Version 1.3 · Effective October 16, 2026
AI Zombie Trend Privacy Policy
This Privacy Policy explains how AI Zombie Trend ("AI Zombie Trend," "we," "us," or "our") handles information when you visit aizombietrend.net, sign in, upload reference photos, purchase a generation, create a video, or contact support. AI Zombie Trend is a brand operated by Jingxuan Li, an individual business operator based in China. By using the service, you acknowledge the practices described below. If you do not agree, do not create an account, upload photos or submit a generation request.
How AI Zombie Trend processes your information
AI Zombie Trend is a browser-based video generation service. The service needs limited information to create a reference-guided video and verify the generations included in a paid product. We collect only the information you choose to provide, the technical identifiers needed to operate the request, and limited records supplied by our payment and generation providers.
Information you provide
AI Zombie Trend account and sign-in information. If you sign in to AI Zombie Trend by email, we process the email address and a short-lived one-time verification code. We store a one-way hash and encrypted copy of the email, an internal account identifier and session records; we do not store the one-time code in readable form. If you continue with Google, Google sends AI Zombie Trend your verified email address, display name and a provider-specific account identifier. We store a one-way hash of that Google identifier instead of the original value. We do not receive your Google password.
Reference photos. You select two portrait photos: one to guide the zombie character's identity and one to guide the survivor's identity. Your browser creates compressed reference copies before submission. The original files remain on your device unless your browser or operating system separately stores them.
Optional instructions. You may enter short preferences about identity details, appearance, wardrobe, lighting or visual finishing. These instructions are added beneath a fixed prompt and cannot override the core story, roles, transformation or reunion ending. Do not enter confidential information in this field.
Checkout, support and safety-report information. We receive the email address you enter to create a checkout session. The payment page may collect your name, billing address, country, payment method and tax information directly for payment, fraud prevention and compliance. If you contact support or submit a safety report, we receive your email address, message, supplied task or purchase identifiers and any evidence you choose to provide.
Information created during use
The service creates an internal account identifier, opaque session-token hash, random purchase identifier, generation task identifier, timestamps and status records such as pending, paid, processing or consumed. Our payment ledger stores a one-way hash of the account email for support lookup and an encrypted copy of that email for result delivery, together with purchase, payment, generation and delivery status. It does not store your complete card number or card security code.
Hosting and security providers may automatically process standard request information such as IP address, browser type, device type, requested URL, response status and timestamps. We use this information to deliver the site, prevent abuse, troubleshoot failures and protect the service. We do not currently use advertising cookies or behavioral advertising trackers.
Photos and generation requests
When you press generate, your browser sends the compressed portrait references and any optional visual preference to our server endpoint. Before a paid generation is claimed, each compressed portrait is placed briefly in private Vercel Blob storage behind an expiring access URL and sent to SeeAPI for automated image moderation. Optional text is sent to Waffo Pancake's stateless prompt-safety endpoint and is not intentionally retained there according to Waffo's documentation. The image-moderation copies are scheduled for deletion immediately after input review. If the inputs pass, new temporary private Blob copies are created with expiring signed URLs so KIE can send the two references and fixed story prompt to Seedance 2.0 Mini. No reference video is included in the generation request. KIE's model-side NSFW checker is enabled. These provider-input copies are deleted after the task reaches a completed or failed state. We do not intentionally write uploaded photo files, optional instructions or the generation request body to our application database.
Generation providers may process and temporarily retain inputs, task metadata and outputs under their own agreements and operational policies. Do not upload a photo unless you have the legal right and the subject's permission to use it. Never upload a photo of a minor, a public figure for deceptive use, or anyone who has not agreed to the intended result.
AI training and face data
We do not use your uploaded photos or generated videos to train our own AI models. We do not create face-recognition templates, biometric identifiers or biometric profiles from your uploads. The service transfers reference images to the generation providers only to perform the generation you requested. Those providers operate under their own terms and privacy policies, which may differ from ours.
AI Zombie Trend generated videos
After generation, KIE returns a temporary result URL. While AI Zombie Trend's independent output-video review is disabled, that completed result is not sent to SeeAPI for sampled-frame moderation. KIE and Seedance 2.0 Mini may still apply provider safety checks. The audio-enabled MP4 is copied to private Vercel Blob storage, shown through a time-limited browser link and sent by Resend to the checkout email. The private copy and its link are retained for seven days from archiving and are then scheduled for deletion. AI Zombie Trend does not provide a permanent customer library, so you should download the result during that period and review it before sharing.
Payments
Checkout is processed by PayPal. Payment-card and PayPal account information is entered into PayPal's interface and handled by PayPal and its payment partners; full card numbers and card security codes do not pass through or remain on our servers. The AI Zombie Trend ledger receives the account email hash, encrypted delivery email, selected product, generation balance, PayPal order and capture identifiers, status and timestamps needed to match a successful order to the purchased generations, deliver the result, detect duplicate use, provide support and administer refunds. PayPal's separate privacy terms apply to the information it collects. Review the PayPal Privacy Statement before paying.
AI Zombie Trend browser storage
We use a strictly necessary, HttpOnly session cookie to keep you signed in and local browser storage to remember an active purchase identifier, generation task identifier and signed task-access token. The session cookie contains a random opaque value, not your email or Google credentials, and is not available to page scripts. These browser values do not contain your photos. You can sign out or clear site data for aizombietrend.net, although doing so may make an unfinished purchase or task harder to recover without support.
Why we use information
We process information to authenticate your account, provide the requested generation, verify payment, prevent the same purchase from being used more than once, maintain service security, investigate errors, review safety and rights reports, enforce our Terms of Use and Acceptable Use Policy, answer support requests and comply with legal obligations. We do not sell uploaded photos or use them to build advertising profiles.
Legal bases for processing
Where the General Data Protection Regulation, UK GDPR or similar law applies, we rely on the performance of a contract to authenticate an account, create checkout sessions, verify payment and provide the requested generation. We rely on legitimate interests to secure sessions, prevent fraud and duplicate use, diagnose failures and answer ordinary support requests, after considering the effect on users. We rely on legal obligations for tax, accounting, consumer-protection, dispute and law-enforcement requirements. Where a particular processing activity requires consent, we ask for consent and you may withdraw it for future processing. Withdrawal does not affect processing already lawfully completed.
Service providers and international processing
Vercel hosts the website and server functions, and Vercel Blob temporarily stores compressed moderation and generation inputs and stores completed videos privately during the seven-day delivery period. Supabase hosts the PostgreSQL account, session, purchase, historical moderation-decision and delivery ledger used by our server. SeeAPI processes compressed portrait copies to return automated image-safety classifications. Waffo Pancake processes optional text instructions through its stateless prompt-safety endpoint. PayPal processes checkout, payment and refund information. Resend processes account email addresses to send one-time sign-in codes and processes the account email and private result link to send delivery messages. Google processes Google sign-in and provides the verified profile fields described above; Google's Privacy Policy applies to that interaction. KIE and Seedance 2.0 Mini process generation requests and completed results. These providers may process information in countries other than the one where you live. Their own privacy policies, security measures and legal obligations also apply. Review the SeeAPI moderation documentation, the Waffo integration documentation, the PayPal Privacy Statement, the KIE Seedance 2.0 Mini documentation and the Supabase Privacy Policy.
AI Zombie Trend retention
AI Zombie Trend does not provide a permanent video library and does not intentionally keep uploaded photos in its application database. Temporary Vercel Blob copies used for SeeAPI input moderation are scheduled for deletion immediately after input review. Separate signed provider-input copies are kept only while the KIE task is active and are deleted after the task completes or fails. Historical tasks reviewed before output moderation was disabled may retain only the task-linked decision status and provider moderation task identifier; returned category labels are not stored in the customer ledger. Email verification challenges expire shortly after issue, active sign-in sessions expire after 30 days, and expired session records may be removed during routine maintenance. We keep the basic account record until you request deletion or the account is no longer needed, subject to payment, fraud-prevention, dispute and legal retention duties. A completed video is copied to private Vercel Blob storage for seven days from archiving so the customer can download it and support can reissue the link; an automated cleanup then deletes that copy. KIE states that generated media is retained for 14 days and task logs for two months; temporary network, hosting and other provider copies may exist for the time needed to transmit, process, secure and deliver a request.
Security
AI Zombie Trend uses encrypted HTTPS transport, HttpOnly and SameSite session cookies, one-way hashes for session tokens and verification codes, server-side secrets, signed payment and model callbacks, encryption for stored email addresses, private video storage, expiring download links and an atomic purchase-balance ledger. No online service can guarantee absolute security. You are responsible for securing your Google or email account, device and downloaded videos, and for avoiding sensitive or unnecessary information in uploaded files or optional instructions.
Your choices and requests
You may stop an AI Zombie Trend request before submission, replace a selected image or clear local browser data. You may also contact us to request access to, correction of, a portable download of, or deletion of personal information that we control, and to object to or request restriction of processing. You may withdraw consent where consent is the legal basis and complain to the data-protection authority available in your jurisdiction. We may ask for reasonable verification before acting and may retain transaction records where tax, fraud prevention, dispute handling or other law requires it. We complete verified deletion requests within 30 days, unless applicable law permits an extension or requires us to retain specified records; if so, we will explain the exception.
Children
AI Zombie Trend is not intended for children and does not permit photos depicting minors. You must be at least 18 years old, or the age of legal majority where you live, to purchase and use the service.
Changes to this policy
AI Zombie Trend may update this policy when the service, providers or legal requirements change. The version and effective date at the top identify the current text. For a material change, we will post a prominent notice on aizombietrend.net at least 15 days before the new version takes effect unless an urgent legal or security reason requires faster action. Earlier versions are retained for our compliance records. Your continued use after the effective date is governed by the updated policy.
Contact
For privacy questions or requests, email support@aizombietrend.net. Please do not attach identity documents, full payment-card details or additional private photos unless we specifically request a safer verification method.