Privacy Policy

Data controller

The data controller for Window Peeper AI is Gao Heyang, Individual / Sole Trader, based in the People's Republic of China. Privacy questions and verified data requests may be sent to support@windowpeeper.info.

Information handled by the service

Depending on the enabled features, Window Peeper AI may handle account identifiers and email addresses; authentication and session data; uploaded images, reference material and prompts; generated videos and related task records; credit balances and credit movements; order and transaction metadata; support communications; IP addresses; and ordinary server and security logs.

Why this information is processed

This information is used to authenticate users, operate generation requests, apply configured content checks, reserve or return credits, process purchases, store and deliver private results, prevent abuse, troubleshoot failures, respond to support requests and comply with legal obligations.

Third-party processing

Uploaded content and generation parameters may be transmitted to Alibaba Cloud Model Studio to create requested output and to Replicate and Waffo for configured content checks. These providers process data under their own terms and privacy practices; Window Peeper AI does not claim zero retention or exclusion from model improvement unless the applicable provider has expressly confirmed it.

Purchases are processed through Waffo. Waffo handles payment credentials through its hosted checkout; Window Peeper AI keeps only the order and transaction metadata needed for fulfillment, support, accounting, fraud prevention and disputes.

Private storage and access

Uploaded files and generated results are kept in access-controlled Supabase Storage. Access to private results is authorized by the application and may use time-limited signed links. Public reference and demonstration videos are hosted separately on Cloudflare R2 and contain no customer uploads.

Retention and deletion

Temporary moderation copies are removed after the moderation check and by scheduled cleanup if a temporary deletion is interrupted. Generation inputs are removed after a job succeeds or definitively fails; unpaid One-Time checkout uploads expire after 24 hours. Generated videos remain privately available until they are deleted for operational, legal or support reasons, or after a verified deletion request; no fixed automatic deletion deadline is promised.

Account, order, transaction, task and security records are retained for service operation, fraud prevention, accounting, legal compliance and dispute resolution for as long as reasonably necessary or legally required.

You may contact support@windowpeeper.info to request access to or deletion of personal data. Requests may require identity verification and remain subject to applicable legal, security, accounting and dispute-retention obligations. This contact process is not a claim that an automated self-service deletion workflow exists.

Cookies and local access

The service uses cookies or equivalent storage needed for authentication, secure anonymous One-Time order access, sessions and fraud prevention. Clearing browser data may remove access to anonymous order history.

Your requests and contact

Subject to applicable law, you may have rights to request access, correction or deletion of personal data, or to object to or restrict certain processing. Send privacy questions and verified requests to support@windowpeeper.info.

One-time browser delivery

For an enabled One-Time Pass, the anonymous order is associated with a secure browser session. After the payment provider confirms the order, that session starts generation and authorizes the private preview and download. New One-Time orders do not require a site delivery email.

The same browser can reopen its Guest orders while the secure session remains available. If browser data is cleared, the order ID alone cannot restore access; support may require payment-receipt verification. Download and save completed videos promptly.