Privacy Policy

This policy explains what WhirWhir collects when you use the site, why, how long we keep it and what you can do about it. Questions go to support@whirwhir.com.

What we collect

• Your account. Your email address and, if you sign in with Google, your name and profile picture. If you sign up with email and a password, the password is stored only as a one-way hash.
• Guest purchases. You can make a video without an account. We then set a cookie that identifies your browser, and keep the email address you enter at checkout so we can send you the finished video.
• Photos you upload. The photos you add to make a video, and any text you type to describe it.
• Videos you make. The generated videos, the effect, model, length and resolution you chose, and the credits each one used.
• Purchases. What you bought, when, the amount and currency, and the payment status. Card and PayPal details are entered on Stripe's or PayPal's own forms; we never see or store your full card number.
• Technical data. Your IP address and the country it points to (used to show prices in your local currency and to block abuse), browser type, pages visited, and error reports.

How we use it

• To make your videos and deliver them to you.
• To keep your credit balance, process payments and refunds, and send receipts and account emails.
• To email you a reminder about something you left unfinished: a checkout you didn't complete, or a video you set up but didn't make. At most one every few days, and each one has a one-click unsubscribe link. Unsubscribing stops reminders, not receipts or "your video is ready" emails.
• To keep the service safe: your text and photos are checked automatically before generation, and the finished video before it is shown, to block nudity and other content that is not allowed.
• To prevent fraud, abuse and repeated sign-ups, and to fix errors.
• To understand which pages and effects people use, so we can improve them.

We do not sell your personal information, and we do not use your photos or videos to train AI models.

Your photos and videos

• Your photos are sent to the video model only to make the video you asked for.
• Your videos are private. Nobody else sees them unless you create a share link or choose to show a video in the public gallery; you can turn either off at any time.
• Account holders: photos and videos stay in your account until you delete your account or ask us to delete them.
• Guests: the video and the photos used for it are deleted automatically 3 days after the video is finished. Download your video before then, or sign in with the same email you paid with to keep it in an account.
• "Use your last photo?" On the same browser, or in your account, the photos you used last may be offered back to you so you don't have to upload them again. Uploaded photos are kept for a limited time: a guest's are deleted 3 days after the video is finished (or after 3 days without use); in an account they stay until you delete your account or ask us to delete them, and the offer on a browser ends after 30 days.
• Only upload photos of yourself, or of people who have agreed to it. See the Terms of Service for what may not be uploaded.

Who we share data with

We share data only with the services that run the site for us, and only what each one needs:

• Video generation: the AI providers that create the video from your photo and description (such as kie.ai, SeeAPI, fal.ai and Replicate). They receive the photo, the description and the settings for that video. SeeAPI also runs the automatic safety checks on your text, photos and finished videos.
• Hosting and storage: Cloudflare (website, database, file storage and bot protection).
• Payments: Stripe and PayPal, which process your payment under their own privacy policies.
• Email: the email service that sends account emails, receipts and video links.
• Sign-in: Google, if you choose Sign in with Google.
• Error reports and analytics: Sentry for error reports (with personal data removed), and, outside the European Economic Area, the UK and Switzerland, Microsoft Clarity to see how pages are used. Form fields are masked in Clarity.

We may also disclose data when the law requires it, or to protect users and the service from fraud or abuse.

Cookies

We use cookies and similar browser storage to keep you signed in, remember your language and theme, identify a guest's browser and remember an unfinished video after checkout. We also set our own cookies that record how you first arrived (for example from a search engine) and give your browser an anonymous ID, so we can see which pages lead to purchases; they are not shared with anyone. Clarity's analytics cookies are set only where described above. You can clear cookies in your browser at any time; you will then be signed out.

How long we keep data

• Account data, photos and videos: until you delete your account or ask us to delete them.
• Records of visits and of steps on the site (how you arrived, country, browser type, and steps such as uploading a photo or opening checkout): step records are deleted after 180 days; visit records are kept for our statistics and are no longer linked to you once you delete your account.
• Guest videos and photos: 3 days after the video is finished.
• Orders and payment records: kept after an account is deleted, because tax and accounting rules require it. They no longer contain your name or email address.
• Server logs and error reports: up to 90 days.

Your choices and rights

• Delete a video or photo: write to support@whirwhir.com with the video's link or the date you made it, and we will delete it. Deleting your account removes all of them at once.
• Delete your account from your account settings. This removes your photos, videos, sign-in data and profile right away.
• Access, correct or export your data, or object to how we use it: email support@whirwhir.com and we will answer within 30 days.
• If you live in the EU, the UK or another place with data protection laws, you may also complain to your local data protection authority.

Children

You must be at least 13 years old (or the higher minimum age required where you live) to use the service. Parents and guardians may upload photos of their own children, or of children whose parent or guardian has agreed; these photos are handled like any other photo and used only to make the video. We do not knowingly collect data from children under that age. If you believe such a child has used the service, or you want a photo or video of your child removed, contact us and we will delete it.

Changes

When this policy changes we update the date at the top of this page. If a change affects how we use data you already gave us, we will also tell you by email or on the site before it applies.

Contact

support@whirwhir.com