Privacy Policy

Who this policy covers

This policy explains how zzo.ai ("we", "us") handles personal data when you use our website, API and MCP integration. zzo.ai is run by an independent developer, who is the data controller for the personal data described here. You can reach us at hi@zzo.ai.

Data we collect

Account data. Your email address and name. If you sign in with Google or Apple, we receive your name and email address from that provider (and, from Google, your profile picture). If you sign up with email and password, we store a hash of your password, never the password itself.

Payment data. Payments are handled by our payment providers: Waffo Pancake, which sells the credit packs to you as merchant of record and handles sales tax, and PayPal. We do not see or store your card number. We keep a record of each order: the pack bought, the amount, the currency, the date, its status and the payment reference the provider gives us.

Checkout acknowledgement. Before payment you confirm that you understand credits are non-refundable once used. When you do, we record the time, your IP address, your browser's user agent and the version of the text you accepted, together with the order. We keep this as evidence in case of a payment dispute or chargeback.

What you create. The prompts you write, the images you upload and the videos and images generated for you, along with the settings, model and credits used for each generation. Generated results are stored on Cloudflare R2 so you can view and download them later.

Credits and usage. Your credit balance, purchases, credits spent and refunded, and your API keys (we store only a hash of each key).

Content checks. When a prompt, uploaded image or result is blocked by our content checks, we record it with your account: the blocked prompt or file, the reason and the time. See the Acceptable Use Policy. If you confirm consent before uploading an image, we record that you did.

Support. Messages you send us through support tickets or email.

Technical and analytics data. IP address, browser and device type, pages visited, referring site and similar information collected through server logs. To count visits we use Plausible Analytics, which we host ourselves: it sets no cookies, does not store IP addresses and does not identify or track you across sites; it records pages viewed, the referring site, and your browser, device type and country. We also record product events, such as starting a generation or opening checkout, to run and improve the Service and to investigate abuse.

How we use it

• To provide the Service: create your account, run generations, store your results and keep your balance.
• To process payments and refunds and to handle payment disputes.
• To answer support requests and send messages about your account or purchases.
• To prevent fraud and abuse and to enforce our Terms of Service.
• To keep the Service safe and working: an authorized administrator may look at your prompts, uploaded images and results, including ones you removed from your history, to check them against our Acceptable Use Policy, handle reports and appeals, and investigate failed or stuck generations. We look only at what a check or investigation needs.
• To understand how the Service is used and improve it.
• To meet legal obligations.

Legal bases (EU and UK). Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (providing the Service, processing payments and refunds, and messages about your account or purchases); our legitimate interests in keeping the Service secure, preventing fraud and abuse, enforcing our terms and understanding how the Service is used (we weigh these against your rights, and you can object to them); and compliance with legal obligations (tax and accounting records, and responding to lawful requests). We do not use cookies or tracking that require your consent.

Who we share it with

• Model providers. To generate a video or image, your prompt and any uploaded images are sent to the provider running the model, currently fal.ai or EvoLink, which pass them to the model's developer. For the background remover, the photo is sent to Replicate. Their handling of that data is governed by their own terms and privacy policies.
• Image tools. The image tools (resize, compress, convert, crop) work entirely in your browser. The images you open in them are not uploaded to us or to anyone else; only the usual page-view analytics described in this policy are collected, and they never include the image.
• Content moderation. Your prompts, uploaded images and generated results are sent to OpenAI's moderation API to check them against our Acceptable Use Policy, and prompts may also be checked by Waffo's prompt-safety service. Generated videos are passed through fal.ai to take a still frame for this check.
• Waffo Pancake and PayPal, to process payments, refunds and sales tax.
• Cloudflare, which hosts the Service and stores generated results (R2).
• Our email provider, to send account emails.
• Authorities or other parties where the law requires it, or to protect the rights and safety of users and others.

We do not sell your personal data.

Cookies and analytics

We use only the cookies needed to keep you signed in, remember your language and keep the site secure. Our analytics (Plausible, self-hosted) uses no cookies. You can block cookies in your browser; the site may not work properly without the necessary ones.

How long we keep data

• Account data, generations and results: while your account is open. You can remove individual generations from your history at any time; a removed generation is hidden from you and kept until your account is deleted. When you delete your account, we delete them within 30 days, except the records listed below.
• Order records and checkout acknowledgements: 7 years after the purchase, for accounting, tax and payment dispute purposes, even after an account is deleted.
• Server logs: up to 30 days. Analytics are kept only as aggregate statistics that do not identify you.
• Records of blocked content: 2 years from the block, even after an account is deleted, unless we need them longer for a legal claim or the law requires it.

Your rights and deletion requests

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict some uses, and to withdraw consent. To delete your account or make any other request, email hi@zzo.ai from the address on your account, or open a support ticket at /settings/tickets. We will reply within the time the law requires. You may also complain to your local data protection authority.

International transfers

Our providers process data in countries other than yours, mainly the United States. Where the GDPR or UK GDPR applies, these transfers rely on the European Commission's Standard Contractual Clauses (with the UK Addendum) or another lawful transfer mechanism offered by the provider.

Children

The Service is not for anyone under 18. We do not knowingly collect data from children; if you think a child has given us data, contact us and we will delete it.

Changes

We will post any update here with a new date, and tell you about significant changes by email or on the site.

Contact

hi@zzo.ai