Privacy Policy

1. Scope

This Privacy Policy explains how Joseph Works Limited (“we,” “us,” or “our”) handles information when you use Photo to Video, including the website at photo2video.ai and its browser-based application (collectively, the “Web Service”). This policy does not replace the separate privacy notice presented in the Photo to Video mobile app.

2. Information we collect

Account and session information

We create an anonymous account identifier associated with your browser session so the Web Service can maintain your credits, purchases, and generation history.

Content you provide

We process the photos, videos, audio, reference media, text prompts, and generation settings you submit. This content may include images of people and human faces.

Usage and technical information

We may receive information such as your IP address, browser or device type, operating system, timestamps, requested features, model and generation settings, task status, diagnostic information, and error logs.

Purchase information

We receive purchase status, product, price, currency, credit balance, and related transaction identifiers. RevenueCat manages checkout and purchase records, while Stripe processes your payment information. We do not receive or store your full payment card number.

Communications

If you contact us, we receive the information contained in your message and any contact details you choose to provide.

3. How we use information

We use information to:

• Provide image, video, and audio generation features;
• Authenticate sessions and maintain accounts and credit balances;
• Process purchases, refunds, and transaction support;
• Restore task history and deliver generated results;
• Operate, secure, troubleshoot, and improve the Web Service;
• Prevent fraud, abuse, and violations of our Terms; and
• Comply with legal obligations and enforce our rights.

4. AI processing and face data

Content you submit is transmitted to the AI infrastructure or model provider selected for your request. Providers may include FAL.ai, WaveSpeed AI, and Agnes AI, as well as other providers identified in the Web Service.

Photos may contain faces, but Photo to Video does not use them to identify a person, authenticate a user, or create a biometric identifier. We do not extract faceprints or facial-recognition templates. Images containing faces are processed to produce the generation you request. You are responsible for having the rights and permissions needed to submit images of other people.

5. How we share information

We share information only as needed with:

• AI service providers that process your content and generation settings to create requested results;
• Supabase for authentication, database, storage, task, and account infrastructure;
• RevenueCat and Stripe for checkout, purchase management, transaction processing, fraud prevention, and payment support;
• Infrastructure and support providers that help us operate, secure, and troubleshoot the Web Service; and
• Authorities or other parties when required by law, necessary to protect rights or safety, or involved in a corporate transaction.

Stripe may process transaction, device, and browser information to operate payments, authenticate transactions, prevent fraud, and analyze the performance of its services. See the Stripe Privacy Policy and the RevenueCat Privacy Policy.

We do not use your submitted content for advertising.

6. Storage and retention

Uploaded media and generated results may be temporarily stored by AI providers so they can process and return your request. Provider retention periods differ and are governed by their respective policies.

We retain account information, credit and transaction records, task metadata, prompts, settings, and result URLs for as long as reasonably needed to provide the Web Service, maintain your history, prevent abuse, resolve disputes, and meet legal obligations. Some records may remain in backups or transaction systems for a limited period after a deletion request.

7. Browser storage and cookies

The Web Service uses local browser storage to maintain your anonymous session and authentication tokens, remember preferences, and cache selected input images and generated-result URLs. This information may remain until it is removed by the Web Service or you clear your browser data.

Clearing browser data or changing devices may make an anonymous account, its history, and unused credits unrecoverable. RevenueCat, Stripe, Supabase, and other service providers may also use cookies, browser storage, or similar technologies under their privacy policies to operate, secure, and support checkout.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to withdraw consent or appeal a privacy decision. To make a request, email support@josephworks.app. We may need to verify your request before acting on it.

9. International processing

We and our service providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

The Web Service is intended only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, contact us so we can review and delete it.

12. Changes to this policy

We may update this Privacy Policy to reflect changes to the Web Service, our providers, or applicable law. We will post the updated version on this page and revise the “Last updated” date.

13. Contact us

For privacy questions or requests, contact Joseph Works Limited at support@josephworks.app.