# MakeHit AI — Photo processing and privacy

Canonical HTML page: [https://makehit.app/privacy](https://makehit.app/privacy)
Document type: public usage summary, not a verbatim page export.
Last substantive review: 2026-11-08 (Asia/Shanghai).
Purpose: Understand photo processing, direct file access, retention and deletion requests.

MakeHit AI has 11 prepared templates with different photo roles, durations (6–29s), aspect ratios and credit costs — see the template table in [index.md](https://makehit.app/index.md) and [pricing.md](https://makehit.app/pricing.md).

This is an operational summary of the [Privacy Policy](https://makehit.app/privacy), not a replacement for its full terms.

The service is for users aged 13 or older; users aged 13–17 need parent or guardian permission to use it and upload their own photo. Other identifiable people in uploaded photos must be consenting adults. Users under 13 must not create an account or submit personal information. Current forms do not ask for separate age or guardian-permission confirmation; the generation flow confirms permission to use the people pictured, not age or guardian consent. The site does not collect birth dates or independently verify age or guardian permission.

## Media and third parties
Anonymous photo selection creates a local browser preview and can save selected photos and quality in that browser for up to 24 hours. After sign-in, starting a preview-mode creation uploads photos to temporary cloud storage before generation; discovery uploads and their records expire after 24 hours and are eligible for scheduled cleanup. Live mode uploads photos when you submit a generation. Each template uses its own prepared workflow for its required subject, supporting-role and scene inputs, then produces an MP4 and thumbnail. Account email and profile name are not included in model-generation requests.

Prepared native-template workflows and the general video-generation API use APIMart and/or Kie API depending on actual model and workflow capabilities. APIMart is preferred where both routes support the model or workflow stage, Kie is the fallback, and models or stages without a supported APIMart route remain Kie-only. MakeHit AI operates from the United States and will never use your media to train or fine-tune AI models, but equivalent commitments and deletion behavior have not been verified for every configured provider and model operator. Kie documents 14-day retention for generated media and two months for task logs; its separate File Upload API documents 24 hours, but the Kie prepared-workflow path uses temporary links instead. Those Kie-specific periods do not establish periods for APIMart, every fetched input or model-operator copies. Neon PostgreSQL stores account and task records and Cloudflare R2 stores media. Production sign-in separately uses Cloudflare Turnstile and validates its challenge token server-side. Other providers handle authentication, payments, email, hosting and usage/performance data as described in the policy.

## Publication and access
Uploads and results are not automatically published in the examples or marketing. Publication requires separate optional permission identifying the final video and use; generation consent alone is insufficient. The current generator has no public-display opt-in control, so submitting a job does not make its media eligible for public examples. Viewing and downloading videos through the site require sign-in to the account that created them. AI providers receive temporary links to the files needed for processing. Deleting a video from the site does not remove copies already downloaded or held by third-party providers.

## Retention and deletion
Only Ozil Goal inputs have automatic deletion from our storage about 48 hours after completion or failure. Other task inputs do not currently have that cleanup. Delete a completed or failed Ozil Goal task in My Creations to remove its stored photos, references, video and thumbnail sooner; cleanup is retried after storage errors. For other tasks, Delete currently removes history access only and leaves associated stored files in place; contact support for a separate file-deletion review. A running task cannot be deleted. Email support@makehit.app with the task ID if cleanup remains pending, you want account closure, or you want us to submit a request to the applicable provider where a deletion process is available. We cannot guarantee deletion by every underlying model operator. Browser drafts, signed-in discovery uploads, backups and third-party copies are separate.

## Account data, providers and requests

The policy covers account/sign-in details, generation and credit records, payment records, technical/session data and support messages as well as media. New accounts receive a transactional account-confirmation welcome email. A new user receives one first-video reminder at the next successful scheduled check after 48 hours only after separately opting in to that reminder; the reminder includes an unsubscribe link. Google sign-in does not import your Google Photos, Gmail or Drive files. Payment credentials go to the payment provider; the application does not store full card numbers or security codes. Providers listed in the policy include APIMart and Kie API, infrastructure and sign-in security services, Google, PayPal, Brevo and Vercel analytics/performance services where enabled.

Google Analytics 4 records page views and product conversion events where enabled, including photo preparation, account access, pack selection, checkout, confirmed purchases and completed videos. Events can include an internal user ID and purchase transaction ID, pack, amount and currency. Photos, filenames, email addresses, prompts and payment credentials are not intentionally sent in these events. Browser tracking can be blocked or missed; it is not the authoritative billing record. Use the site's Privacy settings control to accept or withdraw optional analytics consent.

Depending on applicable law, requests may cover access, correction, deletion, export, restriction or objections. Email support, preferably from your account address, with the request and relevant task identifiers. Proportionate verification may be needed. Settings do not currently provide complete correction, export or account-deletion controls, and revoking Google access does not delete the account or files. Requests are handled within applicable legal deadlines; no universal response period is asserted here.

The policies identify US operation, but that does not establish that every provider stores data only in the US. Consult the full [privacy policy](https://makehit.app/privacy) for cookies, providers, international processing and regional rights. Do not submit media requiring assurances the service cannot currently provide.

Related: [Usage and rights](https://makehit.app/terms.md), [My Creations and task results](https://makehit.app/my-creations).
Next: [Read the policy](https://makehit.app/privacy) or email [support@makehit.app](mailto:support@makehit.app).