隐私政策 / Privacy Policy

1. 我们处理哪些数据

• Google 登录：请求 openid、email、profile 基本身份权限，接收 Google 账户标识、已验证邮箱及可用的姓名，用于登录和关联现有账户。不请求 Gmail、Drive 或通讯录权限，也不保存 Google 访问令牌供后续访问。
• 邮箱登录：邮箱及密码通过加密连接交由 Supabase 身份服务验证；VideoAnt 应用数据库不保存明文密码。邮箱身份服务目前与 VidVid 共用，VideoAnt 的余额、订单和生成记录单独管理。
• 使用内容：产品链接、公开网页提取的产品信息、提示词、草稿、参考视频、生成参数、任务状态及成片链接。草稿工作区与当前浏览器会话关联，暂不提供跨设备账户同步。
• 交易与运行数据：订单金额、付款状态、积分明细、退款记录，以及维护服务和防滥用所需的请求及错误日志。银行卡资料由 Stripe 收银台直接处理，VideoAnt 不保存完整卡号。

Google 账户数据的使用、保存与删除

我们将 Google 账户标识、已验证邮箱及可用姓名保存在 Cloudflare 应用数据库，用于账户识别、显示资料及关联同邮箱的现有账户。Google 访问令牌仅在服务端登录流程中临时使用，不作后续保存。账户数据只供提供服务所需的系统和获授权维护人员访问，并使用加密传输及服务端会话校验保护。

我们不出售 Google 账户数据，不将其用于广告定向或训练 AI，也不向 WaveSpeed 或 Moonshot/Kimi 提供这些身份资料；这些生成服务处理你提交的产品内容和必要参数。你主动付款时，账户邮箱可能提供给 Stripe 用于收银和订单服务；支持和适用法律要求也可能需要使用或披露必要资料。我们在账户服务所需期间保存身份资料；你可从账户邮箱向 fufeifan@gmail.com 请求删除，核实身份后处理。结算、安全及依法必须保存的记录可能保留；撤销 Google 授权本身不会删除已有记录。

2. 数据用途与服务提供方

我们使用上述信息提供登录、保存工作区、生成视频、结算积分、处理付款、提供支持及排查故障。Cloudflare 提供托管、数据库、存储和运行日志；Supabase 验证邮箱账户；Google 提供身份验证；Stripe 处理付款。提交生成时，提示词及必要生成参数发送至 WaveSpeed；产品链接分析启用 AI 时，提取的产品名称和描述可能发送至 Moonshot/Kimi。仅发送执行相关功能所需的信息。服务提供方可能在你所在地区之外处理数据，其服务亦受各自政策约束。

3. Cookie 与浏览器存储

我们使用必要的账户及工作区 Cookie 保持会话，登录状态 Cookie 有效期目前为 30 天；Google 登录临时状态约 10 分钟后失效。浏览器本地存储用于语言偏好，会话存储用于登录后的返回位置和未完成的生成请求恢复。清除 Cookie 或换用浏览器可能使原工作区无法访问；退出登录会撤销当前账户会话。

4. 保存、安全与内容分享

数据按提供服务、订单核对、安全和适用要求所需保存。我们使用加密传输、会话校验及服务端凭据保护，但无法保证任何系统绝对安全。生成结果可能由外部服务提供链接；持有链接的人可能访问内容，请勿提交机密信息、密码或无权处理的个人信息。导入仅适用于公开产品页面，不应提交需要私人凭据的页面。

5. 你的选择与请求

你可以停止使用服务、退出登录，或通过 Google 账户的第三方连接管理撤销 VideoAnt 授权；撤销授权不会自动删除已经保存的 VideoAnt 数据。如需访问、更正、导出或删除账户数据，请从账户邮箱联系支持。我们会核实身份并按适用要求处理；结算、安全及依法必须保存的记录可能仍需保留。当前尚无自助删除入口。

6. 政策更新

功能和服务提供方变化时，我们会更新本页并标明日期。涉及数据用途的重大变化会提供相应说明。有关付款、积分与生成规则，请同时阅读服务条款。

Privacy Policy

1. Data we process

• Google sign-in: we request only openid, email and profile for your Google identifier, verified email and available name, to sign you in and link an existing account. We do not request Gmail, Drive or contacts access, or retain Google access tokens for later access.
• Email sign-in: email and password are sent over an encrypted connection to Supabase for authentication. The VideoAnt application database does not store plaintext passwords. Email authentication currently shares a provider with VidVid; VideoAnt balances, orders and generation records are managed separately.
• Content: product URLs, facts extracted from public pages, prompts, drafts, reference videos, generation settings, job status and output links. Draft workspaces are associated with the current browser session and do not yet sync across devices through your account.
• Transactions and operation: order amounts, payment status, credit entries, refund records, and request/error logs needed to operate and protect the service. Stripe checkout handles card details directly; VideoAnt does not store full card numbers.

Use, storage and deletion of Google account data

Your Google identifier, verified email and available name are stored in our Cloudflare application database to identify your account, display your profile and link an existing account with the same email. The Google access token is used temporarily in the server-side sign-in flow and is not retained for later use. Access to account data is limited to systems and authorized maintainers that need it to provide the service, protected by encrypted transport and server-side session validation.

We do not sell Google account data, use it for ad targeting or AI training, or send these identity details to WaveSpeed or Moonshot/Kimi. Those generation services process your submitted product content and required settings. When you choose to pay, your account email may be provided to Stripe for checkout and order services; support or applicable legal requirements may also require use or disclosure of necessary data. We retain identity data for as long as needed for your account service. Request deletion from your account email at fufeifan@gmail.com; we process it after verifying ownership. Settlement, security and legally required records may remain. Revoking Google access does not itself delete existing records.

2. Purposes and providers

We use this data for authentication, workspaces, video generation, credit accounting, payments, support and troubleshooting. Cloudflare provides hosting, databases, storage and operational logs; Supabase authenticates email accounts; Google provides sign-in; Stripe handles payments. Generating a video sends prompts and required generation settings to WaveSpeed. When AI product analysis is enabled, extracted product names and descriptions may be sent to Moonshot/Kimi. Information sent is limited to what the relevant feature needs. Providers may process data outside your region, subject also to their own policies.

3. Cookies and browser storage

Necessary account and workspace cookies maintain sessions; session cookies currently last 30 days. Temporary Google sign-in state expires after about 10 minutes. Local storage remembers language; session storage keeps the post-login destination and recovery information for unfinished generation requests. Clearing cookies or changing browsers may prevent access to an earlier workspace. Signing out revokes the current account session.

4. Retention, security and sharing

We retain data as needed to provide the service, reconcile orders, protect security and meet applicable requirements. We use encrypted transport, session validation and server-side credential protection; no system can guarantee absolute security. Outputs may be served through external links accessible to anyone holding the link. Do not submit confidential information, passwords or personal data you are not authorized to process. URL import is intended for public product pages, not pages requiring private credentials.

5. Your choices and requests

You can stop using the service, sign out, or revoke VideoAnt access through your Google account connections. Revocation does not automatically delete previously saved VideoAnt data. To request access, correction, export or deletion, email support from your account email. We verify ownership and handle requests under applicable requirements; settlement, security or legally required records may need to remain. Self-service account deletion is not yet available.

6. Updates

We update this page and its date as features or providers change and explain material changes to data use. See our Terms of Service for payments, credits and generation rules.