Privacy
Privacy Policy
What we process when you make a Tiny Desk AI video, how long we keep it and how to request deletion.
Last updated: October 28, 2026
Data we process
When you create an account, we store your email address and basic profile data. If you use Google, that may include your Google name and profile picture. To render a video, we process the photo you select, the resolution, frame, optional direction and basic technical data such as your IP address. Your credit balance, purchases and renders are linked to the account so we can provide the service and prevent abuse. We do not use this data for advertising profiles.
We may collect aggregated events such as page views, successful uploads, finished renders and error codes. We do not need your phone number or street address to make a video. If you contact support, we receive the information you put in the message.
How your photos are used
Photos are downscaled in your browser and used only to make the render you requested. Renders use ByteDance's Seedance model through APIMart. The photo first passes an automated face and content-safety check, then APIMart sends the material needed for the render. This processing may take place outside your country, including in China. Source files are kept only for a short processing window and are not used to train our models.
Upload only your own photo or one of an adult who agreed. Do not upload sensitive material, identity documents, financial or medical records, photos of minors, or photos of celebrities and public figures.
Tools that run on your device
The photo checker runs entirely in your browser. Photos analyzed with the checker are not sent to us.
Cookies, analytics and local storage
Essential cookies keep you signed in and protect the sign-in flow. Local storage may remember small interface choices, such as a dismissed notice or your analytics choice.
We use Google Analytics 4 to measure aggregated use, such as page views, renders started and directions copied. It sets first-party analytics cookies, does not receive your photos and is not used for advertising. Visitors in the EEA, the UK and Switzerland are measured only after they allow it. Other visitors can opt out with Google's browser add-on or by blocking cookies. We set no advertising cookies.
We also use Microsoft Clarity to understand scrolling, clicks and where a visit ends through heatmaps and session replays. Clarity does not record text entered into forms, and photos, videos and account pages are masked. It sets first-party cookies such as _clck and _clsk; Microsoft may set its own cookies and handles data under the Microsoft Privacy Statement. Visitors in the EEA, the UK and Switzerland are recorded only after they allow analytics.
Retention and deletion
Render records are kept only as long as needed to operate the service, address abuse and meet legal duties. Temporary source media is deleted after processing. Finished videos may expire from temporary storage, so download anything you want to keep. Photos are removed from the AI provider's review library when a render finishes or fails, usually within minutes; if the provider cannot be reached, we retry daily. The provider's temporary upload links expire within 72 hours.
To have render data or support messages deleted, email support@aitinydesk.pro with the approximate time and generation ID. Some records may have to be kept where the law requires.
Providers and security
Our main providers are Vercel for hosting and video storage, Neon for the database, Resend for email, PayPal for payments, and APIMart with ByteDance Seedance for AI video. They process data under their own safeguards and may process it in the United States, China and other countries. We are the seller for PayPal purchases. Your PayPal or card details go directly to PayPal's checkout and do not reach our servers. Access to production systems is restricted.
Your rights
Depending on where you live, you may request access to, correction of, deletion of or restriction of your personal data. Write to support@aitinydesk.pro with the subject “Privacy request”; we will verify the request and reply within the period required by law.