Privacy Policy

Effective date: June 15, 2026

LightCraft (hereinafter referred to as “the Platform” or “we”) understands the importance of personal information security. This Privacy Policy explains how we collect, use, store, share, and protect your personal information, as well as the rights you are entitled to.

Chapter 1: Who We Are

1.1 The Platform is operated by an independent developer, providing users with AI image-to-video generation services.

1.2 If you have any questions about this policy or wish to exercise your personal information rights, please contact us at support@dflow.top.

Chapter 2: Information We Collect

2.1 We collect the following personal information, each for a clearly defined and necessary purpose:

Phone Number

Used for account registration, identity verification, and account security protection.

Email Address and Password

Used for account registration and login verification. Passwords are stored encrypted — we cannot view plaintext passwords.

Login IP Address

Used for account security risk control and abnormal login detection. Automatically deleted after 90 days.

Uploaded Images and Prompts

Used as input materials and instructions for AI video generation. Retained until account deletion.

Generated Video Files

Delivered to users as generation results and for viewing history. Retained until account deletion.

2.2 We do not collect personal information not listed in this policy. If we need to collect new types of information, we will obtain your consent separately.

Chapter 3: How We Use Your Information

3.1 Your personal information is used solely for: providing account registration and login services; core AI video generation services; account security and risk control; credits and membership management; responding to support inquiries and rights requests; and other purposes required by law.

3.2 We will not use your information for purposes unrelated to the above. If the purpose needs to change, we will obtain your consent again.

3.3 Content moderation is used only to determine whether content complies with our policies and does not involve personal profiling or evaluation.

Chapter 4: Information Sharing and Third-Party Processing

4.1 To deliver the video generation feature, your uploaded images and prompts will be transmitted to:

Alibaba Cloud Bailian (Alibaba Cloud Computing Co., Ltd.)

Data transmitted: user-uploaded images and prompts · Purpose: AI video content generation · Data location: within the People's Republic of China · Alibaba Cloud holds Level 3 security certification

4.2 Other than the above, we will not share personal information with third parties unless we have your explicit consent or are required by law.

4.3 Your data may be processed in different regions depending on the cloud infrastructure providers used. We take reasonable steps to ensure adequate protection of your data regardless of location.

Chapter 5: Information Storage and Protection

5.1 Retention periods: Account information is retained from registration until deletion upon account cancellation; login IP addresses are automatically deleted after 90 days; images, prompts, and videos are retained until deletion upon account cancellation.

5.2 Security measures: Passwords are stored using irreversible encryption; data transmission uses HTTPS encryption; servers are deployed on certified domestic cloud service providers; access control is implemented.

5.3 In the event of a security incident, we will promptly notify affected users and report to regulatory authorities as required by law.

Chapter 6: Your Rights

In accordance with applicable data protection laws, you are entitled to the following rights:

  • Right to Access — You have the right to know what personal information we hold. You may initiate an inquiry by contacting support.
  • Right to Rectification — You have the right to request correction if your information is inaccurate. Some information can be modified directly in account settings.
  • Right to Deletion — You have the right to request deletion when the processing purpose has been achieved, consent has been withdrawn, or processing was unlawful.
  • Right to Withdraw Consent — You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of prior processing.
  • Right to Account Deletion — You may delete your account through account settings. All personal information will be deleted within 15 business days.
  • Right to Complaint — If you believe we have violated your rights, you have the right to file a complaint with the relevant regulatory authorities.

We will verify and respond to rights requests within 15 business days of receipt.

Chapter 7: Informed Consent Mechanism

7.1 Consent is given by checking the agreement to this Privacy Policy during registration. Registration cannot be completed without checking the box.

7.2 You may withdraw all consent by deleting your account, or email support@dflow.top to withdraw partial consent (which may affect certain features).

7.3 In the event of material changes to this policy (expanded collection scope, changes to third-party sharing, etc.), we will seek your consent again.

Chapter 8: Protection of Minors

8.1 The Platform is intended for adults. We do not proactively provide services to minors under the age of sixteen.

8.2 Minors aged sixteen to eighteen should use the Platform under the guidance of a guardian.

8.3 If a guardian of a child discovers that personal information has been provided without consent, please contact us to delete the information and cancel the account.

Chapter 9: Updates to This Policy

9.1 We may revise this policy in response to changes in law or business adjustments.

9.2 Material changes will require renewed consent. For non-material changes, continued use after the announcement constitutes acceptance.

Chapter 10: Governing Law

10.1 This policy is formulated in accordance with applicable data protection and cybersecurity laws.

10.2 Disputes shall be resolved through amicable negotiation. If negotiation fails, either party may bring a lawsuit before the competent court in the jurisdiction where the operator is located.

Chapter 11: Contact Us

If you have any questions or wish to exercise any of your rights, please email us at support@dflow.top. We will respond within 15 business days.