Privacy Policy | Smalltown Boy AI

How Smalltown Boy AI collects, uses, and protects personal information and the photos you upload.

Last updated: October 2026

This Privacy Policy explains how Smalltown Boy AI collects, uses, and protects information when you use the smalltown-boy.com website to make Smalltown Boy dance clips.

Who controls your data

The data controller is the operator of Smalltown Boy AI. For any privacy question, data request, or complaint, write to support@smalltown-boy.com. Who runs the service and which model provider processes clips on its behalf is set out on the about page.

Information we collect

You give us:

Account information — email address, and the name and profile image supplied by Google if you sign in that way
Content you submit — the photos you upload and the prompt
Support messages you send us

We collect automatically:

Generation records — the model used, clips used from your balance, status, and the result files
Usage and device data — IP address, browser and device type, pages viewed, and referring page
Server logs used for security, abuse prevention, and debugging

How we use information

We use information to make your clips, keep track of your clip balance, process payments, prevent abuse and prohibited content, improve reliability, respond to support requests, and comply with the law.

Payments

Payments are processed by Waffo Pancake, our payment provider and merchant of record. Your card number, expiry, and security code are entered on the provider's own checkout page and are never stored on Smalltown Boy AI's servers — we only receive the outcome of the transaction and a masked reference for your billing history. The provider handling your purchase is shown at checkout and on your receipt.

We do not sell your personal information

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes.

Service providers

We share the minimum necessary information with the following processors:

Provider	Role	Policy
Waffo Pancake	Payment processing and merchant of record	waffo.ai
Cloudflare	Application hosting, database, DNS, CDN, and file storage	cloudflare.com/privacypolicy
Resend	Transactional and verification email	resend.com/legal/privacy-policy
Google	Sign-in	policies.google.com/privacy
KIE.ai	AI model routing and inference	kie.ai

For each clip, your photos and the prompt are sent to the AI provider serving the model, which routes to the underlying model vendor, ByteDance. Smalltown Boy AI does not train models on your content.

Analytics

Our site analytics run on a self-hosted instance — that traffic data is not shared with a third-party analytics vendor.

International transfers

Smalltown Boy AI and its providers operate globally, so your information may be processed outside your country, including in the United States. Where data leaves the EEA or the UK, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent approved safeguard put in place by the provider.

Data retention

Data	Retention period
Account information	For as long as your account is open, then deleted within 30 days of account deletion; we keep only a one-way hash of your email to prevent abuse
Uploaded photos, prompts, and finished clips	Up to 12 months from creation, or within 30 days of account deletion if that comes first; email support@smalltown-boy.com to have individual clips deleted sooner
Billing and transaction records	Up to 7 years, as required by tax and accounting law
Server and security logs	Up to 12 months
Support correspondence	Up to 24 months

After these periods, data is deleted or irreversibly anonymized for aggregate statistics.

Your rights

Wherever you live, you can ask us to:

Access the personal data we hold about you, and receive a copy
Correct data that is inaccurate or incomplete
Delete your account and personal data — directly at Settings → Security → Delete Account, or by writing to support@smalltown-boy.com. The account is closed at once and permanently deleted after 30 days; until then you can ask us to restore it
Port your data to another service in a machine-readable format
Restrict or object to processing, including profiling for abuse detection
Withdraw consent at any time, without affecting processing already carried out

Write to support@smalltown-boy.com and we will respond within 30 days. You also have the right to complain to your local data protection authority.

Marketing and notifications

Service emails — verification, receipts, and security notices — are essential to your account and cannot be switched off while the account is open. Any marketing or product-update email is separate and carries a one-click unsubscribe link in every message; unsubscribing there never affects service emails.

Security

We use encryption in transit (HTTPS/TLS), encryption at rest for stored files, access controls, and least-privilege credentials to protect information. No online service can guarantee absolute security. If a breach affects your personal data, we will notify you and, where required, the relevant supervisory authority within 72 hours of becoming aware of it.