Privacy Policy

1. Who is responsible and how to contact us

huang yi wei operates Zombie Couple Videos at https://zombiecouplevideos.com and is responsible for the personal information described here. For access, correction, deletion, account closure, privacy complaints or questions, email support@zombiecouplevideos.com with subject Privacy request. This policy covers actual current processing; it does not imply that future video generation or payments are already available. See also our Terms of Service.

2. Local photographs and information we collect

Photographs selected in the public scene planner are decoded in your browser for validation and display. They are not uploaded by this planner, sent to an AI provider, or stored in our account database. Clearing the form, leaving/reloading the page or changing languages removes the selection. We do not perform face recognition, extract face embeddings or create biometric identity profiles in this preview. Downloaded files remain on your device until you delete them.

If you create an account, we process the details you supply (such as email and display name), a securely hashed password, session/account identifiers and account permissions. Passwords are not stored in readable form. Support messages contain the information you choose to send. Ordinary hosting requests can include IP address, request URL, time, browser/device details and security/error events. Do not include passwords, card details or sensitive personal material in support messages.

3. AI tasks, providers and purposes

The current administrator-only image generator uses Grok Imagine Image (grok-imagine-image) through ai.lingshuku.com. We send a fixed original-scene prompt and output format to that provider; the tool does not accept your locally selected photos. We store task identifiers, requesting account ID, model, prompt, status, timestamps and generated images to operate the tool, prevent duplicate jobs and make private downloads available. Only the owning authorized administrator can access those image assets through the application. No public image gallery is created automatically.

We use account information to authenticate and provide requested account features; support information to answer requests and resolve complaints; task data to deliver and troubleshoot authorized image work; and limited request/security information to prevent abuse and maintain service. Applicable legal bases include performance of the requested service, legitimate interests in security/support, consent where required, and legal obligations. We do not sell personal data or use selected photos for advertising or to train our own models.

The intermediary's upstream processing locations, retention periods and model-training settings have not been independently verified. Do not submit confidential or personal-photo material to this administrator-only tool. No production video provider is currently selected and verified. Before enabling user-photo processing or public video generation, we must disclose the actual provider/model, purposes, transfer/storage arrangements and retention controls and obtain any required consent. This policy does not authorize undisclosed future processing.

4. Storage locations, recipients and transfers

The website runs on Cloudflare Workers. Account and task records are stored in Cloudflare D1, and administrator-generated image files in a separate private Cloudflare R2 bucket. Cloudflare operates distributed infrastructure; this deployment does not specify an EU-only or single-country jurisdiction and we do not promise that processing remains in your country. The precise data-centre location is not exposed to end users. Provider or support processing can involve international transfers. We use necessary safeguards required by applicable law; contact support for information about safeguards applicable to your request.

The image intermediary receives only the prompt/format required for current image jobs. Messages sent to our support address are forwarded to the operator's Google Gmail mailbox. Hosting, email and authorized service providers may process data for their respective service functions. We may disclose limited information where legally required, to protect people or to investigate abuse; we do not publish your account information. Waffo Pancake is the intended future payment provider, currently not active for this site's checkout. If activated, card data is to be handled by its checkout, while we retain only necessary order/entitlement records; this will be disclosed before purchases open.

5. Cookies and website resources

Essential session/security cookies operate account login; a language preference records your selected locale. External resources, such as fonts and reference media, may make requests to their hosts, which receive ordinary request metadata. Optional analytics or advertising must be disclosed and obtain consent where required before activation. You can clear or block cookies in your browser, but login and saved preferences may stop working. We do not claim that all cookies are anonymous or that consent to tracking is required to view the site.

6. Retention and deletion periods

• Local planner photos: browser-session only; no server retention by this planner.
• Account/profile and related task records: retained while the account is active, unless you request earlier deletion of removable records. They are not currently subject to an automatic inactivity purge.
• Administrator-generated images: private storage until the operator removes them or an applicable deletion/account-closure request is processed; there is no automatic expiry currently configured. Download anything you need before requesting deletion.
• Support correspondence: normally deleted within 12 months after the matter closes, unless an unresolved dispute or legal obligation requires limited continued retention.
• Deletion/account-closure requests: after proportionate identity verification, we aim to remove personal data under our control within 30 days, with any legally required extension explained to you. We instruct relevant processors where applicable. Limited records needed for security investigations, fraud, tax or legal claims may be retained for the necessary applicable period; we explain exceptions rather than claiming every record disappears immediately.

We do not control provider infrastructure logs or independent provider records; their retention follows their applicable terms and legal duties. We do not promise immediate erasure from third-party backups or a verified fixed backup lifetime. Data subject to a deletion obligation must not be restored to ordinary use from a backup. No paid-order retention period is represented as already operating while checkout is closed.

7. Your data rights and account closure

Depending on applicable law, you may request access to and a copy of your personal data; correction of inaccurate data; deletion; restriction of processing; a portable copy where available; objection to processing based on legitimate interests; withdrawal of consent without affecting earlier lawful processing; and a complaint to your competent data-protection authority. We do not make decisions with legal or similarly significant effects solely by automated profiling.

Email support from your account email and specify Access, Correction, Delete data or Close account, with the relevant account/task identifiers. Do not send identity documents unless we explain why a limited identity check is necessary. We aim to acknowledge within 2 business days and respond or complete a valid request within 30 days. If applicable law permits an extension or requires a shorter period, we follow it and explain any delay. Requests are normally free; any legally permitted fee for clearly excessive requests must be explained in advance.

Account closure revokes access and starts deletion of removable profile, session and associated personal task data under our control; we explain any legally retained record and its basis. Any future active subscription must also be canceled to stop renewal, and support will handle both when your closure request identifies it. For local photos and downloaded files, delete them in your own browser/device; we cannot remotely erase your copies. There is no requirement to give a reason for closing your account.

8. Security, children and changes

We use access controls, authenticated private downloads, HTTPS and server-side secret management. These measures reduce risk but cannot guarantee perfect security. Restrict access to your account and tell support about suspected exposure. This service is for adults aged 18 or older, and must not be used to submit children's personal information. Report suspected child data so we can investigate and remove it where applicable.

The effective update date appears above. Material privacy changes will be explained before new processing starts, ordinarily with at least 14 days' notice where practicable. New uses requiring consent will not rely solely on continued browsing. Contact support if you want the processing details or to exercise any right.