1. Contact
ExactGIF provides this service. Privacy and account requests go to support@exactgif.com.
2. Information ExactGIF processes
- Account data: email address, provider user/session identifiers, account state, confirmation and recovery state.
- Customer media: selected source video, editing instructions, temporary processing files, and generated GIF results.
- Commercial records: Stripe Customer, Checkout, PaymentIntent, Price and event identifiers; purchased allowances; usage; refunds; disputes; and reconciliation history. ExactGIF does not receive or store raw card numbers.
- Security and operations: request timing, coarse network/device data, errors, admission decisions, and security events needed to protect and run the service.
- Proof-abuse prevention: a pseudonymous identity tombstone that prevents a used one-time proof from silently refreshing after account deletion.
3. Why it is processed
ExactGIF uses this information to create and deliver GIFs, authenticate accounts, prevent fraud and repeated-proof abuse, fulfill purchases, provide support, secure the service, reconcile payments, and meet legal and accounting obligations. ExactGIF does not sell personal information or use customer media for advertising or model training.
4. Providers
Supabase provides account authentication and database services. Stripe hosts Checkout and processes payments. Cloudflare provides hosting, protected compute, object storage, security, and transactional email. These providers process limited information under their own security and legal obligations.
5. Retention
- Temporary uploaded source and result objects are scheduled for deletion no later than 24 hours after creation; Container-local processing data is destroyed when the workload ends or the isolated Container is destroyed.
- Auth sessions end on sign-out, revocation, expiry, or account deletion.
- Operational logs are minimized and retained for no more than 30 days unless a specific security incident requires longer preservation.
- Billing, refund, dispute, and accounting records may be retained for up to seven years where reasonably required for tax, fraud, dispute, or legal obligations.
- The pseudonymous proof tombstone is retained while needed to enforce the one-time proof and is not used to recreate the deleted account.
6. Cookies and browser storage
ExactGIF uses only essential session storage needed for authentication, security, and the service. It does not use advertising cookies. Supabase customer session data is stored in the browser so the customer can remain signed in and is cleared locally on sign-out.
7. Customer choices
Customers may request access, correction, deletion, or a privacy explanation through support@exactgif.com. Account deletion removes active sessions and customer media and deletes or de-identifies account data, except for the narrow billing, fraud-prevention, security, and legal records described above.
8. Security and changes
ExactGIF uses HTTPS, server-only provider credentials, same-origin mutation checks, current-session validation, signed webhooks, least-privilege access, and bounded data retention. No system is risk-free. Material changes to this notice receive a new version and effective date.