What we process

The service processes your account identity, uploaded photos, clips sent to Video to Prompt, generation prompts, task status and credit transactions. Video to Prompt clips are sent to Google (Gemini API) for analysis; when a clip is larger than 14 MB, it is uploaded to Google's file storage for the analysis and deleted from it afterwards. Model and moderation providers receive the input needed to process your task. Google provides basic sign-in identity through Supabase, whose account database is in Northern Virginia, United States. Private media storage uses Cloudflare R2. Generation and moderation use fal when enabled. These services may process data across regions. Files selected in the current local preview stay in your browser and are not uploaded.

Media retention

Video to Prompt clips are deleted as soon as the analysis finishes and at most 1 hour after upload; the generated text stays in your account. Uploaded photos normally expire after 24 hours; active task inputs remain available until the task finishes. New completed videos are saved privately for 3 days from completion, then download access ends and automatic file deletion is queued. Existing videos keep their displayed expiry. Download links last at most 5 minutes. Requested media deletion stops new links and queues file removal within 24 hours; an existing signed link can remain valid until it expires.

Moderation and payment providers

When Prompt Sift is configured, Waffo receives the generation text prompt for a pre-generation safety check; it does not receive uploaded media through that text endpoint. Waffo documents the check as stateless, without retaining prompt text after its response. Our independent input/output moderation uses fal. We retain moderation decisions and provider references, with encrypted response evidence normally deleted after 7 days; deletion requests also enter the removal workflow. Future Waffo checkout processes the payment, billing and tax information needed for an order; our service receives order status and identifiers rather than full card details. Checkout remains disabled until payment onboarding is complete.

Purpose, legal grounds and sharing

We process account and task information to provide the requested service, protect it against abuse, investigate reports and meet legal obligations. Optional usage statistics require your choice and may be withdrawn. Where applicable, contractual necessity, consent, legal obligation and proportionate security interests are the grounds for these uses. We share only information needed by the disclosed hosting, authentication, model, moderation and payment providers; we do not sell uploaded media or use it in public marketing without separate permission. Processing can take place outside your country, including the United States.

Your choices and rights

You may request access, correction, deletion, restriction or a portable copy of your personal information, and object to processing where applicable, by contacting support@selfscene.ai. We may verify account ownership without asking for a password. You may withdraw optional analytics consent through Usage preferences and complain to the relevant privacy regulator. Necessary legal/security records can be retained where required; we explain applicable exceptions when responding. The service is for adults and is not directed to children.

Optional analytics

Usage statistics are off until you choose Allow statistics. They count public page views, preview starts, prepared inputs, input errors, completed sign-ins, checked uploads, quotes, accepted generation tasks, observed generation results and download clicks, grouped by broad traffic-source and device categories. Download clicks do not prove that a file finished saving. Example inputs are separate from your own files, and operator tests are excluded. The statistics do not store account IDs, email addresses, IP addresses, prompts, media URLs, file names or full referrer/campaign strings. Counts expire after 90 days; temporary random receipts used to avoid duplicate retries expire after 24 hours. The preference cookie lasts for up to 180 days. This browser also remembers a refusal locally until you change it or clear browser storage. You can change it using Usage preferences; declining stops these optional statistics. Generation result counts come from completed task responses and are separate from previews. Purchase tests are explicitly named as tests and carry no revenue. Real purchase events require a confirmed paid order. Checkout remains closed until separately enabled.

Account deletion

You can request account deletion from the billing page after a recent sign-in. Active tasks must finish first. Account and media removal is separate from legally required accounting and dispute records. The operator is in China; financial retention and cross-border requirements must be finalized for the actual payment arrangement before accepting live purchases. No live purchases are currently accepted.

Optional Google Analytics

The counts described above are our in-house statistics. A separate, current Allow statistics choice also enables Google Analytics 4. A choice saved before GA4 was added does not enable Google. GA4 receives canonical public page addresses without query strings or fragments, broad source categories and fixed preview, sign-in, upload, quote, generation, download or error labels. We never send your account identity, prompts, selected files, file names or full referrers to Google. Verified owner tests are excluded. Advertising signals and personalization are off.

Google uses a pseudonymous analytics cookie lasting up to 30 days and processes technical network information under its privacy policy. Declining in Usage preferences disables Google collection and removes our GA4 cookies. The Google library is not loaded before consent. This optional choice is separate from account and media permissions.