Privacy Policy
This Privacy Policy explains how the HeatMe AI Collective ("HeatMe", "we", "us", or "our") processes information when you access our website, Telegram bot integrations, and AI generation tools (the "Service").
1. INFORMATION WE COLLECT
To operate the Service, we collect and process the following data:
1.1 Account & Identity Data:
- If you log in via Google OAuth, we collect and store your email address, name, and profile picture.
- If you use our Telegram flows, we collect your Telegram User ID and basic profile details.
1.2 User Content:
We collect the raw images, prompts, and parameters you upload to generate video outputs, as well as the generated videos themselves.
1.3 Technical & Telemetry Data:
We collect your IP address, raw User Agent strings, and session IDs. We also track analytics and presence events, including page paths, referrers, UTM parameters, and purchase funnel events to understand how the Service is used.
1.4 Support Data:
If you contact our support center, we collect and store the contents of your messages and associated metadata.
1.5 Transactional Data:
We collect metadata related to credit purchases. We do not collect or store your full credit card numbers.
1.6 Policy, Deletion & Security Records:
We record the versions and time of your acceptance of our Terms, Privacy Policy, and important notices. We also keep account-deletion events, limited request metadata, moderation decisions, credit-ledger entries, and security or abuse-prevention events where needed to demonstrate compliance, investigate misuse, or establish, exercise, or defend legal claims.
2. HOW WE USE YOUR INFORMATION
We process your data to:
- Execute your image-to-video generation requests via our infrastructure.
- Maintain your shared accounts, credit balances, and session security.
- Run automated safety and moderation checks on uploaded images.
- Provide customer support and troubleshoot technical issues.
- Analyze traffic, telemetry, and purchase funnels to improve the Service.
We DO NOT use your private uploaded images to train broad foundational AI models, nor do we sell your personal data to third-party data brokers.
3. DATA RETENTION AND DELETION
3.1 Media Retention:
Inputs and generated videos are temporarily stored in local directories and third-party object storage (S3) to facilitate processing and delivery. We employ a routine cleanup process designed to delete generated media approximately thirty (30) days after generation. Account deletion immediately removes access through your HeatMe account but does not reset the media's existing cleanup deadline. A short-lived storage URL issued before deletion may remain valid until it expires, and deletion cannot recall copies already downloaded or shared by you. A documented legal hold may temporarily suspend cleanup when preservation is necessary for a dispute, chargeback, investigation, legal obligation, or the establishment, exercise, or defense of legal claims.
3.2 Account Data:
While your account is active, we retain account data needed to provide the Service, maintain balances, support users, secure the platform, and prevent abuse. When deletion is completed, we permanently close access, revoke sessions and access tokens, remove the user-facing display profile, notifications, and marketing attribution, and forfeit the remaining credit balance.
3.3 Limited Records Retained After Account Deletion:
Account deletion is not an indiscriminate destruction of every record. We retain only the records reasonably necessary for applicable accounting and legal obligations, proof of contract and policy acceptance, payments, refunds, chargebacks and the credit ledger, support and deletion requests, generation audit metadata, referral and self-refund history, moderation, fraud, security and abuse prevention, and the establishment, exercise, or defense of legal claims.
A limited identity binding, such as the stable Google or Telegram provider identifier and associated login identifier, remains attached to the closed account so we can enforce the deletion, prevent duplicate-account and bonus abuse, and protect the Service. These retained records are not used to reactivate the account or for marketing. We retain each category only for as long as its purpose, applicable limitation period, legal obligation, or documented legal hold requires, and then delete or anonymize it where reasonably possible.
3.4 How Account Deletion Works:
Authenticated non-admin users may permanently close their account through the Account deletion option in the Support Center after reviewing and confirming the consequences. An active generation must first finish or fail, and a recently opened payment must settle or expire. If self-service cannot be completed, the user may submit the structured manual deletion request for support review. After deletion, the same Google or Telegram identity cannot automatically register a new HeatMe account; any request to return must be reviewed by support and does not restore old credits or account data.
4. THIRD-PARTY INFRASTRUCTURE
To provide the Service, we utilize specialized third parties that process your data on our behalf. These include:
- Cloud compute providers (e.g., Runpod) that receive your image payloads to run the AI generation.
- Object storage providers (e.g., AWS S3) that host your generated MP4 files and temporary recovery copies of uploaded input images when needed for queued-job failover.
- Platform integrations (e.g., Telegram) that fetch and serve media via their APIs.
These providers process data according to their operational requirements to facilitate the Service.
5. SECURITY MEASURES
We use industry-standard encryption (TLS/SSL) for data in transit. While our application supports optional encryption for outputs in certain configurations, standard generated media and inputs are processed and may be stored in standard formats (e.g., MP4, raw image bytes) to ensure compatibility and delivery. No system is 100% secure; you upload content at your own risk.
6. INTERNATIONAL DATA TRANSFERS & GOVERNING LAW
HeatMe operates globally, and your data may be processed on servers located in various jurisdictions. Where applicable law requires safeguards for international transfers or grants mandatory privacy rights, those requirements and rights remain applicable regardless of the governing-law provision in our Terms.
7. YOUR RIGHTS AND CONTROL
You may clear your Telegram chat history with our bot at any time. You may use the Account deletion option in the Support Center to close your account yourself or submit a structured manual request. Depending on applicable law, you may also request access, correction, restriction, portability, objection, or erasure. The right to erasure is not absolute: we may retain limited data where processing remains necessary for a legal obligation, fraud and abuse prevention, or the establishment, exercise, or defense of legal claims. We will explain any applicable limitation when responding to a request.
8. CONTACT US
For privacy-related questions or data deletion requests, use the Support Center or contact: [email protected].