Privacy Policy

Scope of this policy

This policy explains what Mustache Baby collects, why we collect it and the choices you have. It applies to the website, the video generator, the dashboard and the emails we send about your account.

We keep the product deliberately small: you sign in with Google, upload a photo, receive a video and manage your credits. That means we need less data than a typical social app.

What we collect

• Account details from Google sign-in: your name, email address, profile photo and Google account ID.
• Content you submit: the photos you upload and the videos generated from them.
• Purchase details: the credit pack you bought, the order ID, amount, currency and payment status. Card details are handled by our payment provider and never reach us.
• Usage data: pages viewed, basic device and browser information, and the time of your visit. Page views are stored without a persistent advertising identifier.
• Messages you send to support.

How we use information

• Generate your video and store it so you can download it.
• Create and secure your account, apply credits and prevent abuse or fraud.
• Send transactional email, such as a notification when a video is ready.
• Understand which pages are useful so we can improve the product.
• Comply with legal obligations and enforce our Terms of Service and AIGC Policy.

Children's photos and guardian consent

The service is designed for parents and guardians. You may upload a photo of a child only if you are that child's parent or legal guardian, or you have explicit permission from the parent or guardian.

We use the photo to generate the video you requested. We do not use children's photos to train AI models, and we do not sell them or share them for advertising.

If you believe a photo of a child was uploaded without consent, contact us immediately and we will remove it.

AI processing and service providers

We share limited data with providers that help us run the service: hosting and file storage (Cloudflare), database (Neon), AI video generation (Seedance), payments (Waffo) and email delivery (Resend). They process data on our instructions and only for the purposes described here.

Some providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

We do not sell personal data, and we do not share it for cross-context behavioral advertising.

How long we keep data

• Uploaded photos: deleted within 24 hours after the generation attempt finishes.
• Generated videos: kept until you delete them or close your account, unless a longer period is needed to resolve a dispute.
• Account details: kept while your account is active, then deleted or anonymised within a reasonable period.
• Payment and tax records: kept for as long as the law requires.
• Page-view analytics: kept in aggregate for up to 12 months.

Cookies and analytics

We use a small number of cookies, mainly to keep you signed in and to protect forms. Our Cookie Policy lists them. We do not use third-party advertising cookies or cross-site trackers.

Security

Data is encrypted in transit. Access to production systems is restricted, and generated files are served through signed links that expire. No service can guarantee perfect security, but we work to protect your data and will notify you if a breach affects you where the law requires it.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to certain processing. Signed-in users can delete their videos from the dashboard. For account deletion or any other request, email us.

We will respond within the time required by applicable law. You can also complain to your local data protection authority.

Changes to this policy

We may update this policy as the product evolves. If a change is material, we will post a notice on the site. The date at the top shows the latest version.