Privacy Policy

Effective date: October 30, 2026. Caogen, the operator of ImageToVideoFree at https://imagetovideofree.net, is responsible for the personal data described here. Privacy contact: [email protected].

1. Information we process and why

We process account details such as email, profile name and authentication records to provide sign-in and account support. With Google sign-in we receive the identity information needed to authenticate you, not your Google password.

We process uploaded images, prompts, model settings, task IDs, generation status, results and account or guest identifiers to perform and deliver generation requests. Usage, credit and quota records support accounting and abuse prevention. Technical information such as IP address, browser information and security events may be processed to protect the service. We also process information you send in support, billing or privacy requests.

When payments are enabled, we process order, subscription, billing status and transaction references. Waffo handles payment credentials; our application does not store full card numbers or card security codes.

Where a legal basis is required, we process information to perform the service you request, meet legal obligations, or pursue legitimate interests such as security, fraud prevention and support, subject to your rights. We rely on consent where required for optional processing, and you may withdraw that consent without affecting prior lawful processing.

2. Images, prompts and service providers

Selecting an image creates a browser preview. Submitting a generation sends the image and prompt through our server to Kie.ai and the selected model provider as necessary to produce the result. Before a new generation is submitted, the text prompt is sent to Waffo for content-safety checking. That scanning request contains the prompt, not the uploaded image. A rejected or unavailable check does not consume a free generation or charge credits.

Phone uploads use a temporary transfer session. The public generator processes source images in memory without retaining a local source-image file. Phone-transfer copies are removed on acknowledgement or when the short transfer session expires. Kie.ai and model providers may retain their own copies under their applicable policies; removing our copies does not automatically remove theirs.

Completed videos are transferred to private Cloudflare R2 storage when configured. Downloads pass through our server and require the corresponding account or signed guest session. Existing local results follow the same access controls. Hosting, Cloudflare delivery and security services, Google authentication, Kie.ai/model providers and Waffo receive data necessary for their respective functions. These providers may operate in other countries. Where applicable law requires safeguards for an international transfer, we must use those safeguards.

We do not sell personal information. We do not publish private uploads or results in our gallery or advertising without separate permission. We may disclose necessary information to comply with valid legal requests, address abuse or protect people and legal rights. Access by support or administrators is limited to what is needed for those functions.

3. Storage and deletion

Generated videos are temporary files, not permanent cloud storage. Access and cleanup follow operating retention rules that may differ by account and generation type; we do not guarantee a fixed availability period. Download completed files promptly. Expired files cannot be downloaded again from the service. Official demonstration assets are managed separately.

Task records, prompts, model parameters, credit usage, quota and security records are separate from video files and are not automatically erased when an MP4 expires. We retain personal data only as necessary for delivery, account operations, support, fraud prevention, disputes or applicable legal requirements, then delete or anonymize it. Account-closure requests are handled as described below. Necessary tax, transaction, dispute or security records may need to be retained after closure; retained information is restricted to those purposes. Backup and provider-copy deletion may follow separate cycles, so deletion from live systems is not a promise of immediate deletion from every backup.

4. Cookies and analytics

Necessary cookies support authentication, language preferences, guest result access and abuse prevention. A signed guest cookie can last up to 30 days; clearing it may remove access to guest results.

We use Plausible for page visits and traffic-source statistics, served by our configured analytics service at webplausible.vpsmoon.com. Optional analytics operate subject to applicable consent requirements and available settings. Browser cookie controls may disable essential features such as login. This policy does not claim that every technical request is anonymous or that no IP information is ever processed.

5. Your data rights and account deletion

You may request access to your personal data and a copy, correction of inaccurate information, deletion of data, and closure of your account. Where applicable law provides them, you may also request portability or restriction, object to processing, or withdraw consent. You may complain to your competent data-protection authority.

Use available profile settings to update supported profile fields. For other changes, a data copy, deletion or account closure, email [email protected], preferably from your registered email address. State the requested action and provide relevant task or order IDs if available. Guest users can contact the same address with their task ID; we may need additional information to establish ownership. Do not email a password, API key, full card number or the full contents of browser cookies.

We may request proportionate verification to avoid exposing or deleting another person's data, but will not ask for more information than necessary. We respond without undue delay and ordinarily within one calendar month, or sooner where required by law. If a lawful extension is necessary, we will explain the reason and revised timeframe within the original response period. If we cannot fulfill a request in full because of legal obligations or another lawful exception, we will explain the restriction and available complaint options.

After verified account closure, we remove or anonymize personal information no longer needed and restrict records we must retain. Download wanted results first. If you have an active subscription, include cancellation in your request so future billing can be stopped. Closing an account does not remove a valid outstanding payment obligation or a refund you are entitled to receive.

6. Security and children

We use access controls, protected credentials and encrypted transport where supported to protect personal information. No system can guarantee absolute security. Contact support if you suspect unauthorized access or disclosure.

The service is for adults aged 18 or over and is not intended for children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate steps, including deletion where required.

7. Updates and contact

We publish changes with an updated effective date and provide additional notice of material changes where required. Questions and privacy requests should be addressed to Caogen at [email protected].

Terms of Service · Acceptable Use Policy · Contact