Privacy Policy | Zombie Trend AI Video

Effective October 17, 2026.

Zombie Trend AI Video operates zombietrendai.video (the “Service,” “we,” or “us”). This Privacy Policy explains how the Service handles personal data. Questions and privacy requests can be sent to support@zombietrendai.video.

Scope

This Policy covers the website, user accounts, photo uploads, AI generation, private creations, credits, purchases, and support. A provider’s own website or checkout may be governed by that provider’s separate policy.

The Service is for adults. Do not upload a photo of anyone under 18 or a photo of an adult who did not agree to this use.

Data we collect

Account and authentication data

We process your name, email address, email-verification status, profile image if provided, account identifiers, and account timestamps. For password accounts, the authentication system stores a protected password representation rather than a readable password. When you choose Google sign-in, we request only the openid, email, and profile scopes and receive the related Google account identifier and profile data. Authentication records may include provider tokens needed to maintain the connection.

Session and security records may include a session token, IP address, browser or device user-agent information, login time, and expiration time.

Photos, creations, and reviews

We process the two reference photos you upload; their file type, size, and dimensions; the story, quality, and aspect-ratio choices; prompts and prompt versions used by the system; provider task identifiers and status; generated video; failure details; and review decisions.

Accepted JPEG, PNG, and WebP uploads are decoded and rewritten or filtered to remove embedded metadata that is not needed for generation. The image pixels and visible background remain. Photos contain facial appearance and may reveal other personal details. We use them to create the requested video and do not use them to authenticate your identity or identify people outside that request.

Authorized reviewers may view reference photos and generated videos when needed for input or output review, safety, troubleshooting, or an appeal.

Credits and payments

We process your credit balance and lots, expiration dates, generation charges and reversals, pack selected, purchase price and currency, order status, and internal and provider order, payment, and refund identifiers. Waffo collects payment-method and billing details on its checkout. We do not directly receive or store full card numbers.

Support and operational data

If you contact support, we process your email address, message, attachments, and the information needed to investigate the request. We also process request timestamps, security events, rate-limit data, errors, provider events, and similar diagnostics needed to operate and protect the Service.

Browser storage and analytics

We use essential cookies and local browser storage for sign-in, security, interface preferences, and reliable checkout attempts. See the Cookie Policy.

We do not use advertising or targeting cookies. Non-essential analytics must not be enabled without updating this Policy and the Cookie Policy and, where required, obtaining your consent.

How we use data

We use personal data to:

create and secure accounts and authenticate users;
receive, validate, review, and store photos;
submit the requested generation to an AI provider and retrieve the result;
deliver private videos and let you manage creations;
maintain credit balances, purchases, refunds, and transaction evidence;
provide support and respond to rights or content complaints;
detect fraud, abuse, unauthorized access, and violations of our Terms;
debug failures, monitor reliability, and improve the Service; and
comply with legal obligations and establish, exercise, or defend legal claims.

Depending on where you live, these activities may rely on performance of our agreement with you, our legitimate interests in operating and securing the Service, your consent, and compliance with legal obligations. You may withdraw consent where consent is the basis, but that does not affect earlier lawful processing and may prevent the relevant feature from working.

Who receives data

We disclose only the data reasonably needed for the relevant service:

Cloudflare hosts the application, database, and private object storage, delivers network and security services, and routes mail sent to our support address. See Cloudflare’s Privacy Policy.
Google provides optional account sign-in. Gmail receives mail forwarded to the support address. See Google’s Privacy Policy.
KIE receives reference images, generation instructions, technical parameters, and provider task identifiers to generate videos. KIE may keep provider media and task logs under its own retention rules. See KIE’s Privacy Policy and API retention documentation.
Waffo operates checkout and payment processing and may act as merchant of record. It processes billing, payment, tax, fraud, receipt, refund, and chargeback information under Waffo’s Privacy Policy.
professional advisers, auditors, authorities, or counterparties may receive information when reasonably necessary for compliance, safety, a transaction, or the establishment or defense of legal claims.

We do not sell personal data. We do not publish your photos or creations or use them in marketing without separate permission.

International processing

Our providers may process data in countries other than the one where you live. Those countries may have different privacy laws. Where applicable law requires it, we use an approved transfer mechanism or other appropriate safeguards.

Retention and deletion

The Service currently applies these media periods:

a photo uploaded but not attached to a creation expires after up to 24 hours;
when a creation is made, its input photos expire up to 7 days after the creation was created; this period does not restart when generation finishes;
a generated video expires 30 days after it is stored; and
deleting a creation immediately revokes access to its media and shortens the deletion deadline to no more than 24 hours, unless an input is still used by another undeleted creation.

An hourly cleanup process removes expired media objects after their deadline. Timing may vary if infrastructure is temporarily unavailable. Keep your own copy of a result you want to retain.

Deleting a creation from the Service does not force immediate deletion from an AI provider. KIE’s published API documentation currently states that generated media is retained for 14 days and task logs for two months; provider terms may change, so consult its current documentation.

Account, task, review, security, support, and transaction records are retained for as long as reasonably necessary to operate the account, resolve disputes, prevent abuse, meet accounting or legal obligations, and enforce agreements. We do not promise a single fixed period for these records. Payment records may need to remain after account closure where required for tax, accounting, chargebacks, fraud prevention, or other legal purposes.

You may delete individual creations in the Service. To request account or personal-data deletion, email support from your account address. We may need to verify the request. We will delete or de-identify data that is no longer needed, subject to legal, security, fraud-prevention, and financial-record exceptions.

Security

We use access controls, private media routes, expiring media permissions, encrypted transport, file validation, provider allowlists, signed callbacks, and other technical and organizational measures intended to protect data. No online service can guarantee absolute security. Use a unique password and tell us promptly if you suspect unauthorized access.

Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to complain to a privacy authority. These rights may be subject to exceptions.

You can update certain profile information and delete individual creations in the Service. For other requests, email support@zombietrendai.video from the address associated with your account and describe the request. We may ask for information needed to verify identity and protect the account.

Children

The Service is not intended for anyone under 18, and photos of minors are not allowed. If you believe a minor’s data was submitted, contact us so we can investigate and remove it where appropriate.

Changes to this Policy

We may update this Policy to reflect product, provider, or legal changes. We will post the revised date and provide additional notice where required.

The English version is the controlling version to the extent permitted by law. Translations are provided for convenience.