Privacy Policy | Enzo Celebration

Last updated: October 19, 2026

Scope and contact

This Policy explains how Enzo Celebration handles information when you visit aienzofernandezcelebration.com, create an account, buy credits, or generate celebration videos. For privacy questions or requests, email support@aienzofernandezcelebration.com or use our contact form. Our Terms of Service cover use of the service.

Information we collect

Account information: your name, email address, verification status, profile image if provided, account settings, and authentication records. Email-and-password accounts use a password hash. If you use Google sign-in, we receive account identifiers and basic profile information such as your name, email address, and profile image; we do not receive your Google password.
Photos and generated videos: the photo you submit for generation, your confirmation of permission to use it, the generated clip, and job records such as task identifiers, status, timestamps, and error details. A photo and its generated video can contain identifiable faces, clothing, and other personal information. Do not upload information you do not want processed for generation.
Payments and credits: your account's credit balance and credit movements, purchased pack, payment status, customer and order identifiers, and transaction timestamps. Payment details entered at checkout are handled by the payment provider; our application does not store full card numbers or card security codes.
Support and newsletters: the name, email address, message, and other information you send us, together with newsletter subscription status.
Technical and usage information: IP address, browser and device information, request and error logs, visited pages, referral information, and interaction events available through hosting and analytics services.

You can browse public pages without an account. Account information, a usable photo, photo permission confirmation, and available credits are required to generate a video. Without them, we cannot provide that feature.

How photos move through the service

Selecting a photo lets you preview it in your browser. If you continue to sign in or buy credits, we save a draft of the selected photo and permission choice in that browser's IndexedDB so you can resume. The draft is treated as expired after one hour and removed the next time the draft is loaded; it is also cleared after a generation successfully starts or you replace the photo. This is not a background deletion timer. You can remove it by clearing site data in your browser.

When you start generation, we upload the photo to Cloudflare R2 and provide kie.ai with a temporary retrieval link, our generation instructions, and reference assets. kie.ai processes it through ByteDance Seedance 2 Mini (bytedance/seedance-2-mini) and returns the task status and result. We store the finished video in R2 and make it available through your account.

The source-photo retrieval link stops working when the job finishes or two hours after it was created, whichever comes first. Link expiry does not delete the stored photo or copies already processed by the AI provider. Finished videos require the owning account to access them through our download route; they are not automatically published in the site's example gallery. If you download and share a video elsewhere, that platform's own privacy rules apply.

Why we use information

We use information to authenticate accounts, generate and deliver videos, process purchases, track and return credits for failed jobs, answer support requests, send account and service messages, maintain security, investigate abuse, and understand site performance.

Where applicable data protection law requires a legal basis, providing requested account, payment, and generation services is based on performing our contract with you; security, fraud prevention, support, and service reliability rely on legitimate interests where permitted; required accounting and legal records rely on legal obligations; and processing that requires consent, including applicable marketing or optional tracking, must rely on that consent. You may withdraw consent by contacting us or using the relevant controls, without affecting earlier lawful processing. Accepting this Policy does not itself provide consent for every processing purpose.

Our generation workflow uses your photo as a reference for the requested clip, rather than to verify your identity. This Policy does not make a blanket promise about AI providers' model-training practices; their processing is also governed by their own terms and privacy notices.

Service providers and other disclosures

We disclose information as needed to operate the service:

Cloudflare: website hosting, database, cache, media storage, and service email delivery.
kie.ai and the underlying ByteDance Seedance model service: receive the generation photo, instructions, and reference assets to produce your video and return task information. Provider retention is separate from our storage; see kie.ai's service information.
Waffo Pancake: checkout, payment processing, payment confirmation, refunds, and related transaction records. Card details entered at checkout are processed by Waffo Pancake and its payment partners, not stored on our servers.
Google: Google sign-in when you choose it, and Google Analytics for site usage measurement. See Google's Privacy Policy.
Plausible: website traffic and performance analytics. See Plausible's Data Policy.
Resend: email address and subscription status for the newsletter.
Discord: internal purchase notifications may include your account name or buyer email, purchase amount, customer identifier, and checkout identifier. These notifications do not include your uploaded photo or generated video.

Authorized support personnel may access relevant information to resolve a request or investigate abuse. We may also disclose information when legally required or necessary to protect users, enforce our Terms, or address fraud or security incidents. We do not sell your uploaded photos or generated videos, or automatically use them as public marketing examples.

If you report prohibited content or appeal a restriction, we process your contact details, report, relevant content, job records, and correspondence to investigate and respond. Report-related access is limited to what is needed for that purpose; reporting does not make your content public.

Cookies, analytics, and local storage

We use cookies for sign-in sessions and language preferences, and browser storage for preferences and the temporary photo draft described above. The production site is configured to use Google Analytics and Plausible to understand visits and usage. Google Analytics can use cookies or similar identifiers; Plausible provides traffic measurement. These services can receive technical information such as the page visited, referring page, and browser or device details.

You can manage cookies and site storage in your browser and use available provider opt-out controls. Blocking essential cookies may prevent sign-in; clearing site data removes local drafts and preferences. The current site does not provide an in-page analytics preference switch. This Policy is a disclosure, not a substitute for any consent required by applicable law.

The current sign-up flow attempts to add your email address to the newsletter through Resend. You can unsubscribe in account notification settings, through an unsubscribe link where included in an email, or by contacting support. Unsubscribing does not prevent essential account, security, payment, or service messages. Deleting your account does not automatically remove an external newsletter contact; unsubscribe first or include newsletter removal in your deletion request.

Retention and deletion

We retain account information and job records to operate your account and video history, payment and credit records to reconcile transactions and resolve billing issues, and support or security records as needed to handle requests, prevent abuse, and meet legal obligations. Retention depends on those purposes, account status, disputes, and applicable legal requirements.

Uploaded photos and generated videos are stored separately from account records. The current service has no fixed automatic deletion schedule for that stored media. You may delete your account in settings, but this does not automatically erase the separate media objects from storage or copies held by external providers. To request removal of stored photos, videos, or other personal information, contact us with your account email and any relevant job identifiers. We will review the request, verify it where needed, and explain any information that must be retained for legal or security reasons. Please do not send passwords or full card details.

AI provider retention is separate, and source-link expiry is an access control rather than a storage retention period. Ask us if your request also concerns information sent to a provider. Keep a local copy of videos you wish to retain; continued download availability is not guaranteed.

Security and international processing

We use access controls, authenticated video downloads, and time-limited source retrieval links to restrict access. No online service or transmission method can guarantee absolute security.

Our hosting, AI, payment, email, and analytics providers may process information in countries other than yours. Applicable protections and retention rules can differ. Contact us for information about the providers and transfer safeguards relevant to your information; this Policy does not assert that all information stays in one country.

Your choices and rights

You can update available profile details, manage newsletter preferences, and delete your account through settings. Depending on your location and applicable law, you may also request access, correction, deletion, restriction, or a portable copy of personal information, and withdraw consent where processing relies on it.

You may object to processing based on legitimate interests, including direct marketing where applicable. Send requests to support@aienzofernandezcelebration.com. We may need to verify that you are the account holder or person concerned, and will respond within the time required by applicable law. You may complain to your local data protection authority; UK users can contact the Information Commissioner's Office.

If someone uploaded your photo without permission, contact us with enough information to locate the content so we can investigate. Where a child requires parental authorization under local law, that authorization is required for use of the service and the child's photo. If you believe information about a child was provided without required authorization, contact us to request review and removal.

Policy updates

We will publish updates on this page and change the date above. For material changes, we will provide notice through the service or email as appropriate.