Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how AI Zombie ("we," "us," or "our") handles personal information when you visit aizombie.cc, use our video generation service, purchase Credits, or contact us. It should be read alongside our Terms of Service and Acceptable Use Policy.

1. Data Controller

AI Zombie is the service responsible for the handling of personal information described in this policy. For questions about that handling or to make a privacy request, contact support@aizombie.cc.

2. Information We Collect

Account and authentication information

We process your email address, name if provided, profile image if provided, account identifiers, verification state, and authentication and session data. If you use a password, authentication records include a password hash. Session records can include an IP address and browser user-agent information.

When you use Google Sign-In, we receive the Google account identifier, email address, verification status, name, and profile picture made available for authentication, together with the authentication tokens needed to manage that connection.

Uploaded images and generation settings

We process the reference images you upload, including personal photos, other people's photos, pet photos, or other images, and your chosen settings such as mode, resolution, and aspect ratio. Only upload images you have the right to use and transmit for these purposes.

Uploaded images may be transmitted to third-party service providers for automated content moderation and AI video generation. In the current workflow, images are uploaded through KIE's file infrastructure and the resulting image references are sent to SeeAPI for NSFW safety screening before generation submission.

Generated content and service records

We record generation identifiers, provider task references, settings, status, timestamps, and completion or error information. Generated video records may include temporary provider media URLs. Videos saved for account use are stored in our media storage with file identifiers, type, size, ownership, and storage metadata.

Credits and payment records

We maintain Credits balances, reservations, and immutable transaction/history records for purchases, generation charges, and Credits adjustments. These records can include related order or generation references and timestamps.

Payment records include account/customer, product, order, payment, and checkout identifiers; amount, currency, and tax information where supplied; payment status; fulfillment status; and payment event processing records. AI Zombie does not directly store complete payment card numbers. Card payment information is handled through Waffo Pancake.

Support and operational information

We process information you send to support, such as your email, message, and related order or generation details. The Service also records operational events and errors used to investigate authentication, payment, and generation issues. Do not send passwords or complete card details in a support message.

3. How We Use Information

Where applicable data protection law requires a legal basis, we use information for the following purposes:

• Providing the Service and performing our agreement: creating and authenticating accounts, processing images and settings, generating and delivering videos, maintaining your video records, administering Credits, processing purchases, and providing requested support.
• Legitimate interests in operating and protecting the Service: detecting abuse, screening uploaded images, investigating failures and unauthorized activity, maintaining reliable records, resolving disputes, and sending necessary service notices, subject to your rights under applicable law.
• Legal obligations: responding to lawful requests and maintaining records needed for applicable accounting, tax, payment, and consumer protection obligations.
• Consent where required: processing optional communications or other optional activities when applicable law requires your permission. You may withdraw that consent as described below.

AI Zombie does not use your uploaded images to train AI models. Processing by third-party providers is described in section 5; we do not make a blanket promise about their independent retention or data practices.

4. Cookies and Tracking

We use authentication and session cookies to keep you signed in and support account security. Necessary browser storage also helps recover an active generation and maintain interface preferences. Browser settings let you block or clear cookies and storage, but doing so may interrupt sign-in or generation recovery. See our Cookie Policy for details.

The current website configuration does not enable analytics services or advertising pixels. We do not currently use marketing or advertising cookies. If we enable optional tracking in the future, we will update this policy and provide any choices or consent mechanism required by law.

5. Sharing and Service Providers

We do not sell your personal information. We share information needed to provide the Service with these providers:

• Cloudflare: application hosting and infrastructure, including Workers, D1 database storage, KV service state, R2 media storage, and service email delivery. Relevant information includes account and service records, stored generated media, and email delivery data.
• Google: authentication when you choose Google Sign-In, including the exchange of account profile and authentication information needed to sign in.
• SeeAPI: automated NSFW moderation of uploaded images. It receives image references so it can inspect the images. This screening is not age verification or a claim that minors can be detected.
• KIE / KIE API: reference image upload and temporary file handling, AI video generation infrastructure, and delivery of generated media. It receives reference images and generation instructions and settings. The current underlying video model is ByteDance Seedance 2 Fast.
• Waffo Pancake: Merchant of Record, Checkout, payment processing, and payment/order handling. We exchange the account and order information needed to fulfill a Credits purchase. Payment card details are handled through Waffo Pancake, rather than stored as complete card numbers by AI Zombie.

We may also disclose information when required by law or a valid legal process, when necessary to address fraud or protect rights and safety, or at your direction. If a business transfer affects your information, we will provide notice where required and require the recipient to respect applicable protections.

Our current safety checks comprise SeeAPI screening of input images and enabled KIE/model-side safety measures. They can make mistakes. We do not represent these checks as comprehensive review of every output or human review of every upload.

6. Security

We use secure transport for provider requests, hashed passwords for password authentication, and account-based access checks for account records and privately stored videos. Temporary upload retry information is encrypted and has a limited validity period.

No online service can guarantee absolute security. Keep your credentials private and report suspected unauthorized access to support@aizombie.cc. If a security incident requires notification, we will notify affected people and authorities as required by applicable law.

7. Data Retention

The following describes the current service behavior. There is not yet a single fixed deletion schedule covering all categories of information.

• Account and session information: account records are retained while the account is maintained. Sessions have a 7-day validity period and can be renewed during use; cached session information has a 1-hour validity period. These validity periods do not promise deletion of every related record at the same time. Self-service account deletion is currently disabled; request deletion through support.
• Uploaded reference images: AI Zombie processes the upload and sends it to KIE's file infrastructure. The encrypted upload retry receipt is valid for 1 hour. Receipt expiration does not delete the provider's copy of an image. We have not established a guaranteed deletion deadline for images held by KIE or processed by SeeAPI; provider retention needs to be considered separately.
• Generated videos and task records: videos saved for an account and their generation records currently have no scheduled automatic expiration. Temporary provider media links may expire independently. Contact support about deletion; the Service is not a guaranteed permanent archive.
• Payment and Credits records: payment, order, reservation, and immutable Credits history records currently have no automatic deletion schedule. We may need to retain relevant records for accounting, tax, disputes, fraud prevention, and legal obligations. A deletion or closure request does not mean all financial records can be physically deleted immediately.
• Support and operational records: we have not established a fixed retention period for every support message or operational log. We assess deletion requests against the need to resolve the matter, protect the Service, and comply with applicable law. Provider-controlled logs may have their own retention practices.

You can ask support@aizombie.cc about a particular record or request deletion where applicable. We will explain any relevant limits on deletion rather than promise immediate erasure of every copy.

8. User Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Understand how your information is processed and obtain access or a copy.
• Correct inaccurate or incomplete information.
• Request deletion where applicable.
• Restrict processing or object to processing where applicable.
• Receive portable information in a usable, machine-readable format where applicable.
• Withdraw consent where processing relies on consent, without affecting the lawfulness of earlier processing.
• Complain to the relevant data protection authority if you believe your rights have not been respected.

Send requests to support@aizombie.cc. We may need proportionate information to verify that a request concerns your account. We will respond within the period required by applicable law and explain any lawful exception. These requests are handled through support; this policy does not promise an automated account deletion or data export feature.

9. Communications

We use your email for account verification, password recovery, support, and necessary notices about security, payments, or changes to the Service. These are service communications.

You may contact support@aizombie.cc to object to optional promotional communications or withdraw any relevant consent. An opt-out from promotional messages does not stop necessary account, security, or transaction messages. We will respect marketing choices and consent requirements under applicable law.

10. International Processing

Our infrastructure and service providers may process information in countries other than your own, whose privacy laws may differ. This includes processing needed for authentication, image safety screening, generation, storage, and payment.

Cross-border processing is subject to applicable data protection requirements. Contact support@aizombie.cc for information about the arrangements applicable to your data. We do not represent that a particular transfer mechanism or contractual safeguard covers every provider unless it has been verified for that processing.

11. Children's and Age Policy

You must be at least 18 years old to create an account or use the Service. The Service is not directed to people under 18, and we do not knowingly seek their account information. If you believe a person under 18 has provided information to us, contact support@aizombie.cc so we can investigate and take appropriate action, including deletion where required.

This eligibility rule does not mean that we perform age verification. NSFW screening is not age verification or minor detection. Uploaded images must also comply with the child safety rules in our Acceptable Use Policy.

12. Third-party Services

Google authentication, Waffo Pancake Checkout, and our infrastructure, moderation, and generation providers may process information under their own terms and privacy policies. Their independent practices can differ from ours. Review the relevant provider policies when using those services. This policy describes AI Zombie's processing and does not replace a provider's notices.

13. Policy Changes

We will update the date on this page when this policy changes. For material changes, we will provide notice through the website or your account email before the changes take effect, unless law or an urgent security need requires a different approach. Where a change requires consent, we will obtain it as required by law.

14. Contact

For all privacy requests, questions, or complaints, contact AI Zombie at support@aizombie.cc. The same address handles account support, payment questions, and safety reports.