Privacy Policy

Effective date: October 18, 2026

This Privacy Policy explains how the operator of this deployment of Flying Car Video Generator (the “Service”) handles information when you use the AI video generator. The operator is the person or organization that made the deployment you are visiting available.

Information processed by the Service

The Service may process:

• Your submission: the vehicle photo you upload, your optional prompt, and the duration and resolution you select.
• Generated media: the video produced from your submission.
• Account data: your name, email address, password hash or authentication-provider credential, session information, optional profile image, credit balance, and account timestamps.
• Purchase records: the credit pack selected, amount, currency, order and payment identifiers, payment status, credit grants, and related timestamps. Card or wallet credentials are collected and processed by Stripe on its hosted checkout pages; the Service does not store full payment-card details.
• Request and security data: information normally included with an internet request, such as an IP address, browser and device information, timestamps, and diagnostic or abuse-prevention data. Cloudflare may process this data while delivering and protecting the Service.
• Usage analytics: When configured by the operator, Google Analytics 4 may receive page URLs, referral information, interactions, approximate location, and browser or device data. Google may use browser identifiers or cookies to produce aggregated traffic reports.
• Acquisition attribution: The Service records a limited first-touch, signup-touch, and most-recent attributable source for an account. This can include campaign source, medium, and name (utm_source, utm_medium, and utm_campaign), the referring site's hostname, a broad channel such as direct, search, social, AI assistant, campaign, or referral, the landing-page path, and timestamps. Query strings, search terms, ad content parameters, prompts, uploaded filenames, and page contents are not stored in these attribution records.

How photos and videos are processed

The generation flow is designed as follows:

1. Your browser sends the photo and generation settings to a Cloudflare Worker.
2. The Worker temporarily places the source photo in Cloudflare R2 and creates a short-lived signed URL for the generation request.
3. The photo, prompt, selected settings, and related technical data are sent to the video generation service configured by the deployment operator. That service may process the material under its applicable terms to perform the request.
4. Generation runs asynchronously. The configured service may deliver status and result data by webhook, while the application may also poll job status. The Worker downloads a successful result and copies the video into private R2.
5. On the normal application path, the temporary source photo is deleted from R2 after the generation job reaches a terminal state and the result has been handled, including when generation returns an error.
6. A successfully generated video is served from private R2 through a Worker URL signed for 24 hours. The object may remain there until the deployment operator deletes it or applies a retention policy, but an expired result link no longer grants access.

Account, credit, order, and generation-history records are stored in Cloudflare D1. Authentication cookies are used to keep you signed in. When you choose a credit pack, the Service creates a Stripe Checkout Session and Stripe processes the payment on its own hosted page. Stripe sends signed webhook events back to the Service so credits can be issued.

The Service also uses first-party attribution cookies to remember the first and latest source that brought a browser to the site. These cookies are used to understand which channels lead to registrations and purchases, survive the sign-in redirect, use SameSite=Lax, and are configured to expire after 180 days. They do not contain your name, email address, account ID, uploaded media, or prompt. You can remove them through your browser's cookie controls; doing so may make later visits appear as a new or direct source.

Do not upload a photo if you are not comfortable with this processing. No internet transmission, storage system, or third-party AI service can be guaranteed to be completely secure or error-free.

Purpose and legal basis

The submitted content is used to provide the requested video, protect the Service from abuse, troubleshoot failures, and meet applicable legal obligations. Depending on where you live, processing may be based on your request to use the Service, your consent, the operator’s legitimate interest in securing the Service, or another basis permitted by applicable law.

Your responsibilities

Only upload a vehicle image that you own or have permission to use. Avoid images containing visible faces, license plates, addresses, or other personal data. Do not submit copyrighted material you lack permission to use or content intended for impersonation, fraud, harassment, deception, infringement, or falsely representing an AI concept as authentic product evidence.

Sharing and international processing

The Service does not sell uploaded photos or generated videos. Content and technical data are disclosed only as needed to operate the Service, including to Cloudflare, the configured video generation service, Stripe for payment processing, and Google for site analytics, or when required by law or necessary to protect users, the public, or the Service. These providers and their infrastructure may process data in countries other than your own.

Retention

Temporary source photos are designed to be removed from R2 after a generation job reaches a terminal state and its result has been handled. Result links expire after 24 hours. Generated-video objects are not guaranteed to be retained for any particular period and may be deleted without notice. First-party attribution cookies expire after 180 days unless you remove them sooner; attribution attached to an account may be retained with the account and related business records. Account and transaction records may be retained while the account is active and afterward as reasonably needed for security, accounting, dispute handling, and legal compliance. Cloudflare, the configured video generation service, Stripe, network providers, and platform logs may have separate retention practices outside the application’s D1 and R2 data. The Service does not promise that all transient copies or provider records disappear at the same moment.

Your choices and rights

You can avoid media processing by not uploading a photo and can sign out at any time. The account page lets signed-in users review their credit balance, purchases, and generation history. Depending on applicable law, you may also have rights to request access, correction, deletion, restriction, or a copy of personal data, or to object to or withdraw consent for certain processing. Any additional request method offered by the Service will be presented within the Service. Identity verification may be required, and some billing records may need to be retained even after an account-related request.

Children

The Service is not directed to children. Avoid uploading any image that contains identifiable children or their personal data. If you believe a child’s information has been submitted, stop using or sharing the affected result and use any request method made available within the Service.

Changes

This policy may be updated when the Service or its providers change. The effective date above will be revised when a material update is published.

Independent-service notice

Flying Car Video Generator is an independent AI creative service. Tesla-themed examples and guides are not affiliated with, endorsed by, sponsored by, or associated with Tesla, Inc. or its affiliates. Tesla, Roadster, related names and marks, and recognizable vehicle designs belong to their respective owners.