Privacy Policy
How AI Christmas (aichristmas.io) handles your photos and data: used only for your request, never for AI training, and deleted automatically within 7 days.
Last updated: 2026-11-02
Our Privacy Promise
You trust us with photos of the people and pets you love. In short:
- Used only for your request. Your photos are used only to create the Christmas photos, cards and videos you ask for.
- Never used for training. We never use your photos or creations to train AI models, and we never sell them.
- Deleted within 7 days. Every photo you upload and everything you create — photos, videos, previews and online cards — is deleted automatically within 7 days, or sooner when you delete it.
- Minimal sharing. We share your photos only with the processing providers needed to generate your request, and nobody else.
This Privacy Policy explains what AI Christmas ("we", "us") collects when you use aichristmas.io (the "service"), how we use it, who we share it with and how long we keep it.
Information We Collect
| What | Examples | Why |
|---|---|---|
| Photos you upload | Photos of you, your family and your pets; a photo of a room for Santa cam | To create your request |
| Content you create | Generated Christmas photos and videos, card designs and messages | To show and deliver it to you |
| Account information | Email address; name and profile picture if you sign in with Google; a guest session cookie | To sign you in and deliver purchases |
| Payment information | Order number, amount, the email you use at checkout | To process purchases and refunds |
| Usage information | Pages visited, device and browser type, approximate country, events such as "photo created" | To run, secure and improve the service |
We do not collect your full card number: payments are handled by our payment partner, which acts as merchant of record. We do not perform facial recognition to identify anyone, and we do not build biometric profiles; photos are processed only to render the image or video you requested.
How We Use Your Information
- To create, display and deliver your Christmas photos, cards and videos.
- To check uploads before generation (for example, that each photo shows one person or pet) and to prevent misuse.
- To send delivery emails, sign-in links and, once per card, a notice when your card is first opened.
- To process payments, credits and refunds, and to prevent fraud.
- To respond to support requests, reports and rights complaints.
- To understand aggregate usage and improve the service.
How Your Photos Are Processed
To generate your content, your photos are sent securely (over HTTPS) to AI processing providers that work on our behalf. Videos are created with Seedance (international version). Providers receive only what is needed for the request — the photos and our fixed scene instructions — not your name, email or payment details.
Results are copied into our own storage as soon as they are ready, and our copies are deleted within 7 days (see "Data Retention"). We never use your photos or creations to train AI models.
Online Cards
When you create an online card, its picture or video, your message and the "from" name you enter are visible to anyone who has the link. Card links use a random code, are not listed in search engines (noindex) or our sitemap, and stop working after 7 days, when the card's files are deleted. You can delete a card sooner in My Creations. Printable cards are created in your browser and are not stored by us.
Who We Share Information With
We do not sell or rent personal information. We share it only with service providers that help us run the service, and only as needed:
| Provider type | Purpose |
|---|---|
| AI processing providers (including Seedance, international version) | Generating images and videos from your photos |
| Cloud hosting and storage (Cloudflare) | Running the website, database and file storage |
| Payment partner (merchant of record) | Processing payments, taxes and refunds |
| Email delivery | Sending delivery emails and sign-in links |
| Analytics (Google Analytics, pvuv.ai) | Aggregate usage statistics |
We may also disclose information when required by law or to protect the safety of our users, for example when cooperating with authorities about content that exploits minors.
Data Retention
| Data | How long we keep it |
|---|---|
| Uploaded photos | Deleted automatically within 7 days |
| Generated photos, videos and previews | Deleted automatically within 7 days |
| Online cards (files and link) | Deleted / disabled within 7 days |
| Photo-check results | Up to 24 hours (cache) |
| Account email and order records | While your account is active and as long as required for tax, accounting and fraud prevention |
Deletion is enforced automatically by expiry rules on our storage, not by hand. You can delete any creation or card sooner in My Creations. Because content is deleted after 7 days, please download anything you want to keep.
Data Security
Data is encrypted in transit (HTTPS). Files are stored under random, unguessable addresses; the full-resolution original of a free preview is not shown to anyone until it is unlocked. API keys and secrets are encrypted at rest. Access to production systems is limited to the people who run the service.
Children
You must be at least 13 to use the service, and users under 18 need a parent's or guardian's permission. The service is not directed to children under 13, and we do not knowingly collect personal information directly from them. Children may appear in photos only when uploaded by their parent or legal guardian, who confirms consent before every generation. If you believe a child's photo was uploaded without a parent's or guardian's consent, email support@aichristmas.io and we will delete it promptly.
Photos of Other People
Only upload photos of people who have agreed to it. If you find content made from your photo without your consent, email support@aichristmas.io — we review within 24 hours and delete confirmed content immediately.
Cookies
We use essential cookies to keep you signed in (including guest sessions). Analytics cookies are used to understand site usage; where we show a consent banner (for example in the EEA, the UK and Switzerland), they are only set after you accept.
Your Rights
Depending on where you live (for example under the GDPR, UK GDPR or US state laws such as the CCPA/CPRA), you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. You can delete your creations and cards yourself in My Creations; for anything else, email support@aichristmas.io from the address on your account or order. We respond within 30 days and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.
International Transfers
We and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.
Changes to This Policy
We may update this policy. We will post the new version here with a new date and highlight material changes on the site.
Contact
Privacy questions or requests: support@aichristmas.io.