Privacy Policy
How Seedance3 collects, uses, and protects personal information
1. Introduction and Data Controller
Tang Yi ("Seedance3," "we," "us," or "our") operates Seedance3, an AI image and video generation service available at https://seedance3.lol (the "Service"). This Privacy Policy explains how we collect, use, retain, disclose, and protect personal information when you use the Service, and the rights available to you.
Tang Yi is an individual / sole trader operating under the laws of the Hong Kong Special Administrative Region of the People's Republic of China. You can contact us about privacy matters at support@seedance3.lol. We have not appointed a data protection officer.
2. Personal Information We Collect
2.1 Information You Provide
We may collect:
- Account information, including your name, email address, profile image if provided, and authentication credentials. Passwords are handled using authentication security controls and are not stored as plain text.
- Authentication information from Google when you choose Google sign-in, such as the profile information Google authorises us to receive.
- Payment and credit information, including transaction identifiers, amounts, payment status, subscription status, invoice and credit-transaction records. We do not receive or store full payment-card details.
- Communications, including messages, requests, feedback, and other information you send to support.
- Creative inputs and outputs, including prompts, reference images, generated images and videos, generation settings, task status, and related creation history.
2.2 Information Collected Automatically
We may collect session and technical information, including IP address, browser type, device and operating-system information, user-agent data, timestamps, language preference, session identifiers, pages visited, feature interactions, request logs, error logs, and security or fraud-prevention signals.
3. How We Use Personal Information
| Purpose | Typical legal basis where applicable |
|---|---|
| Create and administer accounts; authenticate users; provide image and video generation | Performance of a contract |
| Process payments, subscriptions, credits, refunds, and billing support | Performance of a contract; legal obligation |
| Deliver, store, display, and maintain generation results and history | Performance of a contract |
| Respond to support requests and service communications | Performance of a contract; legitimate interests |
| Protect the Service, investigate abuse, prevent fraud, and maintain security | Legitimate interests; legal obligation |
| Measure use and improve the Service through analytics | Legitimate interests, subject to applicable consent requirements |
| Comply with law, resolve disputes, and enforce agreements | Legal obligation; legitimate interests |
We do not currently send promotional marketing emails. We may send necessary service communications, such as account verification, password reset, security, billing, subscription, refund, and material-policy notices.
We may create aggregated or de-identified information for analytics and operational purposes. We do not use your creative inputs or outputs to train, fine-tune, or improve AI models unless you expressly permit it or applicable law requires otherwise.
4. Cookies and Analytics
We use strictly necessary cookies and similar technologies to support login, session security, language preference, and core Service functionality. You can restrict or delete non-essential cookies through your browser settings; doing so may affect some features. The Service currently does not provide a separate in-product cookie-preference centre.
In production, we use:
- Google Analytics to understand website usage and improve the Service.
- Microsoft Clarity to understand site interactions and improve usability.
These providers may use cookies or similar technologies. Where consent is required by applicable law for non-essential cookies, we will obtain it before placing or reading them.
5. How We Share Personal Information
We do not sell your personal information, including as that term may be defined under applicable privacy laws. We disclose personal information only as necessary for the purposes described in this policy:
- Payment processing: Waffo Pancake processes hosted checkout and payment-card information. We receive transaction and subscription information needed to provide the Service; we do not store full payment-card details on our servers.
- Authentication: Google may provide authorised profile information when you choose Google sign-in.
- Email delivery: Resend delivers transactional emails such as account verification and password-reset messages.
- Storage and hosting: We use S3-compatible object storage, including Cloudflare R2 in the current media-archive deployment, to store user-uploaded reference media and generated results.
- AI processing: When you select a model, we send the inputs necessary to process that request to the applicable third-party AI provider, which may include OpenAI, Gemini, Seedance, or another provider supporting the selected model.
- Analytics: Google Analytics and Microsoft Clarity receive relevant technical and usage information as described above.
- Legal, safety, and business transfers: We may disclose information where required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets, with appropriate notice where required.
Service providers may process information only under their applicable terms, confidentiality commitments, and data-protection obligations.
6. International Data Transfers
Our service providers may process personal information in countries or regions other than where you live, including in connection with payment, AI processing, analytics, cloud storage, and email delivery. Where required, we use appropriate safeguards for cross-border transfers, such as contractual data-protection commitments, Standard Contractual Clauses or equivalent mechanisms, and transfers to recipients subject to an adequate level of protection.
7. Security
We use reasonable administrative, technical, and organisational safeguards designed to protect personal information, including HTTPS/TLS in transit, authentication controls, access restrictions, credential security measures, and logging for reliability and abuse prevention.
No system is completely secure. You are responsible for keeping your account credentials confidential. If a security incident affects your personal information, we will investigate and provide notices to affected individuals and regulators as required by applicable law.
8. Data Retention
We retain personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law.
| Data type | Retention period | Treatment |
|---|---|---|
| Account information and account-linked creation records | Delete or anonymise within 30 days after account deletion, except where retention is needed for law, disputes, fraud prevention, or security | Delete or anonymise |
| Payment, invoice, subscription, and credit-transaction records | 7 years | Delete, anonymise, or archive securely when no longer required |
| Security, access, and error logs | 12 months | Delete or anonymise |
| Temporary uploaded media awaiting processing | Normally scheduled for deletion after 24 hours if not retained as part of a completed creation | Delete |
| Generated media, prompts, reference media, and creation history while an account remains active | 30 days | Delete |
| Support communications | For as long as reasonably necessary to resolve the request, maintain records, and meet legal obligations | Delete or anonymise when no longer needed |
9. Your Privacy Rights
Subject to applicable law, you may request access to, correction of, deletion of, restriction of processing of, or objection to processing of your personal information. You may also request portability of information you provided to us in a machine-readable form, and withdraw consent where processing is based on consent.
To make a request, email support@seedance3.lol from your registered email address and describe the request. We may need to verify your identity before acting. We aim to respond within 30 calendar days; where the law requires a shorter period, we will comply with that requirement. You may also have the right to complain to the data-protection authority in your place of residence or where you believe your rights were infringed.
10. Children
The Service is intended only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe that a child has provided personal information to us, contact support@seedance3.lol and we will take appropriate steps to delete it.
11. Third-Party Links and Services
The Service may link to third-party websites or use third-party services. Their privacy practices are governed by their own policies, not this policy. Review those policies before using third-party services.
12. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will provide notice through the Service, by email, or by another reasonable method at least 14 days before the change takes effect where required or reasonably practicable. The "Last Updated" date will show when this policy was last revised.
13. Contact Us
For privacy questions or requests, contact:
- Privacy and support: support@seedance3.lol