Privacy Policy

How Enchantress Filter AI collects, uses, and deletes account data, photos, and videos.

Last updated: 2026-10-28

Enchantress Filter AI (“we”, “us”) is the AI video service at https://enchantressfilterai.com, operated by the operator of enchantressfilterai.com. This policy explains what we collect when you use the site, why we need it, who else may process it, and what you can ask us to do with it.

Questions: support@enchantressfilterai.com.

The short version

You can sign in with Google or with an email one-time code. With Google we receive your name, email address, and profile picture. With an email code we receive the address you enter and send a one-time code to it.
You upload one photo so we can generate a short ~10-second, 9:16 vertical Enchantress Filter / moon-witch transformation video. That is the purpose of the upload.
We do not sell your personal data, including your photos or videos, for marketing.
Uploaded photos are processed for generation and then removed from our systems on a short technical cleanup schedule (see §6). Finished videos remain available to download from My videos for a limited time.
Stripe handles payment. We never see or store your full card number.
You can ask us to delete account media and account-linked data by emailing support. Some payment records and provider-side copies have limits — see §7.

1. What we collect

Account details. You can sign in with Google or with an email one-time code. When you sign in with Google, Google shares your name, email address, profile picture, and an account ID with us. We do not ask for access to your Gmail, Drive, contacts, or other Google services beyond the sign-in profile. When you sign in with an email code, we receive the email address you enter and send a one-time code to it. We use these details to create your account and keep you signed in.

Photo you upload. Each video starts from one photo of a person (typically a chest-up face photo). Photos show faces and are personal data about the person pictured. We process the upload to run your generation request; we do not provide a user-facing gallery of past uploads.

Your video requests and results. For each generation we may keep:

the time you started the job and any consent confirmation you gave;
the status of the job (queued, processing, succeeded, failed);
the finished video file when generation succeeds;
error information if a job fails.

Credits and purchases. We keep:

which credit pack you bought, with price, currency, and time;
the order / payment reference Stripe sends us;
your credit balance;
credits spent or restored (for example after a failed or undelivered generation, as recorded by us).

Messages to us. If you contact support, we keep your message and our reply.

Technical data. Like most websites, our servers and hosting platform may log:

IP addresses, browser and device type;
pages requested, timestamps, and errors.

We use these logs to keep the service running, find bugs, and stop abuse.

2. How we use it

We use your information to:

sign you in and keep your account and generation history;
make the Enchantress Filter / moon-witch videos you request and deliver them to your account;
add, spend, and restore credits, and match payments to your account;
send account-related messages (for example “your video is ready” or a reply to support) — we do not send marketing emails unless you opt in;
check uploads and results against our content rules, and investigate misuse or reports;
keep the site secure, fix problems, and meet legal, tax, and accounting duties.

Where a data-protection law requires us to name a legal basis, we rely on:

performing our contract with you (generating your video and managing your purchase);
our legitimate interests in security, preventing abuse, and operating the service;
legal obligations for record keeping;
your consent, where the law requires it for optional cookies or marketing.

3. Your photos and how they reach video providers

Purpose of the upload.
Your photo is used only to generate the video you request (and for related support, security, and enforcement). We do not operate a public photo gallery, and we do not present uploaded photos as a browsable album in your account.

Where files are stored on our side.

Photos are uploaded to our private object storage (Cloudflare R2) used by the Service.
Finished videos are stored so you can download them from My videos while retained under §6.

How providers receive the photo.

To make a video, we send your photo (and our pre-written scene instructions) to our AI video / image generation providers (for example via APIMart or similar).
In practice, that usually means giving the provider a short-lived access link (such as a temporary or signed URL from our private storage) so it can fetch the image for that job — not publishing your photo on a public gallery. Those links are intended to remain reachable only for as long as the job needs them (typically on the order of a few hours).
If a photo is instead uploaded through a provider’s temporary-upload facility, that provider’s temporary storage window applies (commonly on the order of about 72 hours under that provider’s published upload rules).

Who can see them on our side.

Uploads and videos are tied to your account. Other users cannot browse them.
We do not publish them, use them as public samples, or add them to a public gallery without your separate written permission.
Our team looks at a specific upload or video only when needed: support, investigating a report, or checking for abuse.

No sale for marketing; third-party generation.
We do not sell your personal data. We do not license your photos or videos to third parties for advertising. We do not use your photos or videos to train or fine-tune our own AI models. Generation may be performed by third-party providers under their own terms and privacy policies; for example, a provider we use publicly states that it does not use customer data to train AI models and that it processes content as needed to provide the service (including temporary storage). We do not expand that statement beyond what those providers publish, and we cannot control copies that exist only on their systems.

4. Who we share data with

We share only what each service needs to do its job:

Service	What it does for us	What it may receive
Cloudflare (Workers, D1, R2)	Hosts the website, database, and file storage	Data stored by the Service, plus technical request data
Google	Google sign-in	The sign-in request; Google sends us your profile details
Email delivery (Resend or Cloudflare Email)	Sends the email one-time sign-in code	The email address you enter for that code
AI video / image generation providers (e.g. via APIMart)	Generates your video	Your uploaded photo (often via a short-lived link) and our scene instructions; may receive or return the finished clip under their processing rules
Stripe	Checkout, payment, receipts, payment support	Payment details, email, and billing country entered on Stripe’s checkout page

Payments. When you buy credits, you pay on a checkout page run by Stripe. Stripe collects the card and billing information you enter and uses it under the Stripe Privacy Policy. We receive only what we need to match the payment to your account: what you bought, the amount, the status, and an order reference. We do not store full card numbers on our servers. Stripe retains payment records under its own policies and legal duties — we cannot erase Stripe’s ledgers by deleting your site account.

We may also disclose information:

if the law requires it;
to answer a valid legal request;
to protect the safety of a person, including someone shown in an upload;
to prevent fraud;
or as part of a merger or sale of the business, in which case this policy continues to apply.

We do not sell or rent personal information. We do not share it for cross-context advertising.

5. Cookies

We use a small number of essential cookies and similar storage to:

keep you signed in;
protect forms;
remember basic preferences needed for the site to work.

The site may not work properly without essential cookies. This policy does not claim any advertising or analytics cookies. If analytics is added later, this section will be updated before that change takes effect.

6. How long we keep things

Data	How long
Uploaded photos	Processed solely to fulfill your generation request. After the related job completes (or fails), we delete the photo from our active systems or otherwise stop using it for generation within about 7 days, or sooner if you ask us to delete it or close your account. Photos still needed for an in-progress job are kept until that job finishes or fails. This is a technical cleanup schedule — not a promise that photos remain available for you to view or re-download from the Service.
Finished videos	Available to download from My videos for about 30 days from generation, or until you delete the video or close your account — whichever comes first. Download any copies you want to keep.
Account details	While your account is open; deleted or anonymized after closure except records we must keep (see below)
Purchase and credit records	As long as tax and accounting law requires, even after account closure (often via Stripe + our order references)
Support messages and abuse reports	As long as needed to resolve the matter and prevent repeat abuse
Server logs	Rolling window of roughly up to 30 days for security and debugging, then deleted or aggregated (exact hosting default may vary)

Backups. Deleted files may remain in encrypted backups for a limited rollover period (typically on the order of days to a few weeks depending on the host’s backup cycle) before they are overwritten. That is not the same as keeping content available in My videos.

Provider copies. Working copies held only by AI providers follow their retention rules. We cannot directly wipe copies that exist only on their systems; we can stop sending new jobs and, where their tools allow, request deletion. See §7.

7. Your choices and rights — including deletion boundaries

Depending on where you live, you may have the right to:

access the personal data we hold about you, or get a copy of it;
correct it;
delete it;
restrict or object to some uses;
withdraw consent you have given.

You may also have the right to complain to your local data protection authority.

How to make a request. Email support@enchantressfilterai.com from the email address on your account (the Google address, or the address you used for the email code). We may ask you to confirm it is you before we act. We will respond within the time the law allows, and in any case without unreasonable delay.

What we can delete on a deletion / account-closure request

Photos and finished videos stored in our systems for your account (R2 / app database links), subject to backup rollover above;
Account profile fields we control (name and email from Google or email-code sign-in, as stored by us, credit balance display, generation history records we are not legally required to keep);
Support threads we hold, except where needed for fraud or ongoing disputes.

What we cannot fully erase ourselves

Stripe payment and billing records — retained by Stripe under its policies and legal obligations; we can stop using them for the Service but cannot delete Stripe’s merchant records;
Copies held only by AI video / image providers — we request deletion or rely on their retention expiry where available; timing depends on the vendor;
Records we must keep for tax, accounting, chargeback defense, or legal compliance (for example order IDs, amounts, and timestamps) — we will tell you what we keep and why.

California residents. You have the right to know, delete, and correct, and the right not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in California law.

8. If someone uploaded your photo

If you are shown in a video on our service and did not agree to it, email support@enchantressfilterai.com with:

a description of the video;
if possible, the account or link involved.

You do not need an account to report. We will investigate, remove material that breaks our rules, and may suspend the uploader’s account.

9. Children

Enchantress Filter AI is for adults (18+) only. We do not knowingly collect information from anyone under 18. Photos of minors are not allowed. If you believe a child has used the service, or a minor appears in an upload, contact us and we will delete it.

10. International transfers

We and our providers run services in several countries, so your data may be processed outside the country where you live. When we transfer personal data internationally, we rely on the safeguards our providers offer, such as standard contractual clauses, where the law requires them.

11. Security

We protect your data in several ways:

traffic is encrypted with HTTPS;
storage is private (not a public browseable gallery);
access to production systems is restricted;
provider fetch links are intended to be short-lived (see §3).

No online service can promise perfect security. If we learn of a breach that affects you, we will tell you as the law requires.

12. Changes

If we change this policy, we will update the date at the top. If a change matters, we will also let you know on the site or by email before it takes effect.

13. Contact

Operator of enchantressfilterai.com
Website: https://enchantressfilterai.com
Email: support@enchantressfilterai.com