Privacy Policy

This Privacy Policy explains how Genjutsu AI ("Genjutsu AI", "we", "us" or "our") collects, uses, shares and protects personal information when you use genjutsu.app and our Genjutsu AI video tools, share links and related services (together, the "Service"), or when you contact us.

Key points

• We collect what we need to run the Service: your account details, the prompts and media you submit, the results you generate, your purchases and basic technical data.
• We do not sell your personal information, and we do not use your prompts, uploads or results to train AI models.
• To generate results, your inputs are sent to the AI infrastructure and model providers that run the model you choose.
• Videos you create before your first purchase are public and appear in Community on our home page. After you buy any credit pack, new videos are private by default and you can make any of your videos public or private.
• You can access, correct, export or delete your data. Contact support@genjutsu.app for any privacy request.

1. Information we collect

1.1 Information you give us

• Account information. When you sign in with Google, we receive your name, email address, profile photo and a Google account identifier. We never receive your Google password.
• Your content. The prompts, images and videos you upload ("Inputs"), the videos generated for you ("Outputs"), the settings you choose and your creation history. Uploaded media may show people's faces or include their voices.
• Purchases and credits. Your purchase history, invoices and credit transactions. Card and other payment details are collected and processed by our payment processor (currently Dodo Payments). We receive only limited information from it, such as a customer identifier, the payment status and the amount.
• Communications. Messages you send to us, such as support emails and copyright or removal requests, including any contact details and information you include in them.
• Confirmations. For example, a record that you agreed to our upload terms before uploading media.

1.2 Information collected automatically

• Device and usage data. IP address, browser and device type, operating system, language, pages viewed, features used, referring pages, dates and times, and error and security logs. We may infer your approximate location (country or city) from your IP address.
• Cookies and similar technologies. We use cookies and local storage to keep you signed in, remember your preferences, protect the Service and understand how it is used. See our Cookie Policy.
• Campaign attribution. If you arrive through an ad or a link with campaign parameters, we store the source, campaign, referring site, landing page and click identifiers (such as gclid, fbclid or ttclid) in a first-party cookie for up to 30 days. If you sign up during that time, we save this information with your account so that we can measure which channels work.
• Analytics and advertising tools. We use Plausible and Umami, which do not use cookies, to measure traffic. We use Microsoft Clarity to understand how people use our pages: it records interactions such as clicks, scrolling and mouse movements, which we can view as heatmaps and session replays, and it sets cookies. We use Google Ads conversion tracking to measure which ads lead to sign-ups and purchases, which also sets cookies. When we run campaigns on other platforms, we may also use advertising pixels from partners such as Meta and TikTok. See our Cookie Policy for details.

1.3 Faces and biometric information

Some tools, such as motion transfer, work with photos and videos of people. We process this media only to generate the result you request. We do not create or keep biometric identifiers (such as faceprints) to identify or recognize anyone, and we do not use your media for identification. Only upload media of people who have agreed to its use.

2. How we use your information

We use personal information to:

• Provide the Service: create and manage your account, generate your videos, store your history, run Community and share links, and provide customer support;
• Process payments and credits: charge for credit packs, track and refund credits, and prevent payment fraud;
• Keep the Service safe: detect and prevent abuse, fraud, security incidents and content that breaks our Terms of Service, including through automated content checks;
• Improve the Service: understand how features are used, fix problems and develop new features, mainly using aggregated or de-identified data;
• Communicate with you: send service messages, such as sign-in, billing and security notices, and, if you have not opted out, product updates and offers. You can unsubscribe from marketing emails at any time with the link in each email;
• Measure marketing: understand which campaigns and channels bring people to Genjutsu AI; and
• Meet legal obligations: comply with law, respond to lawful requests, enforce our terms and protect our rights and the rights and safety of others.

We do not train AI models on your content. We do not use your Inputs or Outputs to train or fine-tune AI models, and we do not use your content in our marketing without your permission.

3. How we share your information

We do not sell your personal information. We share it only as described below:

• AI infrastructure and model providers. To generate your results, your Inputs and settings are sent to the infrastructure partner that runs our video model and, through it, to the developer of the model. They process them to produce your Outputs under their own terms and policies.
• Content safety provider. To keep adult and other prohibited content off the Service, your prompts, uploads and results are checked by automated moderation models run by WaveSpeed AI. See our Acceptable Use Policy.
• Service providers. Companies that help us run the Service, such as Cloudflare (hosting, content delivery, database and file storage), Google (sign-in), Dodo Payments (payments), Resend (email delivery), our analytics providers (Plausible, Umami and Microsoft Clarity), and tools we use for customer support and internal team notifications. They may use your information only to provide services to us.
• Advertising partners. Google, and Meta or TikTok when we run campaigns with them, may receive information collected by their tags and pixels, such as device data and the pages or actions related to a campaign, to measure ad performance.
• Public creations. Public creations appear in Community on our home page and on their share page. Anyone can view them, together with the source video, reference images and prompt used to make them, and use them as a starting point for their own videos. Share pages also show your display name and profile picture.
• Legal and safety reasons. Authorities, courts or other parties, when we believe it is required by law or necessary to protect the rights, property or safety of Genjutsu AI, our users or others, including to prevent fraud and abuse.
• Business transfers. A buyer or successor, if Genjutsu AI is involved in a merger, acquisition, financing, reorganization or sale of assets, subject to this Privacy Policy.
• With your consent. In any other case where you ask us to or agree to it.

4. How long we keep information

We keep personal information for as long as we need it for the purposes described in this policy:

• Account information is kept while your account is open.
• Your content is kept until you delete it or delete your account.
• Purchase and credit records are kept as long as needed for accounting, tax and legal purposes. Our payment processor keeps its own records as required by law.
• Technical logs are kept for limited periods for security and troubleshooting.
• Campaign attribution cookies expire after 30 days.

When you delete your account, we delete your account information, credits and creation history from our systems without undue delay. Copies in backups are removed as the backups are overwritten on their regular cycle. We may keep limited information when the law requires it, to resolve disputes or to prevent fraud and abuse, for example to stop banned users from signing up again. We may keep aggregated or de-identified information that cannot identify you.

5. Your choices and rights

• Access and correct. You can see and update your profile in Settings, and see your creations and credit history in your account.
• Delete. You can delete individual creations yourself. To delete your whole account, email us at support@genjutsu.app from the email address on your account.
• Content that shows you. If a public creation shows you, or someone you represent, without consent, use the Report link on it in Community or on its share page, or email support@genjutsu.app with a link to it. We will remove it.
• Export and other requests. Email support@genjutsu.app to request a copy of your data or to make any other privacy request. We may need to verify your identity before acting on it.
• Marketing emails. Use the unsubscribe link in any marketing email. We will still send you important service messages.
• Cookies and tracking. You can block or delete cookies in your browser settings, and use browser or device tools to limit tracking by third-party pixels. Some features may not work without essential cookies.

Depending on where you live, you may have additional rights, described in Sections 10 and 11. We will not treat you differently for exercising your privacy rights.

6. Security

We use technical and organizational measures to protect personal information, including encryption in transit (HTTPS), access controls and limiting staff access to what is needed for their work. No online service is completely secure, so we cannot guarantee absolute security. If we become aware of a security breach that affects your personal information, we will notify you and the authorities where the law requires it.

7. International transfers

Genjutsu AI and our service providers operate in several countries, including the United States, so your information may be processed outside the country where you live, where data protection laws may be different. When the law requires it, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

8. Children

The Service is only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact support@genjutsu.app and we will delete it.

9. Third-party sites and services

The Service links to sites and services we do not control, such as Google sign-in and our payment processor's checkout pages. Their privacy practices are governed by their own policies, so please review them.

10. Users in the EEA, UK and Switzerland

Genjutsu AI is the controller of your personal information. We process it on the following legal bases:

• Performance of a contract: to provide the Service, generate your content and process payments;
• Legitimate interests: to keep the Service secure, prevent fraud and abuse, improve the Service and measure our marketing, where these interests are not overridden by your rights;
• Legal obligation: to keep records and respond to lawful requests; and
• Consent: where we ask for it, for example for certain cookies or marketing. You can withdraw consent at any time.

You have the right to access, correct, delete or receive a portable copy of your personal information, to restrict or object to its processing, and to withdraw your consent. To exercise these rights, contact support@genjutsu.app. We usually respond within one month. You also have the right to lodge a complaint with your local data protection authority.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Automated safety checks may block a generation, and you can contact us if you believe one was blocked by mistake.

11. Users in the United States

Residents of California and other U.S. states with comprehensive privacy laws may have the right to know what personal information we collect and how we use and disclose it, and to access, correct, delete and receive a copy of it. In the past 12 months we have collected the categories of information described in Section 1, for the purposes described in Section 2, and disclosed them to the recipients described in Section 3.

We do not sell personal information for money. When we use advertising pixels to measure campaigns, this may be considered "sharing" for cross-context behavioral advertising under some state laws. To opt out, email support@genjutsu.app, or block third-party cookies in your browser. We do not knowingly sell or share the personal information of anyone under 18.

You or your authorized agent can submit a request to support@genjutsu.app. We will verify your request and respond within 45 days, or tell you if we need more time as the law allows. If we deny your request, you may appeal by replying to our response.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If a change is material, we will notify you by email or in the Service before it takes effect. The date at the top of this page shows when it was last updated.

13. Contact us

For questions or privacy requests, email support@genjutsu.app.