Turnd Labs LLC collects the photo you upload, basic account identifiers, purchase and credit records, generation status, device and request metadata needed for fraud prevention, and the generated clip assets created from your upload.

Uploaded photos can include face data. The service is not available in regions where the current launch posture requires a separate biometric consent flow before collection.

Uploads are screened for CSAM and policy violations before any AI model call. Clear uploads may then be processed by AI providers, video-generation providers, Modal workers, storage providers, auth, payment, PostHog analytics, Vercel web analytics, and monitoring services that operate the product. Vercel collects anonymized pageview and traffic data. When configured, PostHog collects privacy-limited product events, automatic interaction and performance events, coarse browser and device metadata, and session replays linked by a pseudonymous browser identifier. Form inputs, page text, and element attributes are masked; images, video, audio, and canvas content are blocked. Console and network recording are disabled. Replays are also disabled on identifier-bearing pages and pages with query parameters. The PostHog client respects browser Do Not Track and is disabled when its public project token is not configured.

When X Ads conversion tracking is configured, X may receive website visits and verified purchase events for ad measurement and attribution. Purchase events include the transaction value, currency, purchased credit-pack name, and a checkout-session identifier used to prevent duplicate counting. We do not send an email address or phone number to X through this integration.

When TikTok Ads conversion tracking is configured, TikTok may receive website visits and verified purchase events for ad measurement and attribution. Purchase events include the transaction value, currency, purchased credit-pack name, a checkout-session identifier used to prevent duplicate counting, and TikTok click or cookie identifiers already associated with the browser. We do not send an email address, phone number, IP address, or user-agent through the server-side TikTok integration.

The exact original upload can contain EXIF metadata and is retained only for the limited raw-upload period described below. We also keep a separate metadata-stripped copy in private storage so you can view the source image again with your saved clip. If you explicitly enable private photo details, we read embedded capture time and precise GPS coordinates and send those values to Mapbox and Open-Meteo to derive a city/region label and historical weather. We do not store exact coordinates, camera identifiers, altitude, or street addresses as separate account data. Without that opt-in, we do not use embedded location or capture time for photo context.

Before any safety or AI provider receives an image, we decode and re-encode a bounded copy so EXIF metadata is not carried into the provider input. A safety block preserves the exact metadata-free bytes that were screened under a restricted legal hold. Derived photo details are shown only to the clip owner and are never added to public share pages.

We do not sell uploaded photos. We use uploads and generated assets to provide the service, prevent abuse, debug failures, handle support, comply with law, and maintain payment and credit records.

Exact original uploads, including any EXIF they contain, are scheduled for deletion within 24 hours (currently 22 hours). The separate metadata-stripped owner copy is kept in private storage until you delete the clip or your account. Intermediate generation assets are scheduled for deletion after 30 days, sharing activity records after 90 days, and delivered job-dispatch records after seven days. Final clips remain until you delete them or your account.

Owner-only city/region, capture time, and weather remain with the generation until that generation or account is deleted. Disabling the option on a later upload does not add details to that upload, and we never substitute browser location or upload time.

The exact metadata-free bytes that produced a safety block may be preserved under legal hold. The original upload, including any EXIF, is still scheduled for deletion within 24 hours.

Signed-in users can download an account export or request deletion from the Account page. Deletion disables the account and removes public access immediately, then starts a seven-day cancellation period before content purge. Financial records required for accounting are retained in pseudonymized form. You can also request access, deletion, or correction by contacting entitled@entitled.info. We may need to verify the account or payment identity before acting on the request.

Account exports do not include authentication secrets or restricted security, abuse-prevention, moderation, investigation, and legal-hold records. These exclusions include provider verdicts and policy fingerprints, evidence hashes and objects, and internal diagnostics where disclosure could undermine safety controls or an investigation.