Privacy Policy

The data controller for the Service is ToddlerVid. For privacy questions or requests, contact us at support@toddlervid.com.

Depending on how you use the Service, we may process:

• Images you upload (photos, drawings, or reference pictures) and optional text you enter (for example a short scene description). Speech-to-text, if you use it in your browser, runs on your device; we do not receive audio recordings from that feature.
• Payment-related data: checkout and payment processing are handled by Stripe. We receive identifiers and status from Stripe (such as a checkout session ID and payment intent ID), the amount charged, and currency. We do not store your full card number.
• Email address: if you enter an email during Stripe Checkout, we store it on your video order so we can send your download link and receipt, and so you can recover access on another device. Stripe may also use your email for abandoned-cart recovery links as configured in checkout.
• School or nursery enquiries: if you use the form on our schools page, we collect the details you submit (school name, contact name, email, and optional phone, class size, timeframe, and message).
• Technical data: our hosting provider may log IP address, user agent, and request metadata for security and operations. School enquiry submissions may store a one-way hash of your IP address (not the raw IP) to limit abuse.
• Browser storage: we may store your most recent video ID in your browser’s local storage so we can show a “continue” banner. A temporary site-access cookie is set only if we enable password protection during testing.
• Analytics: we use Vercel Analytics to understand aggregate site usage. It is designed to be privacy-friendly and does not use third-party advertising cookies on our pages.

We use the information above to:

• Generate your video and provide download links.
• Process payments, prevent fraud, and handle failed generations (including releasing unpaid card holds or issuing refunds when applicable).
• Send transactional emails (for example video ready, payment failure, or school enquiry confirmations).
• Send at most one abandoned-cart recovery email if you started checkout but did not pay, using data provided by Stripe when that feature is enabled.
• Respond to school and support enquiries.
• Maintain security, debug issues, and improve the Service.

To create your video, uploaded images and related instructions are sent to our AI video provider (Atlas Cloud) for processing. Output files are stored in our cloud infrastructure (Supabase Storage).

We use other processors who handle data on our behalf, including Stripe (payments), Supabase (database and file storage), Resend (email delivery), Vercel (hosting and analytics), and Amazon Web Services (background processing when deployed). Each provider processes data according to their own terms and privacy policies.

We do not sell your personal information. We do not use your uploaded images to train our own models.

Paid videos: download links and stored source/output files are kept for a limited window (currently 48 hours after payment is confirmed), after which they may be deleted. Order records may be retained longer where needed for accounting, fraud prevention, or legal obligations.

Unpaid or abandoned orders: associated uploads and draft records may be deleted or marked abandoned after checkout expires.

School enquiries: kept until we have handled your request and for a reasonable period afterward for business records, unless you ask us to delete them sooner where the law allows.

Server logs: retained for a limited period according to our hosts’ defaults.

Where GDPR or similar laws apply, we rely on: performance of a contract (providing the video you paid for); legitimate interests (security, abuse prevention, improving the Service, and one abandoned-cart email where permitted); and consent where you voluntarily submit a schools enquiry or marketing is ever added in the future (we do not send marketing newsletters today).

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by processors.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability or withdrawal of consent where processing is consent-based.

You may also lodge a complaint with your local data protection authority.

To exercise your rights, email support@toddlervid.com. We may need to verify your request (for example by confirming access to the email used at checkout).

The Service is intended for adults (parents, guardians, teachers, and schools). We do not knowingly collect personal data directly from children under 13 (or the applicable age in your country) to create an account, because we do not offer accounts.

If you upload images of children, you confirm you have the authority and any required consents (for example from parents or your school’s photo policy). Please do not upload images you are not allowed to share.

We use industry-standard measures such as HTTPS, access-controlled storage, and server-side processing. No method of transmission or storage is completely secure.

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Continued use of the Service after changes means you accept the updated policy.