Privacy Policy

How Flow AI collects, uses, and protects your data when generating AI videos and images.

May 2, 2026

Effective Date / Last Updated

Effective Date: May 2, 2026 Last Updated: May 2, 2026

This Privacy Policy describes how Flow AI ("we," "us," or "our") handles personal data when you use our AI video and image generation service at https://ai-flow.video (the "Service"). By signing up for or using Flow AI, you accept the practices set out below.

Flow AI is an online AI video and image generator powered by Google's Veo technology. It offers multiple models — Veo 3.1, Veo 3.1 Fast, Seedance 2, and Seedance 2 Fast for video, plus Nano Banana Pro, Nano Banana 2, and GPT Image 2 for images. You generate from a text prompt, a single image, or reference images (text-to-video, image-to-video, and reference-to-video), at output resolutions up to 4K. The Service runs in the browser with no install and no GPU, and is billed with credits.

Independence Notice. Flow AI is an independent platform and is not affiliated with, endorsed by, or sponsored by Google LLC. Google, Google Labs, Flow, and Veo are trademarks of their respective owners.

2. Information We Collect

2.1 Account Information

Creating an account creates these records:

Your email address
A display name (optional)
Profile data returned from third-party identity providers (Google, GitHub) when you sign in via OAuth

2.2 Content You Provide (Generation Inputs & Outputs)

Flow AI generates from the inputs you supply:

Text prompts describing the video or image you want to create
Image and video inputs (JPEG / PNG / WebP images; MP4 / MOV videos) used as a source or reference for image-to-video and reference-to-video

To deliver the result we also process:

The video or image we produce for you, plus task metadata (model, mode, resolution, duration, credit cost, timestamps)
Your generation history if you choose features that store past results

We do not read or retain camera EXIF metadata from the files you upload. Uploaded inputs are kept on object storage for seven (7) days only and are then automatically deleted (see §7).

You can request deletion of your account and remaining data at any time (see §8).

2.3 Usage, Device, and Technical Data

Some technical details are captured automatically:

Which model and mode you use (text-to-video, image-to-video, reference-to-video, image generation), resolution choice, and other interaction events
Page views, navigation paths, and request timestamps
IP address, user-agent string, basic device/browser identifiers
Inferred coarse location (city / region) derived from IP
Referrer URL, if your browser sends one

2.4 Payment and Subscription Information

Paid plans run through PayPal (our primary payment processor) and may also use Creem. Flow AI itself does not see or store full card numbers, bank credentials, or PayPal account passwords. The payment processors may collect:

Card / bank details, billing address, and tax-related fields they require
Transaction IDs, subscription status, and refund history

We retain only what we need to manage your access — for example, your subscription ID, plan tier, current period dates, and renewal status.

Their policies apply directly to that data:

PayPal: https://www.paypal.com/us/legalhub/privacy-full
Creem: https://www.creem.io/privacy

3. How We Use Information

The data we hold supports the following purposes:

Running the Service and delivering generated videos and images to you
Routing your prompts and image and video inputs to our AI inference provider so the model can produce an output
Tracking subscription status, credit balance, and usage caps
Sending account-related email (verification codes, receipts, important notices)
Responding to support requests and feature feedback
Diagnosing failures, improving reliability, and monitoring performance
Detecting and preventing fraud, abuse, and security incidents
Meeting legal and regulatory obligations

4. Cookies and Analytics

4.1 Cookies

We rely on cookies and similar technologies for:

Authentication and session management (essential)
Locale / theme / consent preferences
Aggregate usage analytics

Most browsers let you block or clear cookies; doing so may break sign-in or other essential features.

4.2 Analytics Tools

We use analytics tools to understand how the Service is used and where it can be improved. Those tools may set their own cookies and collect aggregated event data.

Disclosure happens only in the cases below:

Service Providers / Processors: companies we hire to host, secure, store, analyze, authenticate, charge, or run AI inference on our behalf
Legal & Safety: when compelled by law, when defending our terms, or when needed to protect rights, property, or safety
Business Transfers: in the event of a merger, acquisition, financing event, or asset sale, with appropriate confidentiality safeguards

We do not sell personal information.

6. Third-Party Services (Key Providers)

The Service is built on top of these providers, each governed by its own privacy policy:

fal.ai — runs the AI models that produce your video or image; receives the temporary URLs of your image and video inputs so it can fetch and process them
Cloudflare — hosting (Workers), object storage (R2), CDN, and DDoS / bot protection
Neon — managed PostgreSQL database for accounts, subscriptions, and tasks
PayPal and Creem — subscription billing and payment processing
Resend — transactional email (verification codes, receipts)
Better Auth + Google / GitHub OAuth — sign-in and identity
Google Analytics 4 and Microsoft Clarity — aggregate usage analytics

7. Data Retention

We keep different categories of data for different periods:

Uploaded image and video inputs: automatically deleted from storage seven (7) days after upload — our AI provider only needs short-lived URLs, and we do not need the source files after that
Generated video and image outputs: automatically deleted from storage thirty (30) days after they are created — download anything you want to keep before then; you may also delete a generation from your history at any time
Account profile and settings: retained while your account is active
Billing records and invoices: retained as long as required for tax, accounting, and dispute handling
Security logs and rate-limit counters: retained for a short, bounded period for fraud prevention and troubleshooting

After you delete your account, we hard-delete personally identifiable data within thirty (30) days, except where retention is required by law (e.g., financial records).

8. Your Rights and Choices

Depending on where you live, you may exercise the following rights with respect to your personal data:

Access a copy of your data
Correct inaccurate or outdated information
Delete your data, subject to legal or contractual retention
Receive an export in a portable format (where applicable)
Object to or restrict certain processing
Withdraw consent where processing is based on consent

To make a request, email support@ai-flow.video from the address on your account so we can verify it.

9. International Data Transfers

Flow AI and its subprocessors operate globally; your data may be processed in the United States, the European Union, Asia-Pacific, and other regions. By using the Service from outside any one of those regions you accept that international transfers may occur, with the safeguards required by applicable law.