Privacy Policy

1. Who this covers

This policy explains how BoogiePaw (boogiepaw.com) collects and uses information when you use our AI dog-dance studio. Questions: support@boogiepaw.com.

2. What we collect

• Account basics. When you sign in with Google we receive your name, email address and profile picture. We never see your Google password.
• Your uploads and results. Dog photos you submit, so we can render your video, plus the finished videos we generate, so you can watch them again (downloading unlocks after any credit pack).
• Usage data. Task status, template chosen, device/browser basics and IP address needed to run the service and stop abuse.
• How you found us. On your first visit we save a first-visit source record: the campaign tags in the link you arrived from (utm_source, utm_medium, utm_campaign), the referring website, the page you landed on and the time. It is saved once and never overwritten. If you create an account, we attach it to your account at sign-up so we can see which channels bring new users.
• Purchase records. When you buy a credit pack, Waffo Pancake (waffo.ai) (Merchant of Record) handles card details, payment routing, and tax invoices. We only store what you bought and when — never your card number.

3. How we use it

We use this information to generate your videos, keep you signed in, process checkout via Waffo Pancake, send transactional mail, prevent fraud, and meet legal obligations. Uploads and results are used to deliver your videos — not to advertise you to anyone else.

We may keep anonymized technical metadata (render times, failure rates) to keep the service reliable. We don't use your photos or videos to train AI models, and we don't use them in public marketing or showcases.

3a. Custom dance videos

If you use Custom dance you upload two things: a photo of your pet and a short reference dance video. Here is what happens to them.

Preparing your reference video. We crop the video to a vertical 9:16 frame, keep only the first 10 seconds, remove the audio, and re-encode it. We take a small number of still frames from the processed video and send them to an automated safety review model, which checks that the clip shows a dancer and does not contain prohibited content. The original file you uploaded is not stored. Only the processed version is kept.

Generating your video with third-party AI providers. To make your video we send your pet photo and the processed reference video to third-party AI providers: one provider edits your pet photo into a standing dance pose and helps check the result; another uses the posed pet image and your reference video to generate the dance video. These providers process the data on servers in Beijing, China. Using Custom dance therefore involves transferring your photo and reference video outside your country, including to mainland China. We send only what is needed to create your video. We also run automated checks on the finished video before showing it to you.

How long we keep it. Your reference video and uploaded photos are kept for 15 days and then deleted automatically, the same as other uploads. Finished videos stay in My videos and are not deleted automatically.

Model training. The third-party AI provider that edits your photo into a dance pose states that it does not use customer data submitted through its pay-as-you-go API to train its models without authorization.

Only upload videos you have the right to use. Upload only reference videos that you made yourself or have permission to use. Make sure everyone who appears in them has agreed to their use. Do not upload videos of minors or of anyone who has not consented. Pet photos must show only your pet, with no people.

4. Security and sharing

Traffic is encrypted in transit (HTTPS/TLS). Access to production data is limited to running the product. We do not sell, rent or share your photos, videos or personal details with advertising companies.

We share data only with the processors below. This is the complete list of third parties that receive your data:

• Google — sign-in with Google (your name, email and profile picture), Google Analytics (visit statistics), and Google Fonts (your browser loads our web fonts from Google, which sees your IP address). Separately, our internal operator tooling (“Leon Ads API”) may use the Google Ads API with the adwords scope to read Keyword Planner search-volume metrics for SEO research on Google Ads accounts we own. That tooling does not access BoogiePaw customer photos, videos, or account contents.
• Waffo Pancake — payment processing, invoices, sales tax, fraud controls, and pre-generation prompt safety screening via Waffo Prompt Sift. We send generation metadata and prompts for verification, not your raw photo.
• Third-party AI providers (including a gateway and vision/video models; some processing on servers in mainland China) — your uploaded photo, motion reference, and, for Custom dance, your processed reference video. A third-party AI gateway passes your uploaded photo to the image safety check and to the video model, and returns the results. A vision model checks your uploaded photo for automated dog-detection, eligibility screening and content-safety checks before generation. If that check is unavailable, a smaller fallback vision model runs the same check, which may be served by a different third-party AI provider. For this check your photo is sent inside the request itself, not as a link. We retain the moderation decision, check ID, and a photo hash for auditability, never publishing your photo in logs. A video model receives your uploaded photo, motion reference clip, and generation instructions, to generate your dancing video. The video model reads your photo through a signed link that works only for that photo and stops working 15 minutes after it is created. For Custom dance, one provider on servers in Beijing, China receives your pet photo to create an upright dance pose and to run related automated checks on that pose. Another provider, also on servers in Beijing, receives the posed pet image and your processed reference dance video to generate the dance video. Output is copied to our storage when ready.
• Cloudflare — hosting, private object storage (R2), database records, edge network protection, and transactional email when a video finishes or fails.
• Product analytics (Google Analytics, Plausible) to monitor conversion and usability. No third-party ad-retargeting trackers.
• TikTok — only if you connect TikTok: your open ID (to show connection status) and the video you choose to send to your TikTok drafts.
• Authorities, if strictly required by applicable law.

A current list of AI subprocessors (legal entity names and processing locations) is available on request at support@boogiepaw.com.

TikTok integration (optional)

If you choose to connect your TikTok account, BoogiePaw uses TikTok's Login Kit and Content Posting API so you can send a video you created on BoogiePaw to your TikTok account as a draft. Connecting TikTok is optional and is not required to use BoogiePaw.

What we access. With your permission, we request these TikTok scopes:

• user.info.basic — required by TikTok Login Kit together with content posting. We receive your TikTok open ID and use it only to identify the connected account and show connection status in BoogiePaw. We do not use this scope to read your followers, messages, other videos, or analytics.
• video.upload — lets us upload a video you select to your TikTok drafts. We do not pre-fill a caption. You review, edit and publish the draft yourself in the TikTok app; we never publish on your behalf.

When you authorize, TikTok also returns an access token and a refresh token for these scopes.

How we use it. We use user.info.basic data only to show that TikTok is connected. We use the tokens only to upload the specific video you choose, and only when you tap the send-to-TikTok action. We do not use TikTok data for advertising, profiling or AI model training.

Storage and retention. Your TikTok tokens and open ID are stored only on our servers, encrypted at rest, linked to your BoogiePaw account, and are never exposed to your browser. We keep them only while your TikTok connection is active. When you disconnect TikTok or delete your BoogiePaw account, we delete them immediately. If a token expires or is revoked and cannot be refreshed, we delete it.

Revoking access and deletion. You can disconnect TikTok at any time in BoogiePaw on the My Videos page (Disconnect TikTok, also in the Share window). You can also remove BoogiePaw's access in the TikTok app under Settings and privacy > Security and permissions > Apps and services permissions. To delete your data, use Delete my data or email support@boogiepaw.com. Drafts or posts already sent to TikTok are controlled by your TikTok account and must be deleted in TikTok.

Sharing. We do not sell, rent or share your TikTok data. We send your selected video to TikTok only to complete the upload you requested; TikTok handles it under its own Privacy Policy (https://www.tiktok.com/legal/privacy-policy).

5. Your rights

You can access or correct account details, watch your videos (downloading unlocks after any credit pack), and delete your account via Delete my data. Email support@boogiepaw.com for access or deletion help. We respond within 30 days.

6. Retention

Uploaded photos and intermediate files are automatically deleted after 15 days; finished videos are kept with your account so you can watch your history again (downloading unlocks after any credit pack). Account data stays while your account is active. After deletion we remove or anonymize personal data from active systems within 30 days. Self-service deletion removes stored uploads and results before clearing their database records. If cleanup fails, the account is restricted and deletion can be retried. Minimal deletion, security and transaction records may be retained for fraud prevention or legal obligations. Our payment processor and AI providers may retain transaction and audit data under their own statutory policies. Payment processor: Waffo Pancake. AI providers: those listed in section 4. Contact us for assistance with a processor data deletion request.

We do not use your photos or videos to train any models. Our third-party AI providers process them only to create your video, under their own terms.

7. Cookies

We use session cookies to keep you signed in and remember your credit balance. You can block cookies in your browser; sign-in will not work without the session cookie.

The first-visit source record described in “How you found us” above is stored in a first-party cookie (bp_ft) and in a copy in your browser's local storage. Both expire 180 days after your first visit: your browser removes the cookie, and the local-storage copy is deleted the next time you visit and is never used again. After that, your next visit counts as a new first visit. Within the 180 days the record is saved once and never overwritten, is attached to your account if you sign up, and is not shared with advertisers. It is an ordinary browser cookie, so scripts running on boogiepaw.com pages can also read it.

For visit statistics we use Google Analytics and Plausible, which are enabled when the page loads. We use them to improve the product and to measure traffic. You can refuse analytics through your browser settings or with the Google Analytics Opt-out Browser Add-on. We also set a first-party cookie that records how a visit reached BoogiePaw (for example a search engine, an AI assistant, a social site or a campaign link) so we can see which channels bring new users; it is read only on boogiepaw.com, is never used to track you on other sites, and is never sold. Questions: support@boogiepaw.com.

8. Children

BoogiePaw is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. BoogiePaw is for pets only: every uploaded photo must show a single dog, with no people and no human figures. If we learn that personal data of a minor under 13 has been collected, we will delete it immediately.

9. International transfers

Your data may be processed in countries other than your own by the processors listed in section 4, and only by them: Cloudflare, Google, third-party AI providers (including a gateway and vision/video models; some processing on servers in mainland China), Waffo Pancake, Plausible and TikTok. We use those processors to operate the service securely.

10. Google Ads API (operator SEO tooling)

BoogiePaw’s public product does not require customers to connect a Google Ads account. The site operator (Leon Chen) runs a separate internal desktop/CLI tool named Leon Ads API that connects to Google via OAuth with the scope https://www.googleapis.com/auth/adwords. The tool calls Google Ads API Keyword Planner historical metrics (for example average monthly searches and related planning fields) only for keyword research that supports SEO for boogiepaw.com and related products.

Access is limited to Google Ads accounts the operator owns or manages (including an MCC). Data retrieved is keyword research metrics, not BoogiePaw user photos, videos, payment details, or end-user account profiles. We do not sell, rent, or share those Ads API metrics with unrelated third parties, and we do not use this OAuth connection to create or manage ads for other people.

The OAuth consent screen for Leon Ads API is shown only to the operator (support@boogiepaw.com), not to BoogiePaw customers. Questions about this tooling: support@boogiepaw.com.

11. Changes

If this policy changes in a material way we will update the date above. Continued use after an update means you accept the revised policy.