Privacy Policy
What we collect, why, and where it goes.
Last updated: 2026-09-21
1. Who controls your data
PhotoThaw is the data controller for the personal data described in this policy.
2. What we collect
- Account data — your name, email address and profile picture, provided by Google when you sign in.
- Content you upload — the photos you submit and the videos generated from them.
- Generation data — the model and settings used, timestamps, and whether the generation succeeded.
- Credit and payment data — your balance, transaction history, and records of purchases. We do not receive or store your card details.
- Technical data — IP address, browser type, and similar information used for security and to prevent abuse.
3. Why we use it
- To provide the service — running your generations and returning results.
- To manage your account and credits.
- To take payment and comply with tax and accounting rules.
- To keep the service secure and prevent fraud or abuse.
- To respond to support requests.
- To improve the service, using aggregated and de-identified information.
4. Where your data goes — please read this
To generate a video, we must send your photo to a third-party AI model provider. This means your photo leaves our systems and is processed by that provider, which may be located in a different country.
Our current model providers include WaveSpeedAI (Singapore) and other similar services. We choose providers that offer commercial API terms, but their handling of your photo is also governed by their own privacy policies.
By uploading a photo, you accept that it will be transferred to these providers for processing.
5. Other third parties we use
- Google — for signing in with your Google account.
- Our hosting and database providers — to run the website and store your account data.
- Our payment provider — to process payments. Card details are handled entirely by them.
- Email delivery — to send transactional messages such as receipts.
6. Cookies and local storage
We use your browser's local storage to keep you signed in. We do not use advertising cookies or sell data to advertisers.
7. How long we keep things
- Uploaded photos and generated videos — kept while your account is active, and deleted when you delete them or close your account.
- Account data — kept while your account is active, then for a limited period as required for legal and accounting purposes.
- Payment records — kept as long as tax and accounting law requires.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent.
To exercise any of these, contact support@photothaw.com. You also have the right to complain to your local data protection authority.
9. Children
The service is not intended for children. We do not knowingly collect data from anyone under 18.
10. Security
We use industry-standard measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
11. Changes and contact
We may update this policy. Material changes will be announced on the website or by email. Contact: support@photothaw.com