Privacy Policy

Last updated: 2026-10-28

This policy covers the personal data Outstanding AI Video ("we", "us") handles on outstandingaivideo.com: what we collect when you make an Outstanding video, why, and when we delete it. The site is run by the Outstanding AI Video team, which is the controller of that data. Write to hello@outstandingaivideo.com with any question about it.

Photos you upload

Each photo you add (the lead singer, and the keyboard and sax players if you add them) is shrunk in your browser and then uploaded to private storage. To render the clip, we pass the photos and the band clip to Viggle, the video provider that works for us on this. As soon as the video is done or has failed, we delete the photos, at the latest 1 day after upload. We do not use your photo for anything else.

Your videos

A finished video sits in private storage for 7 days, so you can play it and download it from My videos; after that it is deleted. It opens only for the account that made it, and for us when you contact us about that video or when we have to look into a report.

Your account

You sign in with a link sent to your email address or with Google. We keep your email address, your credit balance, your orders and a list of your videos, so that you can use the credits you bought. Signing in sets one essential session cookie. We use Cloudflare Turnstile to block automated sign-up requests, and Cloudflare to send our emails (sign-in links and "your video is ready"). Your sign-in session also records the IP address and browser it was started from, to protect your account.

If you continue with Google, Google tells us your email address, your name and your profile picture, and we save them on your account. We do not keep Google access tokens and cannot read anything else in your Google account. Outside the EEA, UK and Switzerland, if you are not signed in, our pages load Google's sign-in script after the page has finished loading, so Google can offer a "Continue as" prompt. Google may see your IP address and its own cookies when that script loads. If you close the prompt we do not show it again on this device for a day.

Strictly necessary cookie: aid

aid is a first-party, HttpOnly, Secure cookie used only to enforce free limits, prevent abuse and associate your anonymous tasks. It lasts for 30 days after its most recent use, including when an older cookie is renewed; the identifier stays the same so active tasks remain accessible. It is not used for analytics, advertising, profiles or cross-site attribution, and is not shared with third parties for those purposes. This necessary function does not depend on analytics consent; we rely on our legitimate interest in securing the requested service. Daily usage counts and IP hashes follow the shorter cleanup periods below; this browser-cookie period does not extend those records.

Account and diagnostic data retention

Sign-in sessions record your IP address and browser User-Agent to protect your account. We schedule hourly deletion of expired sessions and sign-in/reset tokens, rate-limit records older than 24 hours, and usage counters and hash salts from before the previous UTC day. Valid sessions remain active, but their IP address and User-Agent are cleared once the session is 90 days old. For queued jobs, original filenames and file fingerprints are removed two days after completion or failure; task status and payment/refund records remain. This cleanup does not delete your account, orders or credit ledger. Contact us to request deletion of account data.

Security diagnostics

Your browser may send security-policy violation reports to this site. Before logging, we discard full web addresses, script samples, IP addresses, browser User-Agent, cookies and submitted content. We retain only technical categories and counts in Cloudflare hosting logs for up to seven days. These reports are sampled, may be incomplete and are not used to identify visitors or create advertising profiles.

Emails you send us

If you email us, we keep your message and email address to answer you and to handle refunds.

Payments

Payments are handled by Stripe. We do not see or store your full card details; we receive only what is needed to confirm your purchase, such as your email address and order status. On devices that support Apple Pay, pages load Stripe's payment script (from js.stripe.com) once the page is idle, so the buy dialog can show the Apple Pay button; if you pay with Apple Pay while signed out, Apple Pay shares your email address with Stripe and we use it to deliver your credits.

Hosting and abuse protection

Our hosting provider (Cloudflare) processes standard request data, such as your IP address, to serve the site and protect it from abuse. To enforce daily limits we keep a one-way hash of your IP address that changes every day; we cannot turn it back into your IP address. This site has no ads.

We use Google Analytics to understand how the site is used: pages visited, which steps of making a video people reach (for example uploading a photo, a video finishing, a download or a purchase), approximate location, and device and browser type. Google Analytics sets cookies (_ga, _ga_*) with a pseudonymous identifier, and Google processes this data on our behalf. We only look at aggregated reports; we do not send Google your email address, your photos or your videos.

In the EEA, UK and Switzerland, and when we cannot determine your country, Google Analytics and visit-source storage stay off until you accept statistics. Elsewhere statistics are enabled by default. The essential cc_cookie stores your choice for six months. You can reject or withdraw from Cookie preferences in the footer; we then disable analytics and clear its cookies and browser source records. An existing rejection remains valid when you change region.

After statistics are allowed, visit-source records contain the referring domain, campaign tags and landing page path for up to 90 days. They do not contain full referring URLs or file contents. A source snapshot may be associated with your account or order at registration and checkout; contact us to request deletion.

How we use information and our legal bases

We use information to provide and improve the tool, keep the site secure, and respond to your requests. If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

Service providers

We do not sell your personal information. We share data only with the service providers below, who process it on our behalf to run the site, or when required by law:

International transfers

Our service providers process data in the United States and other countries. When personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on the provider's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or on the European Commission's Standard Contractual Clauses.

How long we keep data

Deletion typically completes within 24 hours after these periods end.

Your rights

Depending on where you live, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and you can withdraw consent at any time without affecting earlier processing. Email hello@outstandingaivideo.com to make a request; we reply within one month. If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.

California residents

In the last 12 months we collected these categories of personal information: identifiers (such as email address, the IP address of your sign-in session, cookie identifiers and a one-way hash of your IP address), commercial information (purchases), internet activity (pages visited and how the tool is used), approximate location, and the content you choose to process. We collect it from you, your browser and our service providers, and use it for the purposes described above.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. California residents can ask to know, delete or correct their personal information by emailing hello@outstandingaivideo.com. We will not treat you differently for using these rights.

Other regions

If you are in India, you can raise a grievance about how we handle your data by emailing hello@outstandingaivideo.com. If you are in Japan, note that the purposes above are the purposes of use of your personal information, and that our service providers are mainly located in the United States.

Your choices

Email us to delete a video before its 7 days are up, or to delete your account and data.

Changes

We may update this policy. The date at the top shows when it was last changed.

Contact

Questions about privacy: hello@outstandingaivideo.com.

A fan-made parody tool with no link to NPR, Tiny Desk or the original performers; every band member you do not cast is AI-generated. No celebrities, public figures or minors; if a photo is blocked, the credit comes back. Operated by the Outstanding AI Video team (hello@outstandingaivideo.com). Takedown requests