1. Introduction

Inflyu ("we", "us") is an AI tool for making and editing photos, videos and audio. This policy explains what we collect, why, who receives it, how long we keep it and how you control it. It covers inflyu.com, our mobile app, and Inflyu inside AI assistants and partner apps such as ChatGPT, Canva, Adobe Express and Shopify.

2. What We Collect

Data	What it includes
Account	Name, email address, password (stored hashed), sign-in provider, avatar and preferences.
Payments	Plan, credit balance and purchase history. Stripe handles card details; we do not store your card number.
What you give the tools	Photos, videos, audio, voice samples, product photos, links you paste and the prompts you write. These can show or describe you and other people.
What the tools make	Your results, the settings used, job status and error messages.
Connected accounts	Access to the social accounts you connect, and the posts you schedule through them.
Support	Your messages to us and to the support chat.
Usage	Pages viewed, buttons used, referral and campaign tags, browser and device type, and errors.
Fraud signals	Keyed hashes of your IP address, email and a device signal built from canvas, GPU, screen, timezone and language.

3. Why We Use It

To run the tools you ask for: send your input to AI providers, store the result and show it to you.
To check inputs and outputs: automated checks read your prompts, photos and sampled video frames to block illegal or unsafe requests, to detect people and faces for the edit you chose, to estimate whether someone looks under 18, and to judge whether a result worked.
To bill you: charge credits, process payments and refund failed jobs.
To prevent abuse: limit free credits to one allowance per person and detect fraud.
To contact you: account, job and billing messages, and marketing email you can unsubscribe from.
To measure and advertise: understand use of the product and measure our ad campaigns (see section 6).
To improve results: we keep a record of each finished job, including your prompt, the prompt we rewrote from it, a description of the input, the outcome and a text embedding of the prompt. We use it to tune which model and prompt work best. On some video edit tools, a well-rated prompt can, after names and identifying details are scrubbed automatically, be shown to our prompt-writing AI as a style example when it writes prompts for other users. Your photos and videos are never used that way. To opt out, email [email protected].

Model training: we do not use your files to train AI models for other users. The one exception to training at all is your own request: when you start the Trained Identity tool, your character's photos train a private model stored in your account for your use.

EU and UK legal bases: we rely on the contract with you to run the service, on your consent where we ask for it, on our legitimate interests for security, fraud prevention, measurement and improving results, and on legal duties for tax and safety records.

4. Inflyu Inside ChatGPT and Other AI Assistants

You can connect Inflyu to AI assistants such as ChatGPT, Claude and OpenClaw. You sign in to your Inflyu account and approve the connection, and the assistant receives an access token for your account. It does not receive your password. Access tokens last one hour and refresh tokens 30 days.

In ChatGPT, the Inflyu tools take and return the following:

Tool	What we receive	What goes back to the assistant
list_video_tools	Nothing from you	The tools, their limits and prices
quote_video_edit	Tool, duration and edit type	The price, your credit balance and the balance after the edit
run_video_edit	The video and reference photo you attach, your prompt (up to 2,000 characters), preset, edit type and duration	The job id, its status and the credits charged, or what is needed to continue
get_video_edit	The job id	Status, progress, the link to the finished video, any error, and credits refunded
get_balance	Nothing from you	Your credit balance

We fetch attached files from ChatGPT's file links, store them in our storage under your account and send them on for the checks and AI providers in section 6. In ChatGPT, sampled frames of each video always go to OpenAI's moderation service, and the edit does not run if the check cannot complete. Each edit is saved in your Inflyu library with its prompt, and we log your account id and the assistant's name when it connects.

We do not receive or store your chat history with the assistant, your other chats or your other files: only what the assistant sends to run a tool you asked for. The assistant's own privacy policy covers what it does with the results it receives.

To disconnect, remove the connection in the assistant, or use Settings → Developer → Disconnect all apps in Inflyu.

5. Inflyu Inside Partner Apps

Canva and Adobe Express: you sign in with your Inflyu account. We receive the photos you upload in the panel and your tool choices, such as style, shape, duration or a prompt, and return the result to the panel. We do not receive your other designs or your password for those apps.
Shopify: we receive your shop domain, an access token (stored encrypted) and the product photos you choose, and we save results back to the product you pick. We do not collect your customers' data. When you uninstall, we drop the token. When Shopify asks us to erase a shop, we delete its files, results and credit wallet, and keep only the shop domain and charge records as a billing record.

Photos sent from these apps go through the same checks and AI providers as in the app.

6. Who Receives Your Data

We do not sell your personal information for money. These recipients get data as described:

Recipient	What they receive	Why
fal.ai, and the models it runs (including ByteDance, Kling, MiniMax, PixVerse, Google, xAI, Topaz and ElevenLabs). Runway, Replicate and KIE when those engines are used.	Your files, as links, and your prompts	Generating and editing
OpenAI	Prompts, photos and sampled video frames; text for embeddings	Safety checks, prompt writing, understanding inputs
Google (Gemini)	Prompts, photos and sampled video frames	Inspecting inputs and results, prompt writing
Anthropic	Prompt text	Prompt writing and text tasks
Cloudflare R2, Neon, Vercel, Upstash	Files, account and job data, logs, job messages	Storage, database, hosting, queues
Stripe	Email, name, purchases and card details	Payments
Resend	Email address, name, message content	Sending email
Sentry	Errors and some session replays (text masked, media blocked)	Fixing bugs
Google Tag Manager, Meta Pixel, TikTok Pixel, Vercel Analytics	Page views, sign-up and purchase events, cookies and device data	Measurement and ad campaigns
Post for Me, and the social networks you connect	Your posts, media and connection grants	Publishing what you schedule
Google	Sign-in identity, if you use Google sign-in	Signing in
PromoteKit and affiliates	If you came through an affiliate link: your email and commission-earning payments	Paying affiliates
Apify, SerpAPI, Tavily, Brandfetch	Public links, names and search terms you enter	Fetching public posts and brand details
Namsor	The name on your account, once, when you create your first AI influencer	Suggesting default character settings
Telegram	Your chat id and results, if you link the bot	Delivering results
Slack (our team workspace)	Sign-up notices and internal alerts	Running the service
ElevenLabs	Your own ElevenLabs key, if you add one	Listing your voices

Each provider handles what it receives under its own terms and may keep it for a period those terms set. We may also disclose data where the law requires it, to protect our rights or users, or in a merger or sale of the business. These companies may process data outside your country, including in the United States.

7. How Long We Keep It

Data	How long
Files uploaded in the app and not used in a result	24 hours
Your results, and files sent through ChatGPT, other assistants, partner apps or the API	Until you delete your account or ask us to remove them
Clean download copies	7 days
Working data of a job	Cleared after 24 hours
Guest generations	72 hours
Support chat messages	3 days
Account, credit history, job records and prompt records	Until you delete your account
Usage events	No fixed period. They carry an account id, and stay after deletion without your name or email attached
Keyed hash of your email, and of your sign-up signals	Kept after deletion so free credits cannot be claimed twice
Payment records at Stripe	Kept by Stripe after deletion, for billing and tax
Database backups and server logs	Until they age out with our providers; no separate period is set by us

8. Your Choices and Rights

Delete a result: it leaves your library at once, and its share link and any public gallery listing end. The stored file stays until you delete your account or ask us to remove it.
Delete your account: Settings → Profile. This removes your account, results, uploads, voice samples, trained models and prompt records, cancels your subscriptions and disconnects your social accounts, apart from what section 7 says is kept.
Disconnect apps: Settings → Developer → Disconnect all apps, where you can also manage API keys.
Marketing email: use the unsubscribe link in any marketing email.
Cookies: your browser settings; see the Cookie Policy.
Anything else: email [email protected] to get a copy of your data, correct it, remove stored files, opt out of prompt examples, or object to or restrict a use. Depending on where you live, you may have these rights by law, including withdrawing consent and complaining to your data protection authority.

9. Security

We use encrypted connections, hashed passwords and encrypted store tokens, and we limit who can reach production data. Result and upload links are long and hard to guess but are not access-controlled: anyone who has a link can open the file, so share links with care. No system is fully secure, and we cannot guarantee absolute security.

10. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, measure use and measure ads. The Cookie Policy lists them and your choices.

11. Other Websites

Links to other websites and services are covered by their own privacy policies, not this one.

12. Children's Privacy

Inflyu is for people aged 18 and over, and we do not knowingly collect personal information from children. If we learn we hold a child's data, we delete it. Automated checks block sexual content involving minors and edits of people who look under 18. When a request is blocked as child sexual abuse material, our logs keep a short excerpt of the prompt, a hashed IP address and the account id.

13. Changes to This Policy

When this policy changes, we post the new version here and update the "Last updated" date.

14. Contact Us

Questions or requests about your data: [email protected]

Privacy Policy