隐私政策

1. 适用范围

本政策适用于我们提供的云端画布及其配置的生成服务。你自行部署的本机副本、其他运营方的部署及第三方平台，应同时查看相应运营方或平台的说明。我们仅在提供服务、履行约定、取得所需同意或其他法律允许的范围内处理数据。

2. 我们处理的数据

• 创作素材：你上传的参考图片、首尾帧、服装或人物参考素材，以及文件名和格式等信息。图片可能包含人脸或其他个人信息，请取得必要授权。本服务未实现用于识别真实身份的人脸识别功能。
• 任务资料：提示词、作品名称、生成参数、提交时间、任务编号、分配实例、状态、耗时和错误信息。
• 成品：生成视频，以及为播放和下载制作的预览版、精简版和缩略图。
• 必要技术信息：访问和运行日志中可能包含 IP 地址、请求路径、时间、浏览器标识、响应状态及错误信息，用于运行维护和排查问题。
• 咨询信息：你主动发送的邮箱地址、咨询内容、作品编号及处理请求所需的信息。

浏览器可能在本地存储提示词草稿、作品名称、生成参数、素材引用和计时状态，以便恢复操作。视频在预览或下载时，也可能进入浏览器缓存或你选择的下载目录。这些与服务器上的成品存储不同；你可以通过浏览器清理站点数据和下载文件。

3. 数据使用目的

我们处理这些数据，以执行你提交的生成任务、分配显卡、展示任务进度、同步成品、提供预览下载、搜索和重新提交，并处理技术问题与用户请求。现有自部署流程用于模型推理，不包含使用你上传的素材进行模型训练或微调的功能。

本服务当前未接入第三方广告跟踪或统计 SDK。我们不出售你的素材或个人信息，也不将其用于与上述服务无关的广告投放；如需改变用途，将依法告知并取得所需同意。

4. 传输、存储与共享

云端使用时，素材与任务资料会发送至画布服务器，并转交配置的云显卡实例进行生成。生成实例上的文件可能保留副本，画布服务器会缓存成品及播放版本。现有部署涉及云服务器与显卡托管基础设施，不是把创作内容交给另一个付费视频生成平台处理。

当前作品管理采用共享工作区，没有按个人账号隔离作品。能够访问同一画布入口的人，可能查看共享列表、提示词及可访问的作品。不要将它当作仅自己可见的私人空间。

运行基础设施的供应商可能按提供托管、网络及维护服务所必需的范围处理数据。涉及跨境传输或新的第三方接入时，应在启用前按适用法律说明并履行必要手续。依法需要向主管机关提供信息时，我们只在规定范围内处理。

5. 保存与清理期限

• 云端已缓存成品：从缓存时间起保存 7 天，随后由定期任务清理成品及相关预览、精简版、缩略图。定期执行和临时故障可能使实际移除晚于到期时刻。
• 参考素材、提示词和任务记录：当前不受成品 7 天自动清理设置限制，可能继续保留，用于重新提交、作品管理和问题处理；由运营方根据必要性、删除请求或服务结束安排清理。
• 显卡实例上的副本：不随画布成品到期自动删除，需要对相应实例单独清理。
• 运行日志：按文件大小轮转，当前没有统一按天清理期限。
• 维护备份：可能包含素材或任务记录的历史副本，当前没有与成品同步的 7 天清理规则。删除请求的处理范围需要覆盖适用备份及恢复过程。
• 本机部署及已下载文件：独立本机部署默认不启用云端成品清理；浏览器草稿、缓存和你下载的文件需在相应设备上管理。

我们应将保留的数据限制在服务、处理请求或履行法律义务所必要的范围，并在不再必要时安排清理。不要将 7 天成品清理理解为已删除所有素材和所有副本。

6. TikTok 授权与发布

截至本政策更新日，TikTok 绑定与发布尚未启用，本服务尚未通过该功能收集 TikTok 账号资料或授权凭证。注册开发者应用不代表获得用户账号访问权。

如果后续启用，我们将在账号授权前明确说明请求的权限、实际收集的账号字段、授权凭证用途和保存期限，以及撤销授权和删除数据的方式，并更新本政策。视频和文案仅在你明确选择、授权和确认后提交给 TikTok。我们不会要求你把 TikTok 密码或验证码交给画布。

TikTok 对其收到的数据另按其政策处理。你可在 TikTok 的官方授权管理入口撤销应用授权；也可通过下方邮箱申请删除本服务侧的相关数据。我们不会把尚未实现的授权或发布功能描述为已上线能力。

7. 你的选择与数据请求

你可以选择不上传素材、不提交生成任务，或清理浏览器站点数据。取消任务会停止或尝试停止该任务，但不等于删除已经上传的素材、生成文件或历史记录。

如需查阅、更正、导出或删除与你有关的信息，或撤回依法基于同意进行的处理，请发送邮件，说明相关作品编号、请求范围和可联系信息。我们会合理核实请求人身份、查明涉及的画布和实例，按适用法律处理并回复；不会要求提供不必要的敏感证明。当前没有一键删除所有服务器与显卡副本的功能，删除申请由运营方处理。依法必须保留的记录会说明原因和适用范围。

8. 数据安全、未成年人及政策更新

我们应在实际能力和风险范围内采取必要的访问管理、维护与备份措施。当前入口与共享工作区配置可能影响数据可见范围；不存在对传输、保管或绝对保密的保证。涉及未成年人素材，应由提交者依法取得必要的本人或监护人授权，避免上传不必要的敏感信息。

重要数据处理变化会通过更新本页面日期，并在适当情况下通过服务内或联系渠道说明。依法需要单独或重新取得同意的，应在处理前取得。

1. Scope

This policy covers our cloud canvas and configured generation services. Independent local deployments, deployments run by other operators, and third-party platforms may have different practices. We process information only to provide the service, fulfill agreements, obtain required consent, or where otherwise permitted by applicable law.

2. Data we process

• Creative inputs: reference images, first and last frames, garment or person references, file names and formats. Images may contain faces or other personal information; obtain the required permissions. The service does not implement facial recognition to identify real individuals.
• Task information: prompts, work names, parameters, submission times, task IDs, assigned instances, status, execution duration, and errors.
• Outputs: generated videos and their preview, compact, and thumbnail versions.
• Necessary technical information: access and runtime logs may include IP addresses, request paths, times, browser identifiers, response status, and errors for operations and troubleshooting.
• Support communications: your email address, messages, work IDs, and information needed to process requests.

Your browser may locally store prompt drafts, work names, settings, material references, and timing information. Previews and downloads may also be cached or saved on your device. This is distinct from server storage. You can clear site data and downloaded files in your browser or device.

3. Purposes

We use this information to execute tasks, assign GPUs, show progress, synchronize outputs, provide previews and downloads, search and resubmit works, troubleshoot, and respond to requests. The current self-hosted workflow performs inference and does not include training or fine-tuning models with your inputs.

The service currently does not integrate third-party advertising tracking or analytics SDKs. We do not sell your materials or personal information or use them for unrelated advertising. A change of purpose will be communicated and required consent obtained.

4. Transmission, storage, and sharing

Cloud usage sends inputs and task details to the canvas server and configured cloud GPU instances. GPU instances may retain copies. The canvas server caches outputs and playback variants. The current workflow uses hosting and GPU infrastructure rather than another paid video-generation platform.

Work management currently uses a shared workspace with no isolation by personal account. People who can access the same canvas entry point may see shared listings, prompts, and accessible works. Do not treat it as a private personal space.

Infrastructure providers may process information as necessary for hosting, networking, and maintenance. Before introducing cross-border transfers or new third-party integrations, applicable disclosures and legal steps must be completed. Information required by competent authorities is handled only within the applicable legal scope.

5. Retention and cleanup

• Cached cloud outputs: retained for 7 days from caching, then removed by periodic cleanup together with preview, compact, and poster variants. Removal may occur later than the exact expiry boundary due to scheduling or temporary errors.
• Inputs, prompts, and task records: not covered by the output cleanup. They may remain for resubmission, work management, and issue handling; the operator arranges cleanup based on necessity, deletion requests, or service termination.
• GPU copies: do not expire with the canvas cache and require separate cleanup on the relevant instance.
• Runtime logs: rotated by file size; there is currently no uniform retention period measured in days.
• Maintenance backups: may contain historical materials or task data and do not share the output seven-day rule. Deletion handling must address applicable backups and restoration processes.
• Local installations and downloads: independent local installations do not enable cloud output cleanup by default. Browser drafts, caches, and downloads must be managed on the relevant device.

Retention should be limited to what is necessary for the service, requests, or legal obligations, with cleanup when no longer needed. Seven-day output cleanup does not mean that every input and copy has been deleted.

6. TikTok authorization and publishing

As of this update, TikTok linking and publishing are not enabled. The service has not collected TikTok account details or authorization credentials through those features. A developer application does not itself grant access to user accounts.

If enabled later, we will update this policy and disclose requested permissions, actual account fields, credential uses and retention, and revocation and deletion procedures before authorization. Selected videos and captions will be sent to TikTok only after your selection, authorization, and confirmation. We will not request TikTok passwords or verification codes.

TikTok handles information it receives under its own policies. You can revoke an app through TikTok's official authorization management and request deletion of service-side data by email. Features not yet implemented are not represented as available.

7. Your choices and requests

You may choose not to upload materials or submit tasks, or clear browser site data. Cancelling a task stops or attempts to stop it; it does not delete uploaded materials, outputs, or records.

For access, correction, export, deletion, or withdrawal of consent-based processing where applicable, email us with the relevant work IDs, request scope, and contact information. We will reasonably verify identity, identify affected canvas and instance data, and respond under applicable law without requesting unnecessary sensitive proof. There is currently no one-click deletion of every server and GPU copy; the operator handles requests. Any legally required retention will be explained.

8. Security, minors, and updates

Necessary access management, maintenance, and backup measures should reflect actual capabilities and risks. Entry-point and shared-workspace settings affect visibility. No absolute guarantee of confidentiality, transmission security, or storage security is made. Materials involving minors require the legally necessary permissions; avoid unnecessary sensitive uploads.

Material changes will be reflected in the update date and communicated through the service or contact channels where appropriate. Separate or renewed consent will be obtained before processing where legally required.