Information we collect
We may collect account profile data, sign-in records, contact details, team and permission information, API key usage records, device and network information, language preferences, page access logs, payment orders, top-up records, and balance transactions.
Generation tasks and assets
When you use generation services, we process prompts, reference images, uploaded files, task parameters, generated results, task status, error information, and download records. This data is used to complete generation, display results, troubleshoot failures, calculate charges, protect security, and respond to support requests.
Payment and order data
Top-up, refund, and invoice-related information may include order ID, payment channel, amount, currency, payment status, webhook records, balance ledger, and necessary accounting information. Complete payment credentials are usually handled by payment service providers, and we do not intentionally collect unnecessary sensitive bank card or payment account data.
Third-party authorization and publishing
If you connect TikTok or another third-party platform, we process account identifiers, authorization status, publishing assets, captions, scheduled time, publishing result, and error information within the authorization scope. You may revoke authorization through the third-party platform or supported platform controls; after revocation, related publishing features may no longer work.
How we use information
We use information to provide and maintain the service, create generation tasks, deliver results, process top-ups and refunds, identify accounts, secure the system, prevent abuse, provide support, improve product experience, comply with legal obligations, and generate necessary operational statistics.
Sharing and subprocessors
We do not sell personal information. To provide the service, we may share relevant data as necessary with model providers, cloud hosting, object storage, payment channels, email or support tools, logging and security services, analytics services, and third-party platforms you choose to connect. We require service providers to process data only for agreed purposes.
Cookies and local storage
We may use cookies, local storage, or similar technologies to maintain sign-in sessions, save language preferences, protect security, measure access, and improve experience. You can restrict some technologies through browser settings, but doing so may affect sign-in, workspace, or payment flows.
Data retention
We retain information for as long as needed to fulfill the purposes described in this policy and to meet legal, accounting, dispute-handling, security-audit, and business-operation requirements. Retention periods for uploaded assets, generated results, and logs may vary by account status, storage policy, and task type.
Data security
We use sign-in authentication, API key management, access controls, access logs, encrypted transmission, secure configuration, and least-privilege access to protect data. However, internet transmission and electronic storage cannot be guaranteed absolutely secure, and users should protect accounts, passwords, keys, and third-party authorizations.
Your rights
Subject to applicable law, you may request access, correction, deletion, export, or restriction of processing of your personal information, and you may revoke certain authorizations or stop using related features. To protect account security, we may need to verify your identity before processing a request.
Children
The service is not intended for minors. If you are below the minimum age required by your local law, do not use the service or submit personal information. If a guardian believes a minor has submitted information to us, please contact us.
Policy updates and contact
We may update this Privacy Policy due to product, legal, or operational changes, and will post the revised update date on this page. For privacy, data processing, authorization revocation, or DPA-related questions, contact support@mediacreator.ai.