Privacy Policy
Last updated October 1, 2026
The short version
- We collect your email, the two photos you upload and the videos you generate — and use them only to make those videos.
- Your photos reach our AI video provider through links that expire after one hour.
- We don’t sell your data, run ads or analytics, or use your photos to train AI models.
- Email us any time and we’ll delete your account, photos and videos within 30 days.
1. Data controller
MigosAI (“we”, “us”, “our”) operates the service at https://migosai.pro (the “Service”) and is the data controller for the personal information described here.
- Privacy contact: [email protected]
- Data Protection Officer: not applicable
2. Personal information we collect
2.1 Information you provide
- Account: your email address and password. The password is stored only as a hash by our authentication provider.
- Photos: the two photos you upload for each video, which show the people in them.
- Purchases: the email, amount, currency, order ID and number of credits for each purchase. Card numbers are entered on our payment processor’s checkout and never reach us (see Section 5).
- Messages: emails you send us, including support requests and reports.
2.2 Information created when you use the Service
- Videos: the videos generated from your photos.
- Generation records: status, timestamps, the provider’s job ID, and any error or screening message the provider returns.
- Credits: your credit balance.
2.3 Information collected automatically
Our hosting and network providers log technical request data — IP address, browser type, request time and errors — to run and secure the Service. We do not use analytics, advertising or tracking tools.
2.4 What we do not do
- We do not use your photos for facial recognition or to identify anyone.
- We do not use your photos or videos to train AI models.
- We do not sell your personal information.
3. How we use your information
| Purpose | Legal basis |
|---|---|
| Generating the videos you request | Contract performance |
| Your account, sign-in and credit balance | Contract performance |
| Payments and refunds | Contract performance |
| Answering support requests and reports | Contract performance / legitimate interests |
| Security, abuse prevention and enforcing our Acceptable Use Policy | Legitimate interests |
| Meeting legal obligations | Legal obligation |
We do not use your information for marketing.
4. Cookies
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Keeps you signed in | No |
That is the only cookie the Service sets. We use no functional, analytics or advertising cookies. The checkout page is run by Waffo Pancake and may set its own cookies under its own policy.
5. Sharing & disclosure
We do not sell your personal information, including as “sale” is defined under laws such as the CCPA. We share it only with the service providers that run the Service, each bound by confidentiality and data-processing terms:
- Supabase — database, authentication and file storage.
- Vercel — website hosting.
- Cloudflare — network delivery and security.
- Our AI video provider — receives your two photos and returns the video. The model is Seedance 2.0 by ByteDance, accessed through a third-party API provider. Photos are sent as links that expire after one hour.
- Waffo Pancake — payment processing, tax and merchant of record. It receives your email and purchase details. Card data is processed exclusively by Waffo Pancake, a PCI-DSS-certified processor, and is not stored on our servers.
We may also disclose information where the law, a court order or a lawful regulatory request requires it, or with your explicit consent.
Video links. Generated videos are stored at a long, unguessable web address. Anyone who has that address can watch the video, so share it only with people you want to see it. We do not list videos in any public gallery.
6. Data security
- All traffic is encrypted in transit with HTTPS.
- Uploaded photos are kept in private storage and are only ever shared through links that expire after one hour.
- Passwords are stored hashed. API keys and service credentials stay on our servers.
- Access to stored data is limited to the operator.
If a security incident affects your personal information, we will notify you and the relevant authorities within 72 hours of discovering it, where the law requires.
7. Data retention
| Data | Kept for | Then |
|---|---|---|
| Account information | While your account is open | Deleted within 30 days of a deletion request |
| Uploaded photos | While your account is open, or until you ask us to delete them | Deleted within 30 days of a request |
| Generated videos | While your account is open, or until you ask us to delete them | Deleted within 30 days of a request |
| Generation and purchase records | While your account exists — needed for credits, refunds and disputes | Deleted with your account |
| Technical request logs | A limited period set by our hosting providers | Deleted by those providers |
Waffo Pancake keeps its own transaction records as merchant of record, under its own retention rules.
8. Your rights
Email [email protected] from your account email to exercise any of these rights. We reply within 30 days.
| Right | What it means |
|---|---|
| Be informed | Know what we collect and how we use it — this policy |
| Access | Get a copy of your personal information |
| Rectification | Correct inaccurate or incomplete information |
| Erasure | Have your account, photos and videos deleted |
| Restrict processing | Ask us to pause processing in certain cases |
| Portability | Receive your data in a machine-readable format |
| Object | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw any consent you have given |
You may also complain to your local data protection authority.
9. Marketing
We do not send marketing messages. You will only receive service emails, such as account messages and the payment receipts Waffo Pancake sends on our behalf.
10. International transfers
Our service providers process data in several countries, including Singapore (website hosting), the United States, and the countries where our AI video provider operates, which may include mainland China. For these transfers we rely on our providers’ data-processing terms, including Standard Contractual Clauses where they offer them.
11. Children
The Service is only for people aged 18 and over, and photos of anyone under 18 must not be uploaded. If you believe a child’s information or photo has reached us, contact us and we will delete it promptly.
12. Third-party services
The checkout page is operated by Waffo Pancake and is covered by its own privacy policy. This policy covers only the information we collect directly.
13. Changes to this policy
We will give at least 15 days’ notice of material changes by email or by a notice on the Service, and update the date at the top of this page.
14. Contact
- Privacy and support: [email protected]
- Website: https://migosai.pro
See also our Terms of Service and Acceptable Use Policy.