Privacy Policy
Updated October 12, 2026. Version 2026-10-12.3. Pre-release notice; paid generation is not open.
1. Operator and scope
Cartoon Video Generator (Cartoon Rap Duo), at cartoonvideogenerator.com, is operated by Chen Wenjian, an individual operator in China. Chen Wenjian is the data controller for this service. Privacy, account deletion, safety reports and support: support@cartoonvideogenerator.com. Waffo mailbox verification is complete; public purchases and generation remain closed until the contact channel and launch checks are complete.
2. Information we process
We process account name, email, profile details, authentication identifiers and session cookies; authorized adult portraits and cartoon images; selected themes, English lyrics, generation settings and AI outputs; task, safety-review and credit records; transaction amounts, payment references and status; support correspondence; and necessary security and service logs, including IP addresses, browser/device metadata, request timestamps and errors. Local image previews stay in your browser until saved. We do not use face recognition to identify people or offer real-person voice cloning. Full card numbers and security codes are handled by Waffo Pancake and its payment providers, not stored by us.
3. Accounts and authentication
Neon Auth processes Google sign-in or email-and-password registration and login when configured. Google may provide your name, email and profile image. Email registration does not require a verification email; an unverified email does not prove mailbox ownership. Neon Auth manages password credentials; passwords are not stored in our application records or sent to AI providers. We may require additional identity evidence for privacy requests or account recovery and do not automatically treat an unverified email as proof of ownership.
4. Purposes and legal bases
Where applicable, account access, requested generation, private storage, delivery and purchase fulfillment support our contract with you. Security, fraud prevention, moderation and abuse investigation support legitimate interests in protecting users and the service. Tax, accounting and legally required disclosures support legal obligations. Optional analytics and promotional use require the appropriate consent basis. You can withdraw optional consent without affecting earlier lawful processing.
5. Providers, platforms and models
Vercel hosts the website. Neon and Neon Auth handle application records and authentication. Cloudflare R2 stores private uploads and generated media. Video requests send reference images, lyrics and scene instructions to fal.ai using Vidu Q4 Reference-to-Video (fal-ai/vidu/q4/reference-to-video). Cartoon-twin requests send the authorized portrait and character instructions to APIMart using its GPT Image 2 endpoint (gpt-image-2). APIMart is the API intermediary; we do not claim a direct OpenAI processing contract. Waffo Pancake handles hosted payments when enabled and Prompt Sift for prompt safety screening. SeeAPI handles image and sampled-video safety assessment using nsfw-filter / image-moderation and video-nsfw-filter / video-moderation. These are the configured integrations; this notice does not claim completed production acceptance for every provider.
6. NSFW screening and human review
Prompts require Waffo semantic screening. Input images and generated cartoon candidates receive SeeAPI checks and authorized human review before use. Completed videos require SeeAPI screening of 32 sampled frames and human safety and quality review before delivery. SeeAPI can receive short-lived private image links or provider output links; moderation records retain the references needed to resume an unresolved assessment. Provider safety checks remain enabled. Missing, failed or inconclusive required checks cannot approve content. Sampling does not inspect every frame or certify the audio, identity consent, copyright or all prohibited categories. Authorized reviewers may inspect portraits, characters, lyrics and video outputs for these purposes.
7. Private media and model training
We do not sell your personal information, automatically publish your media in a public gallery or use it for marketing without separate permission. We do not train our own models using private inputs or outputs. External AI and safety providers have their own processing, retention and training terms; we do not promise zero retention or a universal training opt-out without verified provider settings.
8. Storage, deletion and retention
The workspace supports deletion of eligible inactive uploads and completed or failed outputs. Access is revoked first; storage cleanup failures remain pending for retry. Active or uncertain submissions require reconciliation before deletion. The planned cleanup removes eligible inputs after 7 days and outputs after 30 days, but the automatic job is not yet scheduled or verified in production. The launch retention schedule is: account profile data while the account is active and up to 30 days after a verified closure request; support correspondence for 90 days after resolution; completed task and moderation records for 90 days after completion; security and service logs for 90 days; and basic transaction and credit-ledger records for 3 years after the transaction. Records required as statutory accounting vouchers or books are retained for the applicable legal period, which may be 30 years under Chinese accounting rules. We keep only the necessary record categories for a documented legal obligation, dispute, security investigation or unresolved reconciliation, then delete or anonymize them when that need ends. Media follows the shorter 7- and 30-day schedule above. These limits are our service policy, not a fixed Waffo requirement. Automatic enforcement of the full schedule is not yet implemented; it must be operational before paid launch. Deleting our copy does not instantly erase provider copies, backups or files already downloaded.
9. Cookies and communications
Essential authentication and security cookies support login. Optional analytics is currently disabled. The optional Google Analytics integration, if enabled after consent, is covered by https://policies.google.com/privacy; private media, passwords and payment details must not be sent to analytics. We do not currently send promotional campaigns. Any future marketing requires an appropriate consent basis and an unsubscribe route. Registration does not enroll you in marketing.
10. Security and international processing
We use HTTPS, private storage, short-lived signed access, ownership checks and server-side credentials. No system is completely secure. Where GDPR applies, qualifying breaches must be reported to the supervisory authority within 72 hours of awareness; affected people are notified without undue delay where required. Hosting, authentication, AI, moderation and payment services may process data outside your country. Applicable transfer safeguards and provider retention arrangements must be verified before commercial launch; contact support for the arrangements applicable to your data.
11. Adults and your rights
Account holders and depicted real people must be at least 18 and legally able to consent. Do not upload minors or unnecessary sensitive information. Depending on applicable law, you may request access, correction, deletion, restriction, portability, object to processing, withdraw consent or request human review of a restriction. Contact support@cartoonvideogenerator.com with an account or task reference. We verify identity and aim to respond within 30 calendar days or explain a lawful extension. You may complain to your local data protection authority. Do not email passwords, payment card details or illegal imagery.
12. Changes
Material changes will normally be announced on the website or an account contact channel at least 15 days before taking effect. Urgent legal or security changes may take effect sooner. We will not silently repurpose previously collected private content for new training or marketing uses through a retroactive policy change.
Contact: support@cartoonvideogenerator.com. Waffo mailbox verification is complete; purchases are closed.