← Back to Affiliate OS

Privacy Policy

Last updated: June 2026

This policy explains what Affiliate OS collects, how we use it, and the third-party AI services that process your content when you generate videos. By using the service you agree to this policy.

1. What we collect

We collect the information you provide and the content you create with the service:

Account and project data are stored in Supabase (our cloud database). Generated videos are stored in Google Cloud Storage and served to you via temporary signed links. We do not sell your personal data.

2. AI processing & third-party providers

To generate your content, your uploads and prompts are sent to third-party AI providers for processing. Specifically:

We send providers only what is needed to fulfill your request. We do not control these providers' own data practices; please review their policies. We do not use your content to train our own models.

3. Face & likeness data

When you upload a face/avatar photo, that image is processed by Google's AI models to place that likeness into the videos you generate. You are responsible for ensuring you have the legal right and consent to use any person's likeness you upload, and you confirm this at the time of upload. Do not upload images of anyone without their permission. We store uploaded photos as part of your account/project data so the feature works across sessions; you can remove them at any time (see Section 6).

4. Cookies & local storage

We use your browser's local storage and IndexedDB to cache your settings, avatar, and project data on your device for performance. If we add product analytics in the future, we will update this policy and, where required, ask for your consent.

5. Data security

Account and project data are stored via Supabase with row-level security; passwords are never stored in plain text. API keys and credentials used to call AI providers are held server-side as protected environment variables and are never exposed to your browser.

6. Your choices & data deletion

You can delete uploaded photos and projects from within the app. You may also request deletion of your account and all associated data — including uploaded media and generated videos — by emailing us, and we will process the request within 30 days. Note that content already processed by a third-party provider is subject to that provider's own retention and deletion practices.

7. Children

Affiliate OS is not directed to anyone under 18, and we do not knowingly collect data from minors. Do not upload photos of minors.

8. Changes

We may update this policy as the service evolves. Material changes will be reflected by the "Last updated" date above.

9. Contact

Questions or deletion requests? Email xorax360@gmail.com.