Updated 2026-10-10
Privacy Policy
What Smalltown Boy AI collects when you make a dance video, who processes it, how long we keep it and how to delete it.
This policy explains what personal data Smalltown Boy AI ("we") collects on smalltownboyai.net, why, and what you can do about it. The short version: we collect what we need to make your video and run your account, and you can delete it all.
At a glance
| What | Why | How long |
|---|---|---|
| Name, email, password hash or Google sign-in | Your account | Until you delete the account |
| Photos you upload | Generating your video | Until you delete the video or the account |
| Generated videos | Showing them in History and letting you download them | Until you delete the account |
| Credit balance, purchases and invoices | Billing, tax and fraud prevention | As long as tax law requires |
| IP address, browser, pages visited | Security, abuse prevention and site analytics | Up to 12 months |
| Messages to support and content reports | Answering you and enforcing our rules | Up to 24 months |
Photos and generated videos
Your photos may show faces, which is personal data and, in some places, biometric data. We use them for one purpose only: to render the video you asked for.
- Photos are stored in private cloud storage and sent to our AI video provider for that render. They are never used to train AI models, sold, or shown to other users.
- Finished videos are private to your account and served from unguessable links that are not listed or indexed.
- Upload only photos of people who agreed to it. If someone uploaded your photo without consent, use the report form and we will remove it.
Who processes your data
We share data only with services that help us run Smalltown Boy AI:
- Cloudflare: hosting, database and file storage.
- AI video providers (such as kie.ai or Replicate, running ByteDance Seedance models): rendering videos from your photos.
- Payment partner (Waffo): checkout, subscriptions, invoices and tax as merchant of record. We never see or store your full card details.
- Resend: account and transactional emails.
- Google: optional "Sign in with Google" and, if enabled, Google Analytics.
- Analytics and support tools we enable from time to time, such as Microsoft Clarity, Plausible or Crisp chat, under their own privacy terms.
Some of these providers process data outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or equivalent safeguards.
Legal bases
Where the GDPR or similar law applies, we rely on: performing our contract with you (account, videos, billing); our legitimate interests (security, abuse prevention, product analytics, enforcing the Acceptable Use Policy); your consent (non-essential cookies, optional marketing); and legal obligations (tax records, reports of illegal content).
Your rights
You can access, correct, export or delete your data, object to or restrict some processing, and withdraw consent. Most of this you can do yourself: edit your profile in Settings, or delete your account to remove your photos, videos and profile. For anything else, contact us and we will answer within 30 days. You can also complain to your local data protection authority.
Children
Smalltown Boy AI is not for children under 18 to use on their own, and we do not knowingly collect their data. Photos of minors may only be uploaded with a parent's or guardian's consent.
Security
Data is encrypted in transit, files sit in private storage, and access is limited to what each part of the service needs. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Changes
We will update the date above when this policy changes and email you about material changes.
Contact
Privacy questions or requests: contact us or write to support@smalltownboyai.net.