Privacy Policy

Summary

• You upload photos so we can put the people in them into a Tiny Desk video. We use them for that and nothing else.
• Photos are deleted after 7 days. Videos are deleted after 30 days. Shared links stop working when the video is deleted.
• Your videos are private unless you choose to share one.
• We never sell your data, and we don't use your photos or videos to train AI models.
• To make the video, your photos are sent to the AI providers listed below, some of which are outside your country.

AI Tiny Desk ("we", "us") runs the website ai-tiny-desk.com. This policy explains what personal data we handle when you use it. Questions or requests: support@ai-tiny-desk.com.

What we collect

Account details. Your email address and name. If you sign in with Google, we also receive your Google profile picture. We store a hashed password if you sign up with email and password.

Photos you upload. The photos you add to the generator. Before upload, your browser shrinks them to at most 2048 pixels.

What we make from them. For each photo, an AI-generated character sheet (front, side and back views of the person), and the finished video. When you share a video, we also store a preview image made from three frames of it.

Purchases. Which credit pack you bought, the amount, and when. Card details go straight to Stripe; we never see or store your card number.

Usage and device data. Your IP address and browser type for each sign-in session. The page that referred you and any campaign tags in the link (for example utm_source) when you sign up, and the country your connection comes from. Steps you take in the product, such as choosing a template, pressing Generate or opening the payment window. We use these to keep accounts secure, prevent abuse and see which parts of the site work.

Cookies. A sign-in cookie that keeps you logged in, and a cookie that remembers your language. If we turn on Google Analytics or Plausible, they may set their own cookies, and where the law requires consent we ask first. Google sign-in may set a cookie that remembers whether you closed its sign-in prompt.

How we use it

• To create your videos and show them to you, and to email you when a video is ready or couldn't be made.
• To run your account: sign-in, credit balance, purchase history, and automatic credit refunds when a video fails.
• To take payments and prevent fraud.
• To answer support requests and handle reports of misuse.
• To understand and improve the product, using aggregated statistics.

Our legal bases, where the GDPR or similar laws apply: performing our contract with you (making the videos you ask for and running your account), our legitimate interests (security, abuse prevention, improving the service), your consent (optional analytics cookies), and legal obligations (tax and accounting records).

Who processes your data

We use these providers to run the service. They receive only what they need for their part.

• Cloudflare: hosting, database, file storage and email delivery. Receives: everything stored by the service.
• Kie AI (kie.ai): creates the character sheets. Receives: your photos.
• SeeAPI (seeapi.com): backup for character sheets. Receives: your photos, only when Kie AI fails.
• Metaso (metaso.cn), running the MiniMax video model: creates the video. Receives: the character sheets and the template clip.
• Stripe: payments. Receives: your email, purchase and payment details.
• Google: Google sign-in, and Google Analytics if enabled. Receives: sign-in data; anonymous usage statistics.
• Plausible (if enabled): privacy-friendly site statistics. Receives: anonymous usage statistics.

Some of these providers process data outside your country. Metaso is in mainland China, and other providers may process data in the United States or elsewhere. Each provider handles the data under its own terms and safeguards. The AI providers receive your images only to return a result to us. By uploading photos, you agree to this processing.

We may also disclose data when the law requires it, to protect people from harm, or as part of a sale or merger of the business. We do not sell personal data or share it for advertising.

How long we keep it

• Uploaded photos and character sheets: 7 days, then deleted automatically.
• Finished videos and their share preview images: 30 days, then deleted automatically.
• Share links: until you turn sharing off, or the video is deleted.
• "Send to phone" links: expire after 24 hours.
• Account details, credits and purchase history: while your account exists. Purchase records are kept as long as tax and accounting laws require.

Sharing your videos

Videos are private by default. If you press Create share link, anyone with the link can watch that video. Share pages are marked so search engines don't index them. You can turn sharing off at any time, and the link stops working right away. Once someone has downloaded or re-posted a video, we can't remove those copies.

People in your photos

Only upload photos of yourself, or of adults who have agreed to be in your video. Don't upload photos of children or of public figures. If you appear in a video made without your consent, email support@ai-tiny-desk.com with the link and we'll take it down.

Your rights

Depending on where you live, you can ask us to access, correct, delete or export your personal data. You can also object to some processing, or withdraw consent you gave. To make a request, email support@ai-tiny-desk.com from the address on your account. We'll respond within 30 days. You can also complain to your local data protection authority.

Children

AI Tiny Desk is for adults 18 and older. We don't knowingly collect data from anyone under 18. If you think a child has used the service or appears in an uploaded photo, contact us and we'll delete it.

Security

Data travels over HTTPS, and access to our systems is restricted. No service is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll tell you on the site or by email before they take effect.

Contact

support@ai-tiny-desk.com

AI Tiny Desk is an independent fan project. It isn't affiliated with, endorsed by or sponsored by NPR or NPR Music's Tiny Desk Concerts.