Privacy Policy

1The information we collect

• Your email address — collected at checkout, used to send your receipt (via Stripe) and to give you the link to your video.
• The toy photo you upload — used to generate your video.
• Names you choose to add — an optional child's first name and an optional recipient name, entered by you as free text.
• The script and video we generate for you, and the share link associated with them.
• Payment information — handled entirely by Stripe. We never see or store your full card details; we receive only confirmation of payment and basic order data (amount, currency, a payment reference).
• Basic technical data your browser sends automatically, such as your IP address, used to operate and secure the service.

2How we use it

We use this information to create and deliver the video you have ordered, take payment, give you a shareable link to your gift, provide support, keep the service secure, and meet our legal obligations.

3AI processing — and who processes your data

ToyVid uses artificial intelligence to check your photo and to generate the script and video. To do this, your photo and the text you enter are processed by trusted service providers ("sub-processors"), acting on our instructions:

• Stripe — payment processing.
• Cloudflare — hosting, content delivery, and secure storage of your photo and video.
• Runware — AI video generation.
• OpenRouter / Anthropic — AI safety moderation of your photo and writing of the message script.
• Railway — application hosting.

We do not use your photo or inputs to train our own AI models. Some of these providers may process data outside your country, including in the UK, the EU, and the US. Where data is transferred internationally we rely on appropriate safeguards (such as adequacy regulations or standard data-protection clauses) to protect it.

4Our legal bases

Under the UK GDPR (and the EU GDPR where it applies) we rely on: contract (to create and deliver the video you bought); legitimate interests (to secure the service, provide support, and improve ToyVid); consent where required; and legal obligation where we must process data to comply with the law.

5The share link

Each video has a private share link containing a unique, hard-to-guess token. Anyone who has that link can view the video, so share it only with people you intend to. The link is how the gift is delivered and viewed; we do not list or index these links publicly.

6How long we keep it

We keep your photo, video, and order so that your share link continues to work and we can support you. You can ask us to delete your video and the photo you uploaded at any time by contacting us (see below); we will do so unless we are required to keep certain records (for example, transaction records for tax and accounting).

7Sharing your data

We do not sell your personal data. We share it only with the sub-processors listed above, with professional advisers where needed, and with authorities where we are legally required to.

8Your rights (UK & EU)

If you are in the UK or the EU/EEA, you have the right to access your personal data, correct it, have it erased, restrict or object to our processing of it, and to data portability, subject to the conditions in the law. To exercise any of these, contact us at [email protected]. If you are unhappy with how we handle your data, UK residents can complain to the Information Commissioner's Office at ico.org.uk, and EU/EEA residents can complain to their local data-protection authority — though we'd appreciate the chance to put things right first.

9Children's data

ToyVid is a general-audience service intended for adults aged 18 and over. We do not knowingly collect personal information from children — including children under 13 (for the purposes of the US Children's Online Privacy Protection Act, "COPPA") or under the applicable age of digital consent in the UK and EU. By design, no child uploads anything and no child photo is collected; a child's first name, if added, is optional free text entered by an adult. If you believe a child has provided us with personal information without appropriate adult consent, contact us at [email protected] and we will delete it.

10US & international users

We offer ToyVid to customers outside the UK, including in the United States. Wherever you are, the protections in this policy apply to you, and your data may be processed in the UK and other countries as described above.

California & other US state privacy rights. For residents of California (under the CCPA/CPRA) and of other US states with comprehensive privacy laws, the following applies. In the past 12 months we collect the categories of personal information described in section 1 — broadly: identifiers (such as your email and IP address), commercial information (your order), audio/visual information (the toy photo you provide and the video we create), and internet activity (basic technical data) — for the business purposes described in this policy. We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising or process it for targeted advertising. We do not knowingly sell or share the personal information of anyone, including minors.

Depending on your state, you may have the right to know about, access, correct, and delete the personal information we hold about you, and to not be discriminated against for exercising these rights. To make a request, email [email protected]; we will verify and respond as required by law.

11Changes & contact

We may update this policy from time to time and will revise the date above when we do. Questions about your data can be sent to [email protected], or by post to the registered office above.