Privacy Policy

How OOUUH AI handles your photos, AI videos, account data and payments, including storage periods and privacy requests.

Last updated: 2026-10-09

What this policy covers

This policy explains how OOUUH AI at oouuhai.com handles information when you make an Oouuh Trend video, an original song video or a Hotel Lobby AI rap video. For privacy questions or requests, email [email protected].

Information needed to run the service

  • Account details: your email, name, profile image if provided, sign-in method and authentication records. Google supplies account details when you choose Google sign-in. Email-account passwords are stored as protected hashes.
  • Creation inputs and results: uploaded photos, the selected mode, stage or environment, video settings, optional topics, generated media, previews and task status. A topic may contain names or other personal details you enter. Oouuh Trend videos use two portraits and a fixed reference performance; Original Song mode and Hotel Lobby AI also accept one photo of both people.
  • Purchases and credits: orders, payment amounts and status, subscription references, credit usage and refunds. Where checkout is available, Waffo or the provider identified at checkout processes payment details; we do not store complete card numbers or security codes.
  • Visit and device information: IP address, approximate country, browser and session details, language, and referral or campaign information used for site operation, security and offer eligibility.
  • Support messages: what you send by ticket or email, attachments, and relevant account, order or video details.

Only upload photos you have permission to use. Avoid unnecessary sensitive information in photos, topics and support messages.

Why we process it

We process information to authenticate accounts, create and deliver requested videos, keep work available in your account, manage purchases and credits, investigate failures and respond to requests. We also use relevant connection records to prevent fraud and abuse.

Where a legal basis is required, this includes performing the service you request, meeting legal obligations, protecting the legitimate interests of users and the service, and obtaining consent for optional advertising measurement. You can withdraw that measurement consent without losing access to creation or checkout.

We do not sell personal information, place your uploads or generated works in a public gallery, or use your inputs to train our own AI models. External AI providers have their own data practices; our statement does not make a training or deletion promise on their behalf.

For content reports and appeals, we may review the information you submit and the associated uploads, results and account records needed to investigate safety or rights concerns. These records follow the retention and disclosure rules in this policy.

Providers that receive information

We share information needed for the relevant function:

  • Google sign-in: account authentication when you select it. Google Privacy Policy.
  • Payment providers: Waffo, or Stripe when used for the original transaction, processes payments, subscriptions and refunds. The provider is identified at checkout. Waffo Privacy Policy · Stripe Privacy Policy.
  • Cloudflare: R2 media storage and delivery; connection information may also be processed when Cloudflare provides site delivery or security. Cloudflare Privacy Policy.
  • AI generation providers: photos, instructions based on your mode and settings, any topic you supply, reference material where required, and resulting media to produce the requested video.
  • Hosting and email providers: information needed to run the site and, when enabled, send account messages such as verification or password-reset emails.

Providers may process information outside your country. The storage periods below cover systems we control, not a guarantee of simultaneous deletion by every provider. We may also disclose necessary records to comply with legal obligations or respond to fraud, security incidents and legal claims.

When enabled, Cloudflare Turnstile checks the browser during email registration and sign-in to reduce automated abuse. Cloudflare processes browser and network signals for this security check. We send the verification token to Cloudflare for server-side validation; we do not send your email password, photos, or creative content to Turnstile. Passing this check does not grant a free preview.

Cookies and local creation drafts

Sign-in and preference cookies support normal use. Referral or campaign cookies can last up to 30 days; a random browser identifier used for abuse prevention can last up to 365 days. Browser storage also remembers limited interface state, including whether an offer has been shown.

An unfinished creation is saved locally for the current browser tab: text and settings in sessionStorage, photos in IndexedDB. It can be restored after refreshing, navigating, signing in or returning from checkout. Homepage and Hotel Lobby drafts are separate. Accepting a generation clears its local draft and photos immediately; it does not wait for the result. A draft expires 24 hours after its last edit, with expired data cleared when the creator is next accessed.

Clearing site storage may remove a draft, preferences or your sign-in session. It does not cancel an accepted task or erase account records. Local drafts and photos already uploaded to our servers follow separate retention rules.

Photo and video storage periods

  • Uploaded photos: 24 hours after confirmed task success or failure. Unsubmitted uploads expire 24 hours after upload. Inputs needed for processing or an unresolved result remain until that state is resolved.
  • Free results awaiting unlock: 7 days after generation completes, including the full result and its preview.
  • Paid results: 30 days after generation completes.
  • Unlocked previews: 30 days from unlocking.

Download before the expiry displayed on your video page. After expiry, website playback, download and unlocking stop, and media is scheduled for deletion. We do not offer permanent video storage.

Deleting a work from My videos hides it from your account; it does not immediately delete stored files or revoke a media link already obtained. The retention schedule still applies. Account, payment, credit and support records are kept separately as needed for service operation, unresolved requests, fraud prevention and legal recordkeeping. Removing a photo does not remove the associated transaction history.

Access and security

Your account pages show your own works. A locked free result exposes its preview, not its full-video link. Media uses direct links on our media domain: someone who obtains a link may be able to open it. Share links only with intended recipients.

We use protected authentication, account access controls and HTTPS for public delivery. These measures reduce risk but cannot guarantee absolute security. Tell us if you suspect unauthorized access.

Optional advertising measurement

When enabled, Google Ads and configured Google Analytics measurement load only after you accept. Events may include a transaction identifier, amount, currency, page information and advertising click identifiers. We do not add your photos, video topic, name or email to purchase measurement events, and advertising personalization is disabled.

Use “Advertising privacy choices” in the footer, when measurement is enabled, to reject or change your choice. The choice is saved for up to 180 days. Rejecting measurement does not affect checkout, creation or offer eligibility. First-party referral information used to administer an offer is separate from optional measurement. See Google's Privacy Policy.

Your choices and requests

Depending on the law that applies, you may request access, correction, a copy, deletion, restriction or objection to processing. Email [email protected], including for account deletion. We may verify account ownership, and retain records required by law or unresolved transactions. You may also contact your local data-protection authority.

Obtain the required permission before uploading another person's photo, including parent or guardian consent for a child's photo. A person who cannot legally use the service independently must involve a parent or guardian where required.

Changes and related policies

We will update the date above and explain material changes on the website. Read the Terms of Service for usage rules and the Refund Policy for purchases and failed generations. Privacy contact: [email protected].