Privacy Policy | Flying Video

Version 1.0. Effective date: 19 October 2026.

1. Who is responsible

Springtide Labs LLC, a Delaware limited liability company, operates flyingvideo.net and is the controller of the personal information described here. Address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Privacy and support contact: support@flyingvideo.net.

This policy covers our public research, accounts, AI video tools, billing records, and customer support. Payment providers also control information they collect directly at checkout under their own policies.

2. What we collect

• Account data: name, email, profile image, authentication provider identifiers, and session records. If you use an email/password account, authentication stores a password hash, not your plaintext password. We do not receive your Google password when you use Google sign-in.
• Content and tasks: uploaded reference images, scene notes, template and model settings, generated media, task IDs, status, errors, and moderation decisions needed to process your request.
• Orders and credits: order and provider identifiers, product, amount, currency, payment status, subscription dates, credit grants and usage, refunds, and disputes. We do not store full card numbers or security codes.
• Support information: messages, contact details, attachments, and task or order references you send us.
• Technical information: IP addresses and request information processed by hosting and security services; session and browser information; application events, error records, and account activity used to operate the service and investigate problems.

Do not upload sensitive personal information or media you lack permission to use. We do not request precise GPS location.

3. How and why we use it

We use account and content data to authenticate you, moderate requests, generate and deliver videos, and maintain your account; order and credit data to fulfill purchases and manage billing; and support data to respond to you. Where EEA or UK law applies, these activities rely on performance of our contract with you.

Security, abuse prevention, troubleshooting, and necessary service notices rely on our legitimate interests, subject to your rights. Records required for tax, accounting, or legal compliance rely on legal obligations. Where consent is required for optional processing, we request it and you may withdraw it. We do not sell personal information or share it for cross-context behavioral advertising. We do not use your content to train our own AI models.

4. AI processing and media access

Before a new generation or an upgrade, our server sends the generation description, including template text and your scene notes, to Waffo Prompt Sift for text safety screening. We send no photo, video, account email, or payment details to this text-screening endpoint. We store the screening decision, Waffo request ID, reason, semantic status, time, and a hash of the screened description with the related account or task for abuse prevention, troubleshooting, and appeals. Waffo describes this endpoint as stateless and says it does not retain prompt text after returning; this is Waffo's stated practice, rather than an independently audited guarantee. Endpoint documentation.

When you choose to generate, uploaded media and scene notes are sent to our servers and to APIMart for content and asset review and video generation. The underlying provider for the selected model also processes the inputs needed to run that model. Available models can include Seedance and MiniMax Hailuo, as shown in the generation interface. Providers may receive media URLs, prompts, and task parameters; their processing and retention are governed by their own terms. We do not promise zero retention or that those providers never use data for their own purposes.

Source files may be stored in Cloudflare R2, and generated files may be copied there for preview and download. APIMart and its providers may retain copies on their own CDN. Media URLs are unlisted rather than access-controlled private links: anyone who obtains a URL may be able to access that file. Account authentication protects task-list access, but does not make the underlying media URLs private. Do not upload material that requires confidential storage.

5. Service providers and disclosures

We disclose the information needed for each provider's role:

• Cloudflare: website hosting, security, delivery, database, and object storage; request metadata, accounts, task and payment records, source files, and generated videos. Privacy policy.
• APIMart and the selected model's provider: prompts, reference media, task settings, and results for moderation and generation. Review the provider information for the model you choose at APIMart.
• Google: account information when you choose Google sign-in, and technical information when your browser loads YouTube thumbnails or you play an embedded video. Privacy policy.
• Waffo Prompt Sift: the generation description and scene notes for text screening, plus request metadata; no photo or video is sent to this endpoint. Content safety documentation.
• Waffo Pancake, for purchases made through its checkout: billing and payment details collected directly by Waffo, and account email and order references needed for checkout and fulfillment. We receive payment and refund status and transaction amounts. Privacy policy.
• Link and Stripe, for purchases made through their checkout: account email and order references, with payment details collected by the checkout provider; we receive transaction, subscription, refund, and dispute records. Link privacy policy, Stripe privacy policy.
• Resend, when email delivery is used: recipient address and the contents of authentication or service emails. Privacy policy.

We may disclose information to comply with lawful requests, address fraud or safety risks, establish or defend legal claims, or transfer the business. We will give notice of a change of controller where required by law. Linked sites apply their own privacy policies.

6. Cookies, browser drafts, and external content

Essential session cookies keep you signed in and secure authentication. Browser storage also keeps locale, theme, cookie choices, and interface preferences. An anonymous generation draft, including the selected image and scene notes, may be saved in your browser to restore it after sign-in. Its handoff is accepted for up to 2 hours; expired drafts are cleared when that storage is next accessed, rather than by a background timer. You can remove browser copies by clearing this site's data. Clearing browser storage does not delete server or provider copies already submitted for generation.

Public research can load thumbnails from i.ytimg.com. A YouTube player loads only after you press play, using youtube-nocookie.com; Google then receives information about your browser and interaction.

We currently do not load Google Analytics or Plausible analytics scripts. If we enable optional analytics or advertising tracking, we will update this policy and provide the choices required by applicable law before collection. Application activity and operational logs described above are separate from third-party analytics. Browser settings let you block or clear cookies, but disabling essential cookies can prevent sign-in and purchasing.

7. Retention and deletion

We have not implemented scheduled deletion of server-side account, task, or media data. These records currently have no fixed automatic expiry and can remain until you request deletion. This is not a promise of permanent backup or availability.

• Account information, prompts, source files, and generated media are retained while providing your account and service, with deletion handled on request.
• Support and security records currently have no automatic purge schedule. We may retain the minimum necessary for unresolved support, fraud prevention, or legal claims after a deletion request.
• Payment, refund, and dispute records are retained for the applicable tax, accounting, and legal recordkeeping periods. We do not promise a single period for every jurisdiction.
• Browser-only drafts use the 2-hour validity rule above. Third-party providers retain their copies under their own policies; deleting our copy does not itself delete theirs or copies another person downloaded.

Email support@flyingvideo.net from your account address to request deletion of an account, specific media, or associated data. We may verify ownership, retain legally required records, and coordinate removal with providers where possible. We will explain any limitation that prevents full removal. Deletion is manual, not instant. Cancel active subscriptions separately at Settings → Billing.

8. Security and international processing

We use HTTPS in transit, account authentication, and access controls for protected application functions. These measures do not make publicly reachable media URLs private, and no internet service is completely secure. If a breach triggers notification duties, we will notify affected people and authorities within the time required by applicable law.

Our operator is in the United States and our providers may process information in other countries, where protections may differ from your location. When transfer safeguards are legally required, the applicable transfer must use a lawful mechanism, such as an adequacy decision or standard contractual clauses where applicable. Contact us for information about the safeguards relevant to your data; this policy does not assert that every provider uses the same transfer arrangement.

9. Your choices and rights

Depending on your location, you may request access, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. You may withdraw consent for processing based on consent without affecting earlier lawful processing. You may complain to your local data protection authority and exercise applicable California or other state privacy rights without discrimination.

Send requests to support@flyingvideo.net. We may verify your identity and will respond within the period required by applicable law, notifying you if an allowed extension is needed. Ask the payment provider separately about data it holds as controller; we can help identify the provider from your order. You can edit supported profile fields in Settings.

10. Children, communications, and changes

Flying Video is for adults aged 18 or above, or the higher age of majority where they live. We do not knowingly collect account information from children. If you believe a child has provided personal data, contact support so we can investigate and remove it as required.

We send necessary authentication, billing, security, and service communications. We do not currently run a marketing mailing list. If we introduce one, we will provide any required opt-in and an unsubscribe route.

We update the version and date when this policy changes and will notify existing users of material changes through the website or account email at least 14 days in advance, except where legal or urgent security requirements require earlier action. New purposes requiring consent will be presented for consent where applicable.

11. Contact

Springtide Labs LLC

131 Continental Dr, Suite 305, Newark, DE 19713, United States

Privacy requests and support: support@flyingvideo.net.

Terms of Service · Refund Policy · Contact