Start creating

Privacy Policy

Effective: 12 November 2026

1. What we collect

  • Account: your email address (verified by our sign-in provider, Clerk).
  • Your content: prompts, uploaded images and LoRA files, and the videos generated.
  • Payments: handled by Stripe; we never see or store card numbers, only order amounts and status.
  • Usage: jobs, credit history, audit logs of actions, and server access logs (which may include IP addresses).
  • Cookies: your sign-in session and language choice; none for advertising.

2. Why

To provide and bill the Service, keep it secure and prevent abuse, answer support requests and keep it reliable. We do not sell personal information and do not train models on your content.

3. Service providers

These providers process data as needed for their part of the Service:

  • Clerk: sign-in and accounts;
  • Stripe: payments;
  • Fly.io: hosting; Supabase: database; Upstash: job queue;
  • Cloudflare: DNS and file storage (R2);
  • Runpod: GPU computing, which processes your prompt and images during generation;
  • Anthropic: only when you turn on prompt enhancement, for that job's prompt and images;
  • Resend: operational emails to our team (none of your content).

If your organization sets a completion webhook, job notifications are sent to the address you choose.

4. Where data is processed

Servers and the database are in Singapore, files are stored in Cloudflare's Asia-Pacific region, and generation runs on GPUs in the United States and Europe. Using the Service means your data moves between these locations.

5. How long we keep it

We keep your account, content and works while your account exists. Temporary files used during generation are deleted automatically within a day. You can ask by email to delete your account and its content; records the law or security requires (such as payments and audit logs) may be kept longer.

6. Your rights

You can ask to access, correct, export or delete your personal information by writing to support@ondarlin.com; we reply within a reasonable time.

7. Security

Traffic is encrypted; files sit in private storage and are reached only through short-lived signed links; API keys are stored only as hashes; administrative actions are audited.

8. Children

The Service is not intended for anyone under 18.

9. Changes and contact

We may update this policy and will announce significant changes on the website. The Service is operated by Ondarlin; contact support@ondarlin.com.