Data Retention

Privacy & data

Data Retention

Public retention baselines aligned to product and legal workflows.

v2026-10-v8Effective 2026-10-18

This summary documents our retention baseline for major data categories and aligns with legal workflows, operational security requirements, and accountable deletion practices.

Retention matrix

Uploaded source images

Retention: 30 days after that photograph was last used (daily scheduled job); a copy you registered with our video provider is deleted shortly afterwards

Why: Data minimization principle; extended only for legal hold, fraud, or safety

Generated outputs

Retention: Kept until you delete them (user-managed)

Why: Product delivery and user autonomy; legal/support retention where required

Consent and acceptance records

Retention: Cookie choices: 2 years. Your acceptance of our terms and your upload confirmations: while your account exists, and afterwards until 6 years from when they were recorded

Why: Showing what was agreed and when; defending legal claims (UK limitation period of 6 years)

Privacy requests

Retention: 2 years after the request is closed; IP address and device details removed 90 days after closure

Why: Showing how a request was handled if a question or complaint follows

Abuse reports

Retention: 3 years after the case is closed; IP address and device details removed 90 days after closure. Reports passed to the authorities are kept for as long as the law or the investigation requires

Why: Trust and safety enforcement, repeat-abuse detection and cooperation with authorities

Account deletion record

Retention: 6 years after the deletion; IP address and device details removed after 90 days

Why: Proof that the deletion was carried out, alongside the payment records we must keep

In-app notifications

Retention: 180 days

Why: Short-lived service messages

Background generation details

Retention: Prompt text and file links attached to background generation jobs are cleared 30 days after the job ends; video recovery records are deleted 30 days after they end. Your saved outputs are not affected

Why: Operational recovery and troubleshooting only

Job applications

Retention: 6 months after you apply

Why: Assessing applications and answering questions about the decision

Billing and accounting records

Retention: Statutory period as required by applicable tax and accounting law

Why: Legal compliance and financial reconciliation obligations

Security and operational logs

Retention: Proportionate rolling retention; extended for active incidents

Why: Security, fraud prevention, and lawful investigation support

Legal hold and exceptions

Some records can be retained beyond standard periods for legal claims, fraud prevention, abuse investigations, tax/accounting obligations, or court/law-enforcement preservation requirements.

For deletion or retention questions, contact legal@aifacecraft.com.

Related policies

Waitlist Privacy Notice

What the pre-launch email form collects, why, and how to leave.

Read policy

Sub-processors

Provider matrix, regions, and international transfer safeguards.

Read policy

Privacy & Data FAQ

DSAR, deletion, verification, and abuse evidence guidance.

Read policy
Email a privacy requestEmail an abuse report
Legal Center
Legal CenterPrivacy & dataData Retention

Privacy & data

Data Retention

Public retention baselines aligned to product and legal workflows.

v2026-10-v8Effective 2026-10-18Updated 2026-10-29

This summary documents our retention baseline for major data categories and aligns with legal workflows, operational security requirements, and accountable deletion practices.

Retention matrix

Uploaded source images

Retention: 30 days after that photograph was last used (daily scheduled job); a copy you registered with our video provider is deleted shortly afterwards

Why: Data minimization principle; extended only for legal hold, fraud, or safety

Generated outputs

Retention: Kept until you delete them (user-managed)

Why: Product delivery and user autonomy; legal/support retention where required

Consent and acceptance records

Retention: Cookie choices: 2 years. Your acceptance of our terms and your upload confirmations: while your account exists, and afterwards until 6 years from when they were recorded

Why: Showing what was agreed and when; defending legal claims (UK limitation period of 6 years)

Privacy requests

Retention: 2 years after the request is closed; IP address and device details removed 90 days after closure

Why: Showing how a request was handled if a question or complaint follows

Abuse reports

Retention: 3 years after the case is closed; IP address and device details removed 90 days after closure. Reports passed to the authorities are kept for as long as the law or the investigation requires

Why: Trust and safety enforcement, repeat-abuse detection and cooperation with authorities

Account deletion record

Retention: 6 years after the deletion; IP address and device details removed after 90 days

Why: Proof that the deletion was carried out, alongside the payment records we must keep

In-app notifications

Retention: 180 days

Why: Short-lived service messages

Background generation details

Retention: Prompt text and file links attached to background generation jobs are cleared 30 days after the job ends; video recovery records are deleted 30 days after they end. Your saved outputs are not affected

Why: Operational recovery and troubleshooting only

Job applications

Retention: 6 months after you apply

Why: Assessing applications and answering questions about the decision

Billing and accounting records

Retention: Statutory period as required by applicable tax and accounting law

Why: Legal compliance and financial reconciliation obligations

Security and operational logs

Retention: Proportionate rolling retention; extended for active incidents

Why: Security, fraud prevention, and lawful investigation support

Legal hold and exceptions

Some records can be retained beyond standard periods for legal claims, fraud prevention, abuse investigations, tax/accounting obligations, or court/law-enforcement preservation requirements.

For deletion or retention questions, contact legal@aifacecraft.com.

Related policies

Waitlist Privacy Notice

What the pre-launch email form collects, why, and how to leave.

Read policy

Sub-processors

Provider matrix, regions, and international transfer safeguards.

Read policy

Privacy & Data FAQ

DSAR, deletion, verification, and abuse evidence guidance.

Read policy

Need a formal request?

Privacy rights and abuse reports should go through the official workflows below.

Email a privacy requestEmail an abuse reportLegal Center
AIFACECRAFTLegal CenterOpen Studio
AIFACECRAFTLegal Center

Core agreements

  • Terms of Service
  • Privacy Policy
  • Cookie Policy
  • Acceptable Use Policy
  • Refund & Cancellation

Privacy & data

  • Waitlist Privacy Notice
  • Sub-processors
  • Data Retention
  • Privacy & Data FAQ

Trust & safety

  • Copyright (DMCA)
  • Safety Rules
  • Enforcement & Remedies

Commercial use

  • Commercial Use Matrix
Privacy & data

Data Retention

Public retention baselines aligned to product and legal workflows.

v2026-10-v8Effective 2026-10-18

This summary documents our retention baseline for major data categories and aligns with legal workflows, operational security requirements, and accountable deletion practices.

Retention matrix

Uploaded source images

Retention: 30 days after that photograph was last used (daily scheduled job); a copy you registered with our video provider is deleted shortly afterwards

Why: Data minimization principle; extended only for legal hold, fraud, or safety

Generated outputs

Retention: Kept until you delete them (user-managed)

Why: Product delivery and user autonomy; legal/support retention where required

Consent and acceptance records

Retention: Cookie choices: 2 years. Your acceptance of our terms and your upload confirmations: while your account exists, and afterwards until 6 years from when they were recorded

Why: Showing what was agreed and when; defending legal claims (UK limitation period of 6 years)

Privacy requests

Retention: 2 years after the request is closed; IP address and device details removed 90 days after closure

Why: Showing how a request was handled if a question or complaint follows

Abuse reports

Retention: 3 years after the case is closed; IP address and device details removed 90 days after closure. Reports passed to the authorities are kept for as long as the law or the investigation requires

Why: Trust and safety enforcement, repeat-abuse detection and cooperation with authorities

Account deletion record

Retention: 6 years after the deletion; IP address and device details removed after 90 days

Why: Proof that the deletion was carried out, alongside the payment records we must keep

In-app notifications

Retention: 180 days

Why: Short-lived service messages

Background generation details

Retention: Prompt text and file links attached to background generation jobs are cleared 30 days after the job ends; video recovery records are deleted 30 days after they end. Your saved outputs are not affected

Why: Operational recovery and troubleshooting only

Job applications

Retention: 6 months after you apply

Why: Assessing applications and answering questions about the decision

Billing and accounting records

Retention: Statutory period as required by applicable tax and accounting law

Why: Legal compliance and financial reconciliation obligations

Security and operational logs

Retention: Proportionate rolling retention; extended for active incidents

Why: Security, fraud prevention, and lawful investigation support

Legal hold and exceptions

Some records can be retained beyond standard periods for legal claims, fraud prevention, abuse investigations, tax/accounting obligations, or court/law-enforcement preservation requirements.

For deletion or retention questions, contact legal@aifacecraft.com.

Related policies

Waitlist Privacy Notice

What the pre-launch email form collects, why, and how to leave.

Read policy

Sub-processors

Provider matrix, regions, and international transfer safeguards.

Read policy

Privacy & Data FAQ

DSAR, deletion, verification, and abuse evidence guidance.

Read policy
Email a privacy requestEmail an abuse report
Legal Center
Legal CenterPrivacy & dataData Retention

Privacy & data

Data Retention

Public retention baselines aligned to product and legal workflows.

v2026-10-v8Effective 2026-10-18Updated 2026-10-29

This summary documents our retention baseline for major data categories and aligns with legal workflows, operational security requirements, and accountable deletion practices.

Retention matrix

Uploaded source images

Retention: 30 days after that photograph was last used (daily scheduled job); a copy you registered with our video provider is deleted shortly afterwards

Why: Data minimization principle; extended only for legal hold, fraud, or safety

Generated outputs

Retention: Kept until you delete them (user-managed)

Why: Product delivery and user autonomy; legal/support retention where required

Consent and acceptance records

Retention: Cookie choices: 2 years. Your acceptance of our terms and your upload confirmations: while your account exists, and afterwards until 6 years from when they were recorded

Why: Showing what was agreed and when; defending legal claims (UK limitation period of 6 years)

Privacy requests

Retention: 2 years after the request is closed; IP address and device details removed 90 days after closure

Why: Showing how a request was handled if a question or complaint follows

Abuse reports

Retention: 3 years after the case is closed; IP address and device details removed 90 days after closure. Reports passed to the authorities are kept for as long as the law or the investigation requires

Why: Trust and safety enforcement, repeat-abuse detection and cooperation with authorities

Account deletion record

Retention: 6 years after the deletion; IP address and device details removed after 90 days

Why: Proof that the deletion was carried out, alongside the payment records we must keep

In-app notifications

Retention: 180 days

Why: Short-lived service messages

Background generation details

Retention: Prompt text and file links attached to background generation jobs are cleared 30 days after the job ends; video recovery records are deleted 30 days after they end. Your saved outputs are not affected

Why: Operational recovery and troubleshooting only

Job applications

Retention: 6 months after you apply

Why: Assessing applications and answering questions about the decision

Billing and accounting records

Retention: Statutory period as required by applicable tax and accounting law

Why: Legal compliance and financial reconciliation obligations

Security and operational logs

Retention: Proportionate rolling retention; extended for active incidents

Why: Security, fraud prevention, and lawful investigation support

Legal hold and exceptions

Some records can be retained beyond standard periods for legal claims, fraud prevention, abuse investigations, tax/accounting obligations, or court/law-enforcement preservation requirements.

For deletion or retention questions, contact legal@aifacecraft.com.

Related policies

Waitlist Privacy Notice

What the pre-launch email form collects, why, and how to leave.

Read policy

Sub-processors

Provider matrix, regions, and international transfer safeguards.

Read policy

Privacy & Data FAQ

DSAR, deletion, verification, and abuse evidence guidance.

Read policy

Need a formal request?

Privacy rights and abuse reports should go through the official workflows below.

Email a privacy requestEmail an abuse reportLegal Center
© 2026 XUSLABS LTDLegal centerTermsPrivacyCookiesRefundContactPricingDocsToolsModelsCareers