Privacy Policy

1. Introduction

GoCrazyAI is operated by Pinewood Labs1 LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA ("we," "our," or "us"), which is the controller of the personal data described in this policy. GOAI LABS LIMITED (Reg. HE 499414), Agias Elenis 4, Michaelides Building, 1st Floor, Office 104, 1060 Nicosia, Cyprus, is a newly incorporated Cyprus company wholly owned by Pinewood Labs1 LLC that is preparing to operate the platform; until a transition is announced and this policy is updated, Pinewood Labs1 LLC remains the sole controller and GOAI LABS LIMITED does not process payments. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content creation platform. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and authentication credentials when you create an account
• Payment Information: Billing details processed securely through our payment providers
• Uploaded Content: Images, videos, audio recordings, and other media files you upload for processing, which may contain faces and voices (see Section 3, Biometric Data)
• Camera & Media Access: We may request access to your device's camera and photo/media library to allow you to capture or upload images and videos for content creation. These files are only accessed with your permission and are used solely to provide the core functionality of the Service.
• Prompts & Inputs: Text prompts and settings you use to generate content
• AI Chat Conversations: AI Chat messages, replies, chat titles and project instructions are stored only in your own browser, not on our servers. When you send a message, we relay it and the recent conversation to the AI model provider (Alibaba Cloud or BytePlus) without your name or email, and we keep only billing records: the time, the model used, the credits charged and whether an image or video was attached. Images and videos you attach are uploaded to our storage so the model can open them.
• Communications: Information from your correspondence with our support team

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Features used, pages visited, actions taken on the platform
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies and analytics cookies to improve your experience

3. Biometric Data (Face & Voice)

Some features of the Service (for example face swap, lip-sync, image-to-video, and image-to-video) process images, videos, or audio recordings you upload that may contain facial geometry or voice characteristics capable of identifying a person ("biometric data").

• Purpose Limitation: We process biometric data solely to generate the specific content you request. We do not use it to identify or track individuals across the Service, we do not build facial-recognition or voice-identification databases, and we do not use it to train our own AI models.
• Legal Basis: We process biometric data only with your explicit consent (Article 9(2)(a) GDPR), collected through the consent confirmation when you sign up or sign in. You may withdraw your consent at any time by deleting your account or contacting us; withdrawal does not affect processing carried out before withdrawal.
• Other People's Likenesses: You may only upload content containing another person's face or voice if that person has consented. See the Consent & Likeness Responsibility section of our Terms of Service.
• Retention & Destruction: Uploaded files are kept only as long as needed to generate your content and operate the Service. Generated content remains in your account until you delete it. Biometric data is permanently destroyed when you delete the associated content or your account, and in any event no later than three years after your last interaction with the Service.
• Disclosure: Biometric data is shared only with the AI and infrastructure providers listed in the Sharing of Information section below, acting on our behalf to generate your content. We never sell, lease, or trade biometric data.

4. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain our AI services
• To process your transactions and manage your credits
• To generate and deliver AI-created content based on your inputs
• To communicate with you about your account, updates, and support
• To improve and personalize your experience on our platform
• To analyze usage patterns and optimize our services
• To detect, prevent, and address technical issues and abuse
• To comply with legal obligations

5. Data Storage & Retention

6. User-Generated Content

If you choose to share or publish content within the Service, such content may be visible to other users. You are responsible for the content you choose to share.

7. Sharing of Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party vendors who assist in operating our platform (payment processors, cloud hosting, analytics)
• AI & Infrastructure Providers: Your content may be processed by third-party services including: WaveSpeed AI (video, image, and lip-sync processing, wavespeed.ai), Alibaba Cloud (image and video processing, alibabacloud.com), BytePlus (image and video processing, byteplus.com), ElevenLabs (voice and audio generation, elevenlabs.io), Fish Audio (speech generation and transcription, fish.audio), OpenAI (prompt processing, openai.com), Supabase (database hosting, supabase.com), Cloudflare (file storage and CDN, cloudflare.com), Google (analytics and advertising, google.com), Resend (email communications, resend.com).
• Legal Requirements: When required by law, subpoena, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

Advertising and measurement

We use advertising services, such as Google Ads, to measure how our ads perform and to show our ads to people who may be interested in GoCrazyAI. For this we may share with these services:

• Website activity collected by cookies and similar technologies on our site, such as the ad you clicked and whether you made a purchase, according to your cookie choices.
• Customer information in hashed form. If you have an account or made a purchase, we may upload your email address and, where you gave them at checkout, your name, country and postal code. Before upload these are converted with SHA-256 hashing into codes from which the original values cannot be read. Hashed data is still personal information: the advertising service compares the codes with codes created from its own users' details to find matches. We use the matches to measure our ads, to avoid advertising to existing customers in the wrong way, and to help the service find people with similar interests to our customers. We do not upload the content you create, your prompts or your payment card details.

These services process this information on our behalf and under their own terms for advertisers. Under some US state privacy laws, this may be considered “sharing” personal information or processing it for “targeted advertising.” You can opt out at any time with the Do Not Sell or Share My Personal Information link in our footer, in your cookie settings, or with the “Use my data for advertising” switch under Privacy & safety in your account dashboard. When you opt out while signed in, we record the choice on your account, remove your hashed details from the customer lists we have uploaded, and exclude you from future uploads and purchase reports to advertising services. We treat a Global Privacy Control signal from your browser as a valid opt-out. We do not upload information about people we know to be in the European Economic Area, the United Kingdom or Switzerland for these purposes without their consent.

8. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit and at rest, secure authentication methods, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Request a portable copy of your data
• Opt-Out: Opt out of marketing communications
• Advertising Opt-Out: Opt out of sharing your information for advertising (see “Advertising and measurement” above)
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the email address provided below.

If you are located in the European Economic Area (EEA), your data is processed in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Service.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Our Service is intended for adults aged 18 and over, and we require an age attestation at sign-up. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete such information and close the associated account.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: [email protected]