AI HALLOWEEN · LAST UPDATED OCTOBER 10, 2026
Privacy policy
1. Controller
Chen Wenjian, an individual operator in China, operates AI Halloween at aihalloween.app and is responsible for its handling of personal information. Privacy and support contact: support@aihalloween.app. This policy is dated October 10, 2026.
2. Data collected
We process account email and profile details, uploaded photos, selected effects, generated media, task identifiers, service logs, session identifiers, consent records, order references and credit transactions. We do not receive or store full payment card numbers or security codes. We do not run face recognition to establish your identity.
3. Purposes and legal bases
Where applicable, account access, generation, private storage, delivery and purchase fulfillment are processed to perform our contract with you. Security, fraud prevention, abuse investigation and moderation serve our legitimate interests in protecting users and the service. Tax, accounting and lawful disclosures are processed for legal obligations. Optional analytics and any optional promotional use rely on consent where required. You may withdraw consent without affecting earlier lawful processing.
Launch notification waitlist
If you submit the waitlist form, we store your email, selected tool or package, consent version and submission date to send launch notifications. Joining does not create an account, purchase credits or submit your photos. No email is sent on form submission. Request removal or withdraw notification consent by contacting support@aihalloween.app. Waitlist emails are not sent to analytics.
4. Cookies and analytics
Essential session and security cookies support login, task ownership and abuse prevention. Optional analytics are controlled by your cookie choices; we do not send photo contents, generation instructions or payment identifiers to analytics. Google Analytics loads only after you select Allow analytics. Reject analytics keeps it off. Use Cookie settings on any public page to withdraw consent; this disables collection and removes our Google Analytics cookies. Your choice is stored locally in your browser. Analytics covers public page visits without query strings or fragments, excludes account and private task pages, and never receives uploads, prompts or payment details. Google processes usage data under its privacy policy (policies.google.com/privacy). Advertising personalization, Google signals and enhanced measurement are disabled.
5. Processors and disclosures
We do not sell your personal information. Neon supports authentication and the database; Cloudflare R2 stores private media and Turnstile provides anti-abuse checks; Vercel hosts the application. APIMart processes photos and instructions using GPT Image 2, and fal.ai processes prepared images and instructions using PixVerse V6. Waffo Pancake handles payments as Merchant of Record and prompt safety screening. SeeAPI processes generated images and videos for NSFW and special-care safety checks; video screening uses sampled frames. Moderation task records temporarily retain provider media URLs to resume the same assessment, while audit reports exclude media URLs. We may disclose limited records where legally required or needed to protect rights and investigate abuse.
6. Security
We use access-controlled private storage, signed access, server-side credentials and ownership checks. No system is completely secure. We investigate incidents and notify affected people and authorities as required by applicable law, including the 72-hour supervisory-notification requirement where GDPR applies.
7. Retention
Input access expires after 24 hours and output access after 7 days; scheduled storage lifecycle and cleanup remove expired media. Safety holds do not extend user download rights. Moderation decision records, without raw prompts or media, are retained for at least 12 months for review and abuse handling. Account data is retained while the account exists; deletion requests are processed subject to necessary security, dispute and legal retention. Financial records follow applicable tax, accounting and payment-provider obligations; they are not erased with media. Provider copies are governed by their retention terms, and deleting our copy does not guarantee immediate deletion by every processor.
8. Your rights
Depending on applicable law, you may request access, correction, erasure, restriction, portability, object to processing, withdraw consent, or request human review of an automated restriction. Email support@aihalloween.app. We verify identity and normally respond within 30 calendar days, or notify you of any lawful extension. You may complain to your local data protection authority.
9. Communications
We use account contact details for necessary service, billing, security and support communications. Promotional emails require an appropriate consent basis and an unsubscribe option. We do not enroll you in marketing merely because you generate an image.
10. International processing
Our hosting, AI, safety and payment providers may process information outside your country. Where required, transfers must use lawful safeguards such as contractual protections and applicable standard contractual clauses. Contact support@aihalloween.app for information about the arrangements applicable to your data.
11. Children and photos
The service is for adult account holders. We do not knowingly permit minors to register or purchase. Adults may submit a child’s photo only with parental or guardian authority for family-friendly effects. Report unauthorized collection or unsafe use immediately so we can restrict access and investigate.
12. Private content and training
User creations are private and are not automatically added to a public gallery. We do not train our own models on your private inputs or outputs or publish them as marketing examples without separate permission. Third-party services have their own applicable processing terms; we do not make a blanket promise about every provider’s retention or training practices.
13. Changes and third-party services
External websites are governed by their own policies. Material changes to this policy will be announced on the website or through account contact channels normally at least 15 days before taking effect, except where urgent legal or security changes are necessary.
14. Contact
Privacy requests, account deletion, safety concerns and general support: support@aihalloween.app. Do not send passwords or payment card details.
Privacy · Terms · Refunds · Acceptable use · Contact