Privacy Policy

1. Scope

This policy describes the data used to provide Cheba Man AI at chebamanai.online: email accounts, photo-to-video generation, one-time video packs and customer support.

2. Data We Handle

• Accounts: your name, email address, password hash, verification and password-reset records, sessions and account settings.
• Generation: uploaded photos, reference media, generation settings, provider task identifiers, status and generated videos. Photos may identify you or another person; upload them only with the necessary permission for AI processing.
• Purchases: order identifiers, pack size, amount, currency, payment status and allowance usage. Payment details are collected by the payment provider; we do not store full card numbers.
• Support: messages and attachments you choose to provide, and the order or task details needed to investigate an issue.
• Technical records: information needed for hosting, request handling, security and abuse prevention, such as IP addresses, request times and errors. Essential cookies maintain sessions; browser storage holds preferences and unfinished drafts.

3. Purposes and Providers

We use this information to authenticate accounts, process purchases, manage video allowances, generate and deliver videos, recover interrupted tasks, prevent abuse and respond to support requests.

The current service uses:

• Cloudflare Workers, D1 and R2 for hosting, database records and media storage.
• OpenRouter and the Seedance model provider to process submitted photos, reference audio and generation instructions. These services receive the inputs needed to generate your video; access to private reference media may be supplied through temporary signed links.
• Waffo and its payment partners for checkout, payment verification and refunds. They receive the order and customer details required for payment.
• Resend to deliver email verification, password-reset messages and support notifications, including the recipient address and relevant message content. Support notifications go to the site's operator.

Processing may occur outside your country. Each provider's own practices also apply. See OpenRouter's privacy policy, Cloudflare's privacy policy and Resend's privacy policy, and the payment privacy information displayed at checkout. Model-provider retention and training practices can differ; we do not promise that every provider has zero retention or prohibits training.

We do not sell your photos or account information. Uploaded photos and private generated videos are not automatically published in the website's public showcase.

4. Storage and Retention

Account, task, order and support records are retained while needed to operate the service, resolve disputes and meet applicable obligations. Uploaded and generated files remain in service storage until removed under an applicable retention process or a verified deletion request; the current service does not promise automatic deletion after a fixed number of days. Download completed videos for your own long-term copy.

Expiring access links limit access to a file; their expiry does not delete the stored file. Third-party providers may retain their own records under their policies. We review deletion requests and explain any records that must be retained for security, payment disputes or legal obligations.

5. Security and Your Choices

We use access controls, HTTPS for the production site and encrypted storage of provider credentials. No system can guarantee absolute security. Keep your password and private download links confidential.

Use the website's customer-support option or support tickets to request access, correction, export or deletion of your data, or to raise a privacy concern. We may verify account ownership before acting. Your rights depend on applicable law; nothing here limits mandatory privacy rights.

6. Updates

We update the date above when this policy changes and provide further notice where required for a material change.