upload service. KIE provides access to MiniMax H3, which processes the portraits with our configured scene and appearance references and instructions to create a new video. We do not submit a reference video or background song as model input.

Our generation task database stores task information rather than the original uploaded portrait file. This does not mean that your photo is never stored: a browser draft and the provider's upload storage are separate from our task database. Upload URLs and generated files are also subject to the provider's processing, access, and retention practices. We do not promise that a provider immediately deletes inputs or excludes them from every form of secondary processing; do not infer such a guarantee from the absence of photo files in our task database.

4. Why we use information

We use information to:

• Create and secure accounts, authenticate requests, and provide account history.
• Process purchases, reconcile payments, and maintain your generation-credit balance.
• Generate and deliver the video you request and make completed results available for download.
• Recognize repeated submissions, investigate uncertain tasks, and return credits after confirmed technical failures.
• Respond to support, privacy, payment, and refund requests.
• Prevent misuse, investigate security or delivery problems, resolve disputes, and meet applicable recordkeeping obligations.
• Understand website use when analytics tools are configured, subject to the storage and consent behavior described below.

Depending on the applicable law and processing activity, these purposes may rely on performing the service you request, your consent where required, our interests in operating and securing the service, or a legal obligation. You can ask us about the basis relevant to your request using the contact details below.

5. Providers and disclosures

Information is shared as needed to provide and support the service:

• KIE and MiniMax: portrait inputs and generation instructions for AI video creation, along with identifiers needed to submit and check a generation.
• Cloudflare and storage infrastructure: generated video files and information needed for hosting, object storage, and delivery. Completed MP4 files are copied to configured Cloudflare R2 storage for delivery.
• Payment providers: information needed to process purchases, reconcile payment status, handle refunds, and prevent fraud. For Creem purchases, Creem acts as merchant of record and handles information under its own Privacy Notice.
• Account, hosting, email, and support providers: information needed for the functions they provide, when those services are configured and used.
• Support email delivery: messages sent to our support email address are routed through Cloudflare Email Routing to our Gmail support inbox. These providers process the message content, sender details, and email metadata needed to deliver and handle your request.
• Analytics or website support tools: website and interaction information when the relevant tools are configured, as explained in Section 8.

We may also disclose relevant records where needed to comply with a legal requirement, address fraud or abuse, protect users or the service, or resolve a dispute. Access by people operating the service should be limited to the records needed for those responsibilities.

We do not publish your uploaded portrait or completed video to a public gallery through the generation flow. However, result files are served using public storage URLs. The account's task history and download endpoint require sign-in, but someone with the direct storage or provider file link may be able to access that file without signing in. Treat those links as sensitive and share them only intentionally. This service does not provide an absolute private-file guarantee.

6. Storage, retention, and security

Account, purchase, credit, support, and task records can remain after a video finishes. They support account history, fulfillment, payment reconciliation, security, and dispute handling. There is currently no automatic promise to erase these records, provider uploads, or generated videos immediately after generation or on a fixed short schedule.

A file may be stored by a processing provider and, for completed results, in our configured object storage. Availability of stored files or links can change. Download a result you want to keep; the service is not a permanent archive. Clearing browser storage removes local browser data but does not cancel a submitted generation or remove provider copies, purchase records, or account records.

The service uses HTTPS connections, authenticated account access, and checks that task-history and download requests belong to the signed-in account. No system can guarantee absolute security, and these account controls do not make direct public file URLs private. Keep your credentials and download links secure, and contact support if you believe your account or a file has been exposed.

Providers may process information in countries other than where you live. The locations and safeguards depend on the provider and configuration. We do not represent that all portraits, videos, or account records remain in a single country. Contact us if you need further information about a particular processing activity.

7. Your choices and privacy requests

You can choose not to submit a portrait, clear a local browser draft, or contact us to request access to, correction of, or deletion of information associated with your account. Depending on applicable law, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent, or complain to a relevant data-protection authority.

Use Support tickets, which requires sign-in, and identify the account, order, or task involved. We may need to verify your identity and clarify the request before acting. We will review what can be provided or deleted and explain any records that must be retained for payment reconciliation, security, disputes, or legal obligations. Deletion requests are reviewed rather than handled by an instant self-service erase button.

If a request involves information held by an external provider, we may need to coordinate with that provider or explain how to contact it. We cannot promise immediate removal of all provider copies or independent records. Withdrawing permission does not undo processing already completed or itself reverse a purchase; see the Refund Policy for payment questions.

8. Cookies, browser storage, and optional tools

The service uses cookies and browser storage for account sessions, language and display preferences, and the checkout draft described above. If the cookie-preference banner is enabled, it stores your accept or reject choice in a cookie. Hosted checkout pages use the payment provider's own storage and policies.

The website supports optional Google Analytics, Plausible analytics, Google AdSense, and Crisp or Tawk support widgets. These tools load only when their corresponding service settings are configured. Their availability can change, and they are not all governed by the same consent controls.

When the cookie banner is enabled, Google Analytics is initialized with analytics and advertising storage denied unless you have accepted; the Google script may still load and communicate with Google before acceptance. Configured AdSense advertising scripts wait for acceptance. Configured Plausible analytics and support widgets do not use that same accept/reject gate. The banner therefore should not be understood as blocking every external connection or every tool before acceptance.

You can manage or remove cookies and site storage through your browser settings. Doing so may sign you out, reset preferences, or remove an unfinished photo draft. If a consent banner is shown, use its available choices. For help changing a saved choice or questions about the tools currently active, contact support. Browser or extension controls may further restrict third-party requests.

9. Children and other people's information

The service is not directed to children independently opening accounts or making purchases. Users must have the legal capacity required by our Terms of Service. A portrait of a child requires appropriate parent or guardian permission and lawful use; exploitative content is prohibited.

If you believe someone submitted your image, or a child's information, without appropriate permission, contact us and identify the relevant task or result link if known. Do not send extra sensitive material just to report the concern.

10. Changes and contact

We may update this policy when the service or its data practices change. The updated date above identifies the current version. Review this page before submitting new photos if privacy requirements matter to your use.

For privacy questions or requests, use Support tickets or email support@rumpelstiltskindance-ai.dance. See Contact for support details, the Terms of Service for permitted use, and the Refund Policy for purchase issues.