Privacy Policy

About this policy

Ghost Photoshoot AI Generator (the “Service”, “we” or “us”) operates at https://ghostphotoshoot.org and creates AI sheet-ghost videos and autumn portraits from one photograph of a person, pet or friends. This policy covers the website, accounts, purchases, uploads, generated media and support services. For privacy questions or requests, email support@aihalloweencostume.io.

Operator and contact details

Ghost Photoshoot AI Generator is operated by Guangzhou Shengyan Technology Co., Ltd., a company registered in mainland China.

Correspondence address: Room 1201, Zone A1, No. 19 Courtyard, Yuancun West Street, Tianhe District, Guangzhou, China.

Customer support and privacy requests: support@aihalloweencostume.io. This is the designated contact email for Ghost Photoshoot, including requests from people without an account. You may also open a support ticket when signed in.

We are responsible for the personal data processing described in this policy. Where applicable data protection law uses that term, we act as the data controller for this processing.

Information we process

• Account data: your email address, name, profile information, authentication records and session information. If you choose an available third-party sign-in option, we receive the account information needed to sign you in.
• Uploaded content: the single photograph you submit. Faces and other identifying details in photos may be personal data. Only submit photos you are entitled to use, with the necessary permission from the person pictured.
• Generation data: selected quality, permission confirmation, task identifiers, status, timestamps, errors, reference frames, generated videos, four scene portraits and credit usage. The scene instructions are supplied by the Service; you do not need to upload a video template.
• Purchase data: orders, payment status, transaction references, credit balances and refunds. Payment details are handled by the payment provider presented at checkout; we do not store full payment-card details.
• Technical and support data: information needed for security and troubleshooting, such as IP addresses, request information and messages you send us. Please do not send passwords or API keys in support messages.

Why we use information

We use this information to authenticate accounts, process uploads, request and deliver videos and portraits, manage payments and credits, resolve failed tasks, answer support requests and prevent fraud or abuse. We also retain records needed to meet legal obligations and resolve disputes.

Where data protection law requires a legal basis, providing a requested service relies on performance of a contract; security and service administration rely on legitimate interests, subject to your rights; required records rely on legal obligations; optional processing requiring consent relies on that consent. Permission to use another person's photo does not remove our own data protection responsibilities.

We do not sell your personal data or use your uploaded photos to train our own AI models. This statement does not promise that an external AI provider has the same retention or training policy.

AI providers and other recipients

• AI generation: we use PolarisCore to access Nano Banana image generation and Seedance video generation. Your uploaded image, generated reference frames and scene instructions are sent as needed to produce your requested results. PolarisCore and its upstream model providers process those inputs. Their retention and data-use practices may differ from ours; contact us with your task reference for information about the processing of a particular request.
• Storage and hosting: Cloudflare hosts the website and database. Cloudflare R2 stores and delivers uploaded images, intermediate media and finished videos and portraits.
• Analytics: Google receives website usage and device information through Google Analytics, as described below.
• Payments, sign-in and email: the providers used for your chosen checkout, sign-in or service email process the information necessary for those functions.
• Legal requests: we may disclose information where required by law or necessary to protect users, investigate abuse or establish legal claims.

Providers may process data in countries other than your own. Applicable data transfer requirements depend on the providers and jurisdictions involved. Contact us for information about providers used for your request. Their own policies may also apply, including to copies processed on their systems.

Storage, links and deletion

Uploads are assigned randomized filenames. We use uploaded images as generation inputs. Cleanup runs after processing and through scheduled maintenance, but failed or incomplete tasks may retain input images, reference frames and partial outputs for troubleshooting and recovery. A failed-task credit return does not itself erase those files. Unused uploads expire after approximately 30 minutes and become eligible for scheduled cleanup. Expiry is not a guarantee of immediate file deletion: cleanup schedules, outages or storage errors can delay removal.

Finished videos and portraits remain available through your account unless you delete the associated result or we remove it under these policies. Use the result's Delete action or contact us to request removal. Download any result you wish to keep; the Service is not a permanent backup. Any newly introduced automatic video expiry will be disclosed before it applies.

Media URLs allow the generation provider to retrieve inputs and let you download results. Anyone who obtains one of these URLs may be able to access the file without signing in. Random filenames reduce accidental discovery but are not access controls. Do not upload confidential material or share links you wish to keep private.

We retain account and service records while needed to operate your account, with longer retention where required for billing, security, legal obligations or disputes. Deleting a video does not automatically erase its billing or task records. Deletion from our storage cannot remove copies already downloaded, shared or retained independently by external providers.

Cookies and preferences

We use session cookies and browser storage for sign-in, security and preferences such as theme. Blocking essential cookies may prevent sign-in or purchases.

Google Analytics is disabled until you select “Allow analytics” in Cookie Settings. Selecting “Reject analytics” or closing the banner leaves it disabled. You can reopen Cookie Settings on any page to withdraw consent; this stops future Analytics collection and removes accessible first-party Analytics cookies without signing you out. Withdrawal does not delete data already received by Google. Your choice is remembered in a first-party cookie for up to 365 days.

With your consent, we use Google Analytics 4 to measure visits and navigation between pages and understand how the website is used. The Google tag sends information such as the page URL, referring page, browser and device information, and online identifiers to Google. Analytics may use cookies or similar technologies. This analytics purpose is separate from processing your uploaded media to generate a result.

Read how Google uses information from sites that use its services and Google's Privacy Policy. You can manage cookies in your browser and use Google's Analytics opt-out browser add-on. These controls do not cancel your account or generation requests.

Your choices and rights

You can request access, correction, a copy or deletion of your personal data by emailing support@aihalloweencostume.io or through account support. We may verify your identity before acting. Depending on applicable law, you may also object to or restrict processing, withdraw consent for processing based on consent, and complain to your local data protection authority. Withdrawal does not affect the lawfulness of earlier processing. We will respond within the time required by applicable law and explain any lawful limits on deletion.

Children and security

The Service is not intended for children under 16 or anyone below the applicable local minimum age. Human-photo generation is intended for adults; do not upload children's photos. Contact us if you believe a child has provided information without the required permission.

We use safeguards intended to protect accounts and service data, but no online service or transmission is completely secure. Keep your account credentials and media links private.

Policy updates

The date above identifies this version. We will give appropriate notice of material changes and seek consent where required before starting a new consent-based use of your information. See also our Terms of Service.