Privacy Policy

1. Data controller

The data controller for personal data processed through JME Freestyle AI (https://jemukrap.com) is Gao Heyang (Individual / Sole Trader), based in the People's Republic of China.

Contact: support@jemukrap.com

2. Information we collect

Account data: email address, authentication tokens, and session identifiers for registered users.

Uploaded content: photos you submit for video generation, along with associated prompts and generation parameters.

Generated content: AI-generated videos and related task records (status, timestamps, processing metadata).

Payment data: order IDs, transaction metadata, and credit balance information. Payment credentials are processed by Waffo and not stored by our Service.

One-Time Pass data: anonymous browser session identifiers, order status, and secure download tokens for guest users.

Technical data: IP addresses, browser user-agent strings, server logs, and security event logs.

Support communications: emails and messages exchanged with our support team.

3. How we use your data

We process your data to: authenticate users and manage accounts; operate video generation requests; apply content safety checks (NSFW detection and prompt moderation); reserve and return credits; process purchases through Waffo; store and deliver private generated videos; prevent abuse and fraud; troubleshoot technical failures; respond to support requests; and comply with legal obligations.

4. Third-party data processing

Alibaba Cloud Model Studio Wan 3.0: Receives uploaded photos and generation parameters to create videos. Processed under Alibaba Cloud's terms and privacy policy.

Replicate: Receives uploaded photos for NSFW content detection. Processed under Replicate's terms and privacy policy.

Waffo Prompt Scan: Receives text prompts (not photos) for content moderation. Processed under Waffo's terms and privacy policy.

Waffo: Processes payment credentials and transaction data through hosted checkout. We retain order and transaction metadata for fulfillment, support, accounting, and fraud prevention.

Supabase: Provides authentication and access-controlled storage for private user uploads and generated results.

Cloudflare R2: Stores public reference and demo assets.

These third-party providers process data under their own privacy policies. We do not control their retention periods or use of data for model improvement.

5. Data retention

Moderation temporary copies: Uploaded photos sent to Replicate for NSFW detection are stored in a temporary prefix and deleted immediately after each moderation check completes. A scheduled cleanup task removes any residual temporary files.

Uploaded photos: Original photos are deleted from storage immediately after video generation succeeds or fails.

One-Time Pass checkout sessions: Expire 24 hours after creation if payment is not completed.

Download tokens: Expire 7 days after generation completion.

Generated videos: Stored privately in Supabase storage. Videos remain available for download and preview until you request deletion. You may request deletion at any time by contacting support@jemukrap.com.

Account data: Retained for as long as your account is active. You may request account data deletion by contacting support@jemukrap.com. Note: There is currently no automated account closure mechanism. Contact support for data deletion requests.

Order and transaction metadata: Retained for operational, accounting, and dispute resolution purposes. The operator retains records in accordance with applicable legal requirements and legitimate business needs.

6. Data deletion

You may request deletion of your personal data by contacting support@jemukrap.com. Requests may require identity verification.

Automated deletion mechanisms: Uploaded photos are deleted immediately after generation completes or fails. Moderation temporary files are deleted after each check and by a scheduled cleanup task. Expired One-Time Pass checkout sessions and expired download tokens are cleaned up automatically.

Video deletion: Generated videos are retained until you request deletion. Upon verified request, videos will be removed from active storage.

Deletion limitations: Order metadata may be retained for operational, accounting, and dispute resolution purposes in accordance with applicable legal requirements. Some data may be retained after deletion requests due to legal obligations (tax records, fraud prevention, dispute resolution) or technical constraints (backup systems).

Account access: To request deletion of your account data, contact support@jemukrap.com. Upon verified request, access to your generated videos and order history will be removed. This action is irreversible.

7. Cookies and local storage

The Service uses cookies and browser storage for: authentication sessions; secure anonymous One-Time Pass order access; fraud prevention; and user preferences.

Clearing browser data may remove access to anonymous order history. Download and save completed videos promptly.

8. Your rights

Subject to applicable law, you may have rights to: request access to your personal data; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; request data portability; and withdraw consent where processing is based on consent.

To exercise these rights, contact support@jemukrap.com. We will respond within a reasonable time and may request identity verification.

UK consumers: You may have additional rights under UK GDPR, including the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted storage, access controls, and secure transmission.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email to registered users. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. One-time browser delivery

For an enabled One-Time Pass, the anonymous order is associated with a secure browser session. After the payment provider confirms the order, that session starts generation and authorizes the private preview and download. New One-Time orders do not require a site delivery email.

The same browser can reopen its Guest orders while the secure session remains available. If browser data is cleared, the order ID alone cannot restore access; support may require payment-receipt verification. Download and save completed videos promptly.