Privacy Policy
Effective
The short version
- We collect what we need to make your videos: your email, what you type, the photos you upload, and what gets generated.
- Your text and photos are sent to AI providers to generate results. We don’t use them to train AI models, and we don’t sell your data.
- Creem handles payments. We never see your full card number.
- You may get up to 2 getting-started emails after signing up. Each has an unsubscribe link.
- You can see, export or delete your data. Just email us.
1. Who is responsible
(“we”, “us”) runs Takefox and is responsible for your personal data. Contact: , .
2. What we collect and why
| Data | Why we use it | How long we keep it |
|---|---|---|
| Email address and plan | To create your account, send sign-in links, account notices and video completion emails | Until you delete your account |
| Sign-in links and session cookie (stored only as one-way hashes) | To keep you signed in securely | Links: 15 minutes. Sessions: 30 days |
| What you type (prompts, shot lists, captions and change requests) | To generate your results and keep your project history | Until you delete your account |
| Photos you upload | To animate your photo or keep products and characters consistent in your results | Project photos: until you delete your account. Reference assets: until you delete the asset or your account |
| Signup source (referring website or campaign tag) | To understand which links bring users to Takefox | Browser storage: 30 days. Signup source on your account: until you delete your account |
| Brand logo, shop name, colors and batch settings | To brand your videos and process groups of product photos | Until you delete your account |
| Music you upload | To add your chosen soundtrack when assembling a Story video | Until you delete your account |
| Generated images and videos, and your project history | To show your results and history | Until you delete your account. Links to generated files may expire sooner |
| Your choices and edits (which previews you pick, what you ask to change) | To learn your style so future results start closer to what you like (“Your style”), and to improve the Service | Until you delete your account. You can reset “Your style” at any time |
| Credits and subscription status, plus your payment provider’s customer, payment and subscription IDs | To provide your plan and credits, verify purchases and process refunds | As long as your account exists, and longer where tax or accounting law requires |
| Public website page views, daily visitor estimates, page paths and referring website or campaign tag | To understand website traffic. The analytics store does not contain raw IP addresses, full browser details or account identifiers | 90 calendar days |
| If you use the Takefox Chrome extension: the address of the Etsy listing you have open, the listing photo you pick (we download that photo from Etsy), and a connection key saved in your browser (we store only a one-way hash) | To make a video from your listing photo and keep the extension signed in. The extension only reads Etsy listing pages, and only when you open its panel | Photos and videos: like other uploads, until you delete your account. Connection key: until you disconnect the extension |
| Technical data such as IP address and request logs | Security, abuse prevention and fixing problems | Up to 30 days |
| Support correspondence | Answering your questions and handling account, privacy and refund requests | While needed to resolve your request and related disputes, or as required by law. You can request deletion |
| Waitlist email (if you joined before launch) | To tell you when we open | Until we launch or you ask us to remove it |
Takefox account signup does not ask for your name, phone number or payment card details. If you make a purchase, Creem may collect billing information on its hosted checkout. We don’t use third-party advertising or analytics trackers.
3. Legal bases (EU and UK users)
- Contract: running your account, generating results and providing your plan.
- Legitimate interests: keeping the Service secure, preventing abuse, learning your style preferences and improving the Service. You can object at any time.
- Consent: the waitlist. You can withdraw it at any time.
- Legal obligation: keeping records that tax and accounting laws require.
4. Who we share data with
We share data only with service providers that help us run the Service, and only what they need:
| Provider | What for | What they receive |
|---|---|---|
| APIPod | Gateway that connects us to AI models | Your prompts, uploaded photos and generated media |
| fal | Backup gateway to the same AI models, used when APIPod is busy or unavailable | Your prompts, uploaded photos and generated media |
| AI model providers reached through APIPod: ByteDance (Seedream, Seedance), Kuaishou (Kling), OpenAI (GPT models) | Generating images and videos, understanding your request, reviewing previews | Your prompts, uploaded photos and generated previews |
| Creem | Our reseller and Merchant of Record for payments, transaction taxes, invoices and subscriptions. Creem also screens prompts for safety. | Your account email, order reference and the billing details you enter at checkout. Creem also receives text prompts and an internal account ID for safety screening. Creem handles this information under its privacy policy. |
| Resend | Sending sign-in links, video notifications and optional getting-started emails, and handling support mail | Your email address; the messages and attachments you send to support |
| Google (Gmail) | Receiving forwarded support mail for our operator | Your support messages, sender details and attachments |
| Our hosting and storage providers | Running our servers and storing files | The data described above, stored on our behalf |
| Google Fonts | Loading the fonts on our pages | Your IP address and browser details when a page loads |
We don’t sell or share your personal data for advertising. We may disclose data if the law requires it, to protect people’s safety, or as part of a business transfer, in which case this policy continues to apply.
If you choose to share a finished video, anyone with its link can watch it and its preview image without signing in. You can stop sharing to block future access, but recipients may keep copies. Sharing is off until you choose it. We store your share links, view counts and invitation code while your account exists. If an invited user makes a qualifying purchase, we record the purchase reference and credit rewards; we do not show you that person's email or payment details.
5. AI training
We don’t use your prompts, photos or results to train AI models. We send them to the AI providers above only to generate your results. How each provider handles that data is also governed by its own terms.
6. International transfers
Our providers may process data outside your country, including in the United States and in Asia (for example Singapore or China). Where the law requires safeguards for these transfers, we take the steps it requires.
7. Cookies and browser storage
We use one essential cookie to keep you signed in. We also remember the referring website or campaign tag in your browser’s local storage for up to 30 days and attach it to your account when you sign up. You can clear it in your browser settings. We don’t use third-party advertising or analytics cookies.
Our own website analytics counts public pages after a short visible visit. On the pancake film page, we also count visits when someone plays the film or clicks a sign-up link. Each of these actions is counted once per visit. It temporarily uses your network address and broad browser type to derive a daily identifier with a randomly generated salt; it does not store the raw address or full browser details. The salt changes each Beijing calendar day and the previous salt is deleted. These daily identifiers are not linked to your account, and we do not use a persistent visitor identifier or analytics tracking cookie.
You can exclude this browser from website analytics. This saves only an exclusion preference in a first-party cookie and local storage for up to one year (or until you clear it); it is not used to identify visitors. We also respect Do Not Track and Global Privacy Control signals. Browser or device changes may require setting the preference again. Remove the exclusion preference.
8. Security
Data is sent over encrypted connections. You can sign in with a password or a one-time email link. Passwords are stored as salted scrypt hashes, never as plain text; sign-in links and session tokens are stored as one-way hashes. Your projects and uploaded photos can only be viewed from your account. No system is perfectly secure; if a breach affects you, we’ll tell you as the law requires.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California law), you can:
- access your data or get a copy in a portable format;
- correct it;
- delete it, including your whole account;
- object to or restrict how we use it, or withdraw consent;
- complain to your data protection authority.
Email from your account’s email address. We’ll reply within 30 days. We won’t treat you differently for using these rights.
10. Children
The Service is for people aged 18 and over. If we learn we hold data about someone younger, we’ll delete it.
11. Changes
We’ll post updates here and change the effective date. For material changes we’ll notify you by email or in the app before they take effect.