Smalltown Boy AI Privacy Policy

Overview

This Privacy Policy explains how Smalltown Boy AI at smalltownboyai.app collects, uses, stores, and shares information when you visit the website, create an account, upload photos, generate a dance video, make a purchase, report content, or contact support.

In this policy, "Smalltown Boy AI," "we," "us," and "our" refer to the operator of this website and service.

Information We Collect

We may collect the following categories of information:

1. Account information: your name, email address, profile details, authentication status, session information, account settings, and related identifiers. If you sign in with Google, we receive the name, email address, and profile image Google shares with us according to the permissions you grant.
2. Generation inputs: photos you upload, cropped versions, source-image URLs, submitted content, the preset dance scene, and generation settings.
3. Generated content and task records: generated videos and their audio, result URLs, task status, task identifiers, error information, credit cost, timestamps, titles, and generation history associated with your account.
4. Billing and transaction information: the product or plan selected, credit amount, payment status, transaction and subscription identifiers, renewal or cancellation status, billing email, currency, amount, invoice or receipt links, and other checkout metadata. Payment providers process payment credentials; we do not store full card numbers on our servers.
5. Support information: messages, attachments, account details, and other information you submit through our support form, email, or an enabled customer-support service.
6. Technical and usage information: IP address, browser and device information, operating system, referral page, pages viewed, feature usage, timestamps, logs, approximate location derived from network information, and security or abuse-prevention events.
7. Cookies and local storage: session, security, preference, checkout, and application-state data stored by the website or by enabled service providers.

Do not upload confidential information, government identifiers, financial account details, medical records, or images you do not have permission to use.

How We Use Information

We use information to:

• Create and manage accounts and secure login sessions.
• Receive uploaded photos, submitted content, and selected settings to process generation requests.
• Generate, preview, store, and deliver videos and their audio, and provide downloads.
• Display generation history and recover or troubleshoot tasks.
• Calculate, deduct, return, and display credits.
• Process purchases, subscriptions, renewals, cancellations, refunds, invoices, chargebacks, and fraud checks.
• Apply content-safety, rate-limit, security, and abuse-prevention controls.
• Provide customer support and respond to privacy or account requests.
• Monitor performance, diagnose errors, understand feature usage, and improve the service.
• Comply with legal, accounting, tax, payment-network, and dispute-resolution obligations.

Where applicable data-protection law requires a legal basis, we process account, purchase and generation information to perform our contract with you; retain required billing and tax records to meet legal obligations; and process security, fraud-prevention, support and service-reliability information for our legitimate interests, subject to your rights. Where a particular use requires consent, we must obtain that consent before that use.

AI Processing and Uploaded Content

To process a generation request, we may send your uploaded photos, submitted content, generation settings, and the preset's built-in reference media to third-party AI generation and content-safety providers. These providers process inputs and outputs under their own terms and privacy practices.

Uploaded photos and generated videos, including their audio, may be stored and delivered through our object-storage and content-delivery systems so providers can process tasks and your account can display previews, history, and results.

Uploaded photos and generated videos may be delivered through public media URLs. Anyone who obtains one of these URLs may be able to view or download the file without signing in; account access controls do not make the media URL private. These URLs are not time-limited signed links. Avoid sharing them with people who should not access the content, and contact support if you need a file removed. Removing a file from our storage does not remove copies already downloaded or retained by third parties.

AI providers can produce unexpected or inaccurate results. Review generated content before publishing, sharing, or using it commercially. You are responsible for having the necessary rights and permissions for uploaded images, the likenesses of both people, brands, and other protected material. A photograph or generated performance does not establish that a person actually spoke, sang, or endorsed anything.

Payments

Purchases are processed by the payment provider shown during checkout. The provider and available payment methods are identified in the checkout flow.

For purchases completed through Waffo Pancake, Waffo Pancake processes the payment and payment-card information under its own terms and privacy policy. We receive the account and transaction records needed to deliver purchased benefits, maintain billing records, and handle support, refunds, or disputes. We do not store full payment-card numbers on our servers.

Payment providers may collect your name, email address, billing details, payment-method information, transaction data, IP address, device information, and fraud signals. Their processing is governed by their own terms and privacy policies. We receive transaction and account information needed to grant credits or subscription access, maintain billing records, provide support, and handle refunds or disputes.

Service Providers

We may share information with service providers that help us operate Smalltown Boy AI, including:

• Cloud hosting, database, serverless-computing, storage, and content-delivery providers.
• Authentication and account-service providers, including Google if you choose Google sign-in.
• AI generation, content-safety, and media-processing providers.
• Payment, billing, fraud-prevention, and tax providers.
• Email, form, and customer-support providers.
• Analytics, error-monitoring, logging, and security providers.

These providers may process information in countries other than your own. We do not sell personal information or provide submitted content and generated content to advertisers for cross-context behavioral advertising.

Cookies, Analytics, and Local Storage

We use cookies and browser storage for login, security, preferences, checkout, and application state. Blocking necessary storage may prevent these features from working.

Configured analytics services may include Google Analytics, Microsoft Clarity, and PostHog. They may process device and browser information, page visits, interactions, account identifiers, and generation or purchase events. PostHog is configured for event analytics with session recording disabled.

The cookie notice records your preference for up to one year and communicates it to Google Analytics through Google's consent settings when that service is configured. You can manage or clear cookies and local storage through your browser; clearing this website's consent cookie lets you choose again. Necessary account, security, and checkout storage is separate from this preference.

Data Retention

We retain information only as long as reasonably necessary to operate the service, maintain account and generation history, complete transactions, prevent abuse, resolve disputes, comply with legal or tax obligations, and enforce our agreements.

Submitted content, uploaded-image URLs, generated-file URLs, task records, credit records, subscription records, payment records, and support communications may remain in your account or in operational records until they are deleted, anonymized, overwritten, or no longer required. Cached files, backups, provider records, fraud records, and legally required records may remain for additional time.

We do not promise a universal automatic-deletion period because different records serve different operational and legal purposes. You may request deletion or account-related assistance using the contact information below. Some records may be retained when required for security, fraud prevention, payment, tax, legal, or dispute-resolution reasons.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encrypted network transport, access controls, restricted secret handling, and provider-side payment security.

No online service can guarantee perfect security. Keep your account credentials secure and contact us promptly if you believe your account has been accessed without permission.

Your Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing.

To make a request, contact us at the address below and describe the account and request involved. We may need to verify your identity. We may deny or limit a request where the law permits or requires us to retain information.

Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may also complain to the data-protection supervisory authority where you live, work or believe an infringement occurred. Contact support to exercise your applicable rights.

You can also:

• Update available profile or billing details through your account or payment provider.
• Cancel an eligible subscription using the available billing controls or by contacting support.
• Control browser cookies and local storage through browser settings.
• Stop submitting new submitted content or images and stop using the service.

International Processing

Smalltown Boy AI uses online infrastructure and service providers that may process information in the United States and other countries. Privacy laws in those countries may differ from those where you live. Where applicable law requires safeguards for an international transfer, we and our providers are responsible for using the required transfer mechanism.

Children's Privacy

Smalltown Boy AI is intended only for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has submitted personal information, contact us so we can review and take appropriate action.

Third-Party Links

The website may link to external websites, payment pages, forms, or services. Their privacy practices are controlled by their respective operators, not by this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy when the service, providers, or legal requirements change. The date at the top of the page shows the latest revision. If a change is material, we may provide additional notice through the website, account interface, or email.

Contact

For privacy questions or requests:

• Email: support@smalltownboyai.app