Privacy Policy

Who is responsible

We Create Visuals is a trading name of Loykey Pte. Ltd., a company registered in Singapore (UEN 202517562K) at 68 Circular Road, #02-01, Singapore 049422. You can reach a person at manuel@loykey.com. We are the controller of your personal data for the purposes of the EU and UK GDPR and Singapore's PDPA.

What we collect

Your email address, so we can send you the video and a receipt.

Your video description and any reference images you upload. Images can contain personal data, for example a person's face. Please only upload images you are allowed to share.

Your order details: length, format, price, the time you accepted our terms, and the payment status. Card details are entered on Stripe's page and never reach us.

Basic technical data (IP address, browser type, time of request) that our hosting provider records in server logs to keep the site running and secure.

We do not use analytics, advertising pixels or tracking cookies, and we do not create accounts.

Why we use it (legal bases)

To make, deliver and support your order: performance of a contract (GDPR Art. 6(1)(b)).

To keep accounting and tax records: legal obligation (Art. 6(1)(c)).

To keep the service secure and prevent fraud: our legitimate interests (Art. 6(1)(f)).

We never use your data for marketing unless you separately ask us to, and we never use your images to train AI models.

Who we share it with

Only the service providers needed to run the service, each bound by a data-processing agreement: Stripe (payments and order records), Vercel (website hosting and temporary storage of reference images), Resend (sending emails), and the AI video-generation providers we use to make your video, which receive your description and reference images only for that purpose. We can name the specific generation providers on request.

Some of these providers are based in or process data in the United States and other countries outside the EEA/UK. Those transfers are protected by the European Commission's Standard Contractual Clauses or equivalent safeguards.

We share data with authorities only when the law requires it. We never sell personal data.

How long we keep it

Reference images are deleted automatically from our storage 30 days after upload.

Order records (email, description, price, date) are kept by our payment provider for as long as tax and accounting laws require, normally up to 7 years, and are not used for anything else.

Server logs are kept by our hosting provider for a short period, typically days, for security.

Your rights

You can ask to access, correct, delete, restrict or object to the use of your data, and to receive a copy in a portable format. Email us and we will reply within one month. We may need to keep some order records where the law requires it.

If you are in the EU, EEA or UK you can also complain to your local data protection authority. In Singapore, you can contact the Personal Data Protection Commission.

California residents: we do not sell or share personal information for cross-context behavioural advertising.

Security and age

Data travels over HTTPS and is stored with reputable providers with access limited to the people who make your video.

This service is for people aged 18 and over. We do not knowingly collect data from children.

Changes

If we change this policy we will update the date at the top of this page.