Privacy notice

Last updated: October 28, 2026

AI desk Loby operates Tiny Desk AI at tiny-deskai.video. This notice explains how we handle information when you create an account, purchase video generations or use the photo-to-video service. For privacy questions or requests, contact support@tiny-deskai.video.

Temporary service notice: The support inbox is being set up and cannot receive messages yet.

Information we handle

• Account information: your name, email address, sign-in method and account or session details. If you use Google sign-in, Google shares the profile information needed to create or access your account.
• Photos and results: the portrait you upload, the generated video, and task details such as status and timestamps.
• Orders and video balance: the pack, price, currency, payment status and generation transactions. Stripe processes payment details; the site does not receive your full card number.
• Technical information: IP address, browser and device details, cookies, and security or error information used to operate and protect the service.
• Optional site analytics: with your permission, our site measures visits and checkout steps using first-party analytics and Google Analytics. First-party events use random browser-session and checkout-flow identifiers, a broad referral channel, the pricing entry point and pack choice. If you purchase, the flow identifier may be associated with the order to measure conversion. We do not intentionally include photos, email, card details or page query strings in analytics events. Google also receives technical information, including network and device data, when analytics is enabled.
• Support messages: information you provide when you contact us.

How we use and share information

We use this information to provide accounts, process payments and video tasks, deliver your results, return video generations for confirmed failures, respond to requests, prevent abuse, maintain security and meet legal obligations. Depending on the applicable law, our legal bases may include providing a requested service, legitimate interests in security and operation, legal obligations, or consent where required.

Our service providers process information for these purposes. Cloudflare hosts the site and stores account records and private media. Kie.ai receives the input needed to generate a video through our private gateway. Stripe processes payments. Google may process information when you choose Google sign-in or allow Google Analytics, and Resend may deliver account emails when email sign-in is enabled. These providers handle information under their own terms and privacy notices.

Your photo can show another person. Upload it only if you have permission to use it and every adult shown has agreed to appear in an AI-generated video. The service uses a fixed video as a visual reference; new results are delivered without an audio track.

How long media is kept

Uploaded photos are scheduled for automatic deletion 14 days after upload. Generated videos are scheduled for automatic deletion 14 days after they become available. Download any video you want to keep before it expires. If a cleanup is temporarily unsuccessful, the service retries it. An unfinished task whose photo expires is held for review rather than automatically submitted again.

These periods apply to media stored by this service and its gateway. An AI provider may process or retain its own copies under its policies; the site's deletion schedule does not control those copies. Account, order, generation balance, task and provider-receipt records may be kept as needed to provide the service, resolve disputes, prevent fraud and meet accounting or legal obligations.

Security, cookies and international processing

Uploaded photos and generated videos are stored privately; account downloads require the owner's signed-in session. We use session cookies and similar technologies for sign-in, checkout and security. Service providers may also use technologies needed for their services. No method of transmission or storage is completely secure.

Optional first-party analytics and Google Analytics use browser storage and are enabled only if you choose to allow them. Our first-party events and order-flow identifiers are scheduled for deletion after 90 days, independently of accounting records. Google Analytics data is retained under the settings and policies of that service. Change analytics choice.

Our service providers may process information in countries other than your own. Contact us for information about the transfers and safeguards that apply to your information.

Your choices and rights

You may request access, correction or deletion of personal information, or ask about other rights that apply where you live, by emailing support@tiny-deskai.video. We may need to verify your identity before acting. Some records may be retained where permitted or required by law, including records needed for payments, disputes or fraud prevention. Where applicable, you may also complain to your data-protection authority.

We may update this notice when the service or its data practices change. The date above identifies the latest version.