Privacy Policy

Last updated: October 22, 2026

Window Peeper AI Team operates Window Peeper AI at windowpeeperai.video from the United States. “We” and “us” mean Window Peeper AI Team. This policy explains how we handle personal information when you browse our website, create an account, submit a photo, purchase credits or contact us. We are independent and not affiliated with TikTok, CapCut or the creators of the reference posts.

1. Information we collect

  • Account and sign-in data: email address, name, account identifier, email verification status and profile picture when supplied. Google sign-in also provides authentication identifiers and tokens used to manage access. Email sign-in uses a verification code. Signing in does not import your Google Photos, Gmail messages or Drive files.
  • Photos and generated media: one submitted person or animal photo and, when generation is used, the generated character reference, video and thumbnail. Environment choices are submitted as text IDs; environment preview images are not uploaded with your request.
  • Generation and credit records: selected subject type, quality and environment ID, generation instructions, task identifiers, file URLs, timestamps, status, errors, credits used and credit adjustments. The generator supplies the performance reference and instructions.
  • Payment records: if you make a purchase, order and transaction identifiers, package, amount, currency, payment status and billing details returned by the payment provider. Payment credentials go to the provider; we do not store full payment card numbers or security codes.
  • Technical data: session records, IP addresses, browser and device information, access times, page activity, performance measurements and diagnostic logs.
  • Marketing attribution data: campaign parameters, referring domain, landing page, country code, broad device category and timestamps used to connect account registration, purchases and product activity with acquisition channels. We do not store a full IP address, city or device fingerprint for attribution. You may contact us to request access to or deletion of this account-linked data.
  • Support correspondence: your email address, messages and files you choose to send us.

2. Photo and AI processing

Before you submit

Selecting a photo creates a local preview. This generator also saves your selected photos and quality in this browser so you can return after sign-in or checkout.

A saved setup can be restored for up to 24 hours. You can remove it with Clear saved setup and photos in the generator or by clearing this site's browser data. Saving a setup alone does not upload photos. The site also stores a job identifier locally so you can return to a submitted job.

After you submit

Photos are uploaded only when you submit a generation, then stored with your account task until automatic cleanup about 48 hours after the task completes or fails. This supports the quality-review request window. A task cannot be deleted while it is still being generated; deleting it from My Creations after completion or failure removes the stored files sooner.

When generation is used, Nano Banana 2 creates one 1K vertical character reference from the submitted photo. Wan 3.0 receives that reference, the fixed 14-second action reference video, the selected environment text and generation instructions. Environment preview images are not sent.

Your generated result

Wan 3.0 generates one silent 14-second vertical video. We normalize it to exactly 14 seconds and add the audio from the first 14 seconds of the fixed reference clip, then store the resulting video and thumbnail for viewing and download.

A submitted photo and its character reference show a person’s or animal’s appearance. We use them to guide the single subject in the Window Peeper video. We do not use this workflow to identify people or build a facial recognition database. Google sign-in data is used for your account, not as input to AI generation.

Window Peeper AI Team will never use your uploaded photos, character references or generated videos to train or fine-tune AI models. This commitment covers our own use of your media. Kie publishes retention periods for generated media and task logs, but we have not obtained a no-training commitment covering Kie API or the model operators. Their public documents do not confirm how long every fetched input or underlying model-operator copy is retained, or whether a deletion request reaches every operator. Do not upload photos if these unknowns are unacceptable to you.

3. How we use information

  • Authenticate you, maintain your account and deliver generations and downloads.
  • Manage purchases, credits, payment reconciliation and failed-task credit returns.
  • Provide support and necessary sign-in, billing, security and service messages, including an account-confirmation welcome email. If a newly registered user separately opts in to a first-video reminder and has not submitted a video after 48 hours, we send one reminder at the next successful scheduled check with an unsubscribe link.
  • Diagnose failures and improve reliability using operational and usage information.
  • Investigate unauthorized photo use, abuse, fraud and security incidents, and meet legal obligations.

Improving the service does not authorize training on your content or publication of it. Authorized team members may access content when needed for support, troubleshooting, safety or legal requests. We do not use uploaded photos or generated videos for advertising. Optional analytics events are described below; the site denies advertising storage and personalization in its Google tag configuration.

Where EEA or UK data protection law applies, our legal bases depend on the activity: contract performance for account, generation and billing services; legitimate interests for proportionate security, fraud prevention and diagnostics; legal obligations for required records; and consent for optional public display and other processing requiring consent. Withdrawal does not affect processing that was lawful beforehand.

4. Service providers and disclosures

We disclose information needed to deliver the service to:

  • Kie API (Nano Banana 2 and Wan 3.0):

    When generation is used, Kie API handles requests to Nano Banana 2 and Wan 3.0. We provide time-limited links to the media needed for generation. Nano Banana 2 receives the single submitted person or animal photo to create one 1K vertical character reference.

    Wan 3.0 receives that reference, the fixed 14-second action reference video, the selected environment text, instructions and settings to produce one silent vertical video. Environment preview images are not sent. We add the fixed reference clip’s first 14 seconds of audio after generation.

    We do not include your account email or profile name in model-generation requests.

    Provider documents: Kie API’s privacy policy, API retention documentation, and File Upload API documentation.

    Kie states that generated media is retained for 14 days and task logs for two months. Its separate File Upload API documents a 24-hour period, but this workflow supplies temporary links instead of using that upload endpoint. The published periods do not confirm how long fetched input images or copies held by underlying model operators are retained, whether those copies are used for training, or whether task deletion reaches every operator.

  • Hosting, database, object storage and delivery providers: Vercel hosts the website and provides analytics and performance measurement when enabled. Our current database configuration uses Neon PostgreSQL for account and task records, and Cloudflare R2 for uploaded and generated media. These providers receive the data needed to operate, store and deliver the service.
  • Google: authentication data when you choose Google sign-in. See Google’s privacy policy.
  • PayPal: payment and order data if you purchase credits through PayPal. See PayPal’s privacy statement.
  • Brevo: recipient addresses, message content, delivery events and marketing-consent records for sign-in, welcome and opted-in one-time first-video reminder emails. See Brevo’s privacy policy.
  • Google Analytics 4: page views and product conversion events, including photo preparation, account access, pack selection, checkout, confirmed purchases and completed videos. Purchase events include an internal transaction ID, pack, currency and amount; account access can be associated with an internal user ID. We do not intentionally send photos, filenames, email addresses, prompts or payment credentials in these events. See Google’s privacy policy.
  • Microsoft Clarity: website interaction and session data when you allow optional analytics. See Microsoft’s privacy statement.
  • Vercel Analytics and Speed Insights: website usage and performance data where these integrations operate. We do not intentionally include your photos or generated media in analytics events. See Vercel’s privacy policy.

We may also disclose information when legally required, to address fraud or safety incidents, to protect legal rights, or in a business transfer subject to applicable protections and required notices.

5. Privacy and optional public display

We do not automatically publish uploads or final videos in a public gallery. Generating a video or accepting this policy does not grant permission to use it in our examples, social posts or marketing. Such use requires a separate, optional opt-in identifying the final video and proposed use. Refusing does not affect generation. We do not publicly display original photos or character references.

A public-display opt-in is not currently available in the generator. Until separate permission is obtained, your content is not eligible for our public examples. We do not feature content depicting minors. Permission for a multi-person video must cover everyone shown; the uploader’s permission alone does not replace their rights.

You may withdraw permission by emailing us. We will stop future use and remove displays under our control, subject to applicable law. We cannot retrieve copies others have downloaded or reposted.

Viewing and downloading your videos through the site require sign-in to the account that created them. AI providers receive temporary links to the files needed for processing. Deleting a video from the site does not remove copies already downloaded or held by third-party providers.

6. Retention and deletion

Data typeWhen it is kept and how to request removal
Local Window Peeper AI setup and photos:saved in your browser to restore the setup for up to 24 hours. Once that period passes, the setup is no longer restored and its stored copy is removed when it is next accessed. Use Clear saved setup and photos in the generator to remove the current draft sooner, or clear this site's browser data to remove local copies.
Uploaded photos and character references:used to process your generation and scheduled for deletion from our storage about 48 hours after the task completes or fails, supporting the quality-review request window. A task that is still being generated cannot be deleted. Deleting a completed or failed Window Peeper AI task from My Creations requests earlier removal. Automatic and user-requested cleanup is retried after storage errors.
Final videos:no scheduled automatic expiry while your account and the service remain active. A task that is still being generated cannot be deleted. Deleting a completed or failed Window Peeper AI task from My Creations also removes its stored video and thumbnail; cleanup is retried after a storage error. Download a copy you want to keep before deleting.
Kie API and model-operator copies:Kie states that generated media is retained for 14 days and task logs for two months. These periods do not clearly cover every fetched input, underlying model-operator copy or backup. Deleting a task from My Creations removes files stored by Window Peeper AI, but it cannot guarantee immediate deletion of provider-controlled copies. Contact us with the task ID if you want us to submit a provider deletion request where available.
Account and generation records:while needed to operate your account and library, followed by retention needed for legal obligations, disputes or security.
Payment and credit records:for applicable accounting, tax, dispute and fraud-prevention requirements, including records required after account deletion.
Intermediate files, support messages, diagnostics and backups:we attempt to remove temporary video and thumbnail files from the processing server after each upload attempt. A failed cleanup may require manual follow-up. Support messages, diagnostics and backups are retained as needed for support, recovery or legal requirements.

To request deletion: support@windowpeeperai.video.

  1. Send the email from your account address and include the relevant task or video identifier.
  2. Say whether you want the associated photos, references, video and thumbnail removed, your account closed, or both.

An Window Peeper AI task that is still being generated cannot be deleted. For completed or failed tasks, Delete in My Creations removes access immediately and deletes associated files from our storage. The service retries cleanup after storage errors. This action does not close your account or erase provider copies or browser drafts.

For account closure or a separate privacy request, we will verify the request, explain what can be removed and what must be retained, and confirm the outcome. Contact support if task-file cleanup remains pending. If you request deletion of provider-controlled copies, include the task ID; we will submit the request to Kie where a provider process is available, but cannot guarantee deletion by every underlying model operator.

We cannot promise immediate erasure or deletion of copies controlled by third-party providers.

Kie documents a 14-day retention period for generated media and two months for task logs. Its separate File Upload API documents 24 hours, but this workflow does not use that upload endpoint. None of these statements establishes a deletion period for every fetched input, model-operator copy or backup.

7. Cookies and analytics

We use session cookies for sign-in and may store theme or language preferences in cookies or browser storage. Disabling necessary cookies can prevent sign-in or generation. Usage and performance integrations are described above; not every analytics service uses cookies.

Cookie or browser storagePurpose and duration
Local Window Peeper AI setup and photos:Selected photos and quality are saved in browser storage to restore the generator setup for up to 24 hours. The current draft can be cleared in the generator; clearing this site's browser data removes local copies.
Privacy preference cookieRemembers your analytics choice for up to 180 days. It is needed to honor that choice.
First-touch attribution cookieRecords the first acquisition source after analytics consent for up to 400 days. Cleared when you withdraw consent.
Last non-direct attribution cookieRecords the latest qualifying acquisition source after analytics consent for up to 30 days. Cleared when you withdraw consent.
Sign-in and session cookiesMaintain authentication and security. Their duration follows the active session configuration; disabling them may prevent sign-in and generation.

Use Privacy settings below or at the bottom of the site to accept or withdraw optional analytics consent. Optional analytics remain disabled until you consent. Withdrawal stops future optional analytics loading and clears our attribution cookies; it does not automatically erase data previously sent to analytics providers or necessary server and security logs. Contact us about earlier account-linked attribution or analytics processing.

8. Your rights and requests

Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a portable copy of personal data; object to or restrict processing; withdraw consent; and complain to a data protection authority. Applicable US state laws may also provide appeal and opt-out rights. These rights and exceptions vary; not every regional law applies to every request.

Email support@windowpeeperai.video, preferably from your account address. Describe your request and include relevant generation identifiers if available. We may need proportionate information to verify your identity or authority to act for someone else. Do not send passwords, payment credentials or identity documents unless we explain why further verification is needed and arrange a suitable method.

We respond within applicable legal deadlines, explain permitted extensions or refusals, and do not discriminate against you for exercising privacy rights. You can request review of a denial by replying to our response. Account settings currently do not offer complete correction, export or account-deletion controls. Revoking Google access does not delete your account or files.

9. Age and photo permissions

Window Peeper AI is for people aged 13 or older. Users aged 13–17 need permission from a parent or legal guardian to use the service and upload their own photo. Anyone under 13 must not create an account, upload photos or submit personal information. Meet any higher minimum age required where you live. We ask users to confirm these rules in the sign-in and generation forms; we do not currently collect birth dates or independently verify age or guardian permission.

You may upload your own photo if you are at least 13 and, if under 18, have parent or guardian permission. A photo of another identifiable person must show a consenting adult aged 18 or older. Do not upload other minors, celebrities or public figures. Animal photos must be yours or otherwise lawfully usable.

Upload only your own photo under the age and permission rules above, a photo of an adult who has authorized this AI processing, or an animal photo you are allowed to use. Permission to generate is separate from permission to publish. If you or your child appear in an unauthorized upload, contact us to investigate, restrict use and address deletion under applicable law. If we learn that we collected information from an ineligible child, we will take steps to remove it as required.

10. Security and international processing

We use authenticated account access and encrypted connections for service requests. No transmission or storage method is completely secure. Historical media links and third-party processing have the limitations explained above. Contact us about suspected unauthorized access to your account or content.

We operate from the United States and serve users internationally. Providers may process information in the United States or other countries with different privacy laws. Our location does not mean all data stays in the United States. Where international transfers require safeguards, the relevant processing must use them. Contact us about the locations and safeguards applicable to your request.

11. Policy updates

We update the date on this page when our practices change. Material changes will receive an appropriate website notice or email notification, with fresh consent where required. An update does not itself authorize new public-display or model-training uses.

12. Contact us

Window Peeper AI Team
United States
Privacy and support: support@windowpeeperai.video

Read our Terms of Service for the rules governing use of the service.