Privacy policy
Effective: 2026-10-11
Local preview
Selecting a photo for the current preview creates a temporary browser preview. It does not upload your photo. Removing the photo or leaving the page releases the preview. We do not keep it as a public example or send it to analytics.
Account and service data
Once enabled, Google sign-in provides account identity through Better Auth. Authenticated uploads, task status, credit ledger and payment references are stored in our separate Cloudflare D1 and private R2 resources. Waffo processes checkout; we do not store full card details.
AI and screening providers
Generation is not enabled yet. Before opening it, we will disclose the selected generation provider and enabled route. Input screening is planned through SeeAPI. Uploaded media may be processed by suppliers outside your country under their own retention policies. We do not claim every AI output has been independently screened while that mechanism remains unverified.
Retention and deletion
The implemented storage policy is designed to expire inputs after 7 days and completed outputs after 30 days, followed by scheduled deletion. Active-task inputs remain until processing ends. Provider retention is separate. You can request account or rights-related deletion through support; transaction records needed for legal and dispute obligations may be retained.