Privacy Policy

This policy explains what Toy Car to Real Car AI collects at toycartorealcarai.org, why, who processes it and how long we keep it. The service makes videos of cars, so the only photo we ask you for is a photo of a car.

What we collect

• Account data: your email address, and the name and profile picture that Google shares if you sign in with Google.
• Your car photo: the photo you upload to make a video.
• Generated videos: the videos made for you.
• Payment data: handled by Waffo, our merchant of record. We receive the order status and your email address, never your full card number.
• Usage and device data: pages visited, basic device and browser information, and your IP address, used for security and rate limiting, and in aggregate by our analytics, pvuv.ai.
• First-visit source: a first_touch cookie (90 days) and first-party cookies for UTM tags and the referring site record how you first found us (the source, campaign, referring site and first page), so we can tell which channels work. They are attached to your account when you sign up or start a checkout.

How your photo is processed

Your photo is stored in our Cloudflare R2 storage. Our video provider and our moderation provider fetch it through a short-lived private link to make and check your video. It is deleted automatically after 2 days; our records then keep only a link and a fingerprint used to prevent duplicate uploads. Keep people out of the photo: we make videos of cars only. The video keeps the number plate as it is in your photo, so cover or crop it out before you upload if you don’t want it seen.

How we use it

• To make and deliver your videos, and to email you when one is ready.
• To run automated safety checks on photos and videos.
• To process payments and plans, prevent fraud and abuse, and provide support.
• To improve the site using aggregated analytics.

We do not use your photos or videos to train AI models, and we do not sell your personal data.

Who processes it

• Video generation: kie.ai, which runs Kling 4.0 for us, receives your photo and our template clip.
• Safety checks: SeeAPI checks photos and finished videos.
• Hosting, database and storage: Cloudflare, including R2 for photos and videos.
• Email: Resend sends sign-in and “your video is ready” emails.
• Payments: Waffo processes packs and monthly plans.
• Sign-in: Google, if you choose to sign in with Google.
• Analytics: pvuv.ai, which counts page views through a script on our pages and receives a few events from our server, such as a finished sign-up or purchase.

These providers process data only to provide their service to us.

How long we keep it

• Uploaded photos: 2 days, then deleted automatically.
• Finished videos: 14 days, then deleted automatically.
• Account and order records: while your account is active, and as long as tax and accounting rules require.

Your choices and rights

You can ask us to access, correct or delete your data, or to delete your account, by emailing support@toycartorealcarai.org. You can cancel a monthly plan at any time; see the terms of service. Depending on where you live (for example the EU, the UK or California) you may have more rights, and you can complain to your local data protection authority.

Children

The service is for adults 18 or older and is not directed at children. If you believe a child has given us personal data, email us and we will delete it.

Changes and contact

We will post any change to this policy here with a new date. Questions: support@toycartorealcarai.org, or see the contact page. For what you may upload, see the acceptable use policy.