Privacy Policy

Last updated:

This policy explains how You Never Let Her Pay ("we") processes personal data when you use You Never Let Her Pay at youneverletherpay.com. It is referenced by our Terms of Service.

1. Who is responsible

2. Data we collect

For personalized videos, we process your uploaded photo, generated scene images and video. Images are generated with Google Nano Banana Pro and videos with Alibaba Wan 3.0 through fal.ai. SeeAPI processes photos and sampled video frames for content moderation. Cloudflare stores and composes media, and Resend sends delivery emails. These processors handle data under their own policies.

  • Account data: email address, and name and profile picture if you sign in with Google.
  • Billing records: order number, plan, amount, currency and payment status. Card details are collected and processed by our payment processor, not by us.
  • Activity records: the time of purchases, generations and downloads, the files involved, your country and salted one-way hashes of your IP address and browser identifier — used to prevent fraud and to answer payment disputes.
  • Technical data: IP address, browser user agent and request logs, used for security, abuse prevention and rate limiting.
  • Visit statistics (first party): for each visit we keep the pages seen, the referring site, device type, country and the date, under a key derived from a one-way hash of your IP address and browser identifier with a salt that changes every day. No cookie is set, no IP address is stored and visits on different days cannot be linked. These statistics are kept for 90 days and are used only to understand how the site is used.
  • Cookies: a strictly necessary session cookie that keeps you signed in.
  • Analytics cookies: see section 5.

3. How we use it

  • To provide the Service you request (performance of a contract).
  • To prevent fraud and abuse and keep the Service secure (legitimate interests).
  • To respond to refund requests and payment disputes, using billing and activity records (legitimate interests).
  • To process payments and meet tax and accounting obligations (legal obligation).
  • To send essential service emails such as sign-in codes and receipts.
  • To measure usage of the Service, with your consent where the law requires it (see section 5).

We do not sell your personal information.

4. Who we share it with

We share data only with service providers that process it on our behalf:

  • Cloudflare — hosting, storage, security and bot protection (Turnstile).
  • Resend — delivery of transactional emails.
  • Google — if you choose "Sign in with Google".
  • Waffo Pancake — payment processing. Payment card data is processed exclusively by our PCI-DSS certified payment processor and is never stored on our servers.
  • Google Analytics — usage measurement, with consent (Google Privacy Policy).

We may also disclose data when required by law.

5. Cookies and consent

Google Analytics cookies: if you are in the European Economic Area, the United Kingdom or Switzerland, a consent bar asks you first and the cookies are set only after you accept them ("Accept all", or "Customize" to choose per service). Elsewhere they are on by default and no bar is shown. Without consent, or after you reject them, Google Analytics does not set or read cookies; it may receive basic cookieless signals (for example, that a page was viewed). You can change your choice for each service at any time with "Cookie settings" at the bottom of every page.

6. International transfers

Our providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

7. Retention

Personal video inputs, intermediate images and finished videos in our storage expire 3 days after a task succeeds or fails. Download access stops at expiry; automated deletion normally runs within 5 minutes. Unpaid checkout photos expire after 24 hours. We retain order, credit and request identifiers for accounting and support. These storage limits do not promise deletion from third-party processor systems.

  • Account data: while your account exists, then deleted or anonymised within 30 days of account deletion.
  • Billing records: 7 years, to meet tax and accounting law.
  • Activity records: 540 days (the period in which a card payment can still be disputed).
  • Server and security logs: 30 days.
  • Abuse-prevention counters (salted one-way hashes of IP addresses and email addresses, used for sign-up and email rate limits): at most 2 days.
  • A salted one-way hash of your email address, kept after account deletion so free sign-up credits cannot be claimed repeatedly. It cannot be turned back into your email address.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. You can delete your account yourself from your account page. To exercise other rights, email support@youneverletherpay.com. You may also complain to your local data protection authority.

9. Children

The Service is not intended for anyone under 13. We do not knowingly collect data from children under that age.

10. Security and breaches

We use encryption in transit, access controls and least-privilege access to protect your data. If a breach affects your personal data, we will notify you and the relevant authority without undue delay and, where required, within 72 hours of becoming aware of it.

11. Changes

We will post updates here and change the date at the top.