Terms of Service✦Privacy Policy

Privacy Policy

Last updated: September 9, 2026

1. Introduction

Welcome to wowmade.ai ("Website"). This Privacy Policy explains how Pinewood Labs1 LLC ("Company", "we", "us", or "our"), 30 N Gould St, Ste N, Sheridan, WY 82801, USA, collects, uses, stores, and protects your personal data when you visit or use our Website and services. For users in the EU/EEA/UK, Pinewood Labs1 LLC is the data controller of your personal data.

2. Data We Collect

We may collect, use, store, and transfer different types of personal data, including:

  • Identity Data: name, username, or similar identifiers
  • Contact Data: email address, billing address, phone number
  • Payment Data: payment-related information processed securely by our payment processors, Whop and Stripe (we never receive or store full payment card details)
  • Google Account Data: where you choose to sign in with Google — your Google account identifier, email address, name, and profile picture (see Section 6)
  • Technical Data: IP address, device type, browser type, operating system, login data
  • Account Data: username, password (hashed), subscription status, credit balance
  • Usage Data: information about how you interact with and use our services
  • Content Data: prompts, preferences, uploaded media, and AI-generated images, videos, and audio
  • Biometric and Likeness Information: facial geometry, voiceprints, and other identifiers that may be contained in photos, video, or audio you upload for features such as image-to-video, lip-sync, or voice (see Section 7)
  • Marketing Data: preferences related to receiving communications from us, and advertising attribution data (which ad or link brought you to us) where you have consented to advertising cookies

3. How and Why We Use Your Data (Legal Bases)

We process your personal data for the following purposes. For users in the EU/EEA/UK, the corresponding legal basis under Article 6 GDPR is indicated:

  • Providing the services — operating the platform, processing your prompts and uploads to generate content, managing your account, subscriptions, credits, and payments (performance of a contract, Art. 6(1)(b))
  • Communication — account notices, receipts, renewal and cancellation confirmations, support responses (performance of a contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c))
  • Security and abuse prevention — content moderation, fraud prevention, enforcing our Terms (legitimate interests, Art. 6(1)(f); legal obligation, Art. 6(1)(c))
  • Service improvement and analytics — understanding usage to improve quality (legitimate interests, Art. 6(1)(f))
  • Advertising and analytics measurement — Google Ads conversion tracking, Google Analytics 4, Meta Pixel, and Hyros ad attribution, only where you have consented (consent, Art. 6(1)(a); see our Cookie Policy). After a completed purchase we may also send a server-side confirmation of the purchase (order value and a hashed form of your email address) to Google and Meta so that paid advertising can be measured accurately (legitimate interests, Art. 6(1)(f), or consent where required by law). You can object at any time using the cookie settings or by emailing us.
  • Legal compliance — tax, accounting, and responding to lawful requests (legal obligation, Art. 6(1)(c))

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

4. AI Services and Data Processing

Our services rely on artificial intelligence technologies to generate creative content. Your prompts and uploaded media are transmitted to the AI infrastructure providers listed in Section 5 solely to generate your requested output, and generated content is stored so you can access your creations. Prompts are automatically screened by our moderation systems before processing.

We do not develop, train, or host the AI models behind our services. We do not use your prompts, uploads, or generations to train AI models, and where a provider offers a setting to disable training on customer content we enable it. Each provider processes your inputs on its own infrastructure under its own privacy policy; some providers may temporarily retain inputs and outputs for abuse monitoring or debugging as permitted by their terms. Uploads that contain faces or voices are also covered by Section 7.

5. Data Sharing and International Transfers

We share personal data only as needed with the following categories of service providers, each bound to process it solely on our instructions:

  • Payments: Whop (USA) for all new purchases; Stripe (USA) for subscriptions started before we moved checkout to Whop
  • Hosting and infrastructure: Vercel (USA), Supabase (authentication and database), Cloudflare (content storage and delivery)
  • AI generation providers: WaveSpeed (USA), BytePlus/ModelArk and Alibaba Cloud (Singapore-based international endpoints), fal (USA, video merging), and other model providers we use to fulfil your generation requests — these receive your prompts and uploaded media
  • Email delivery: Resend (USA)
  • Advertising and analytics measurement: Google (Ads and Analytics), Meta Platforms (Pixel and Conversions API), and Hyros (ad attribution) — only with your cookie consent, except for the server-side purchase confirmation described in Section 3
  • Legal or regulatory authorities when required by law or to protect our rights and users

We do not sell your personal data. Where personal data is transferred outside your jurisdiction (including to the USA and Singapore), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Google Sign-In and Google User Data

You can create and access your account with "Sign in with Google". If you do, we request only the basic OAuth scopes openid, email, and profile, and Google provides us with your Google account identifier, your email address (and whether it is verified), and your name and profile picture where available. We do not request or receive access to Gmail, Google Drive, Calendar, Contacts, YouTube, or any other Google service, and we never receive your Google password.

We use Google user data only to:

  • Create your account and authenticate you when you sign in
  • Associate your generations, credits, and purchases with your account
  • Display your name and picture to you within the app
  • Send transactional email about your account, purchases, and generations, and marketing email only where you have opted in
  • Provide support and detect fraud, abuse, and duplicate accounts

Google user data is stored in our database hosted by Supabase in the United States, encrypted in transit and at rest, and retained while your account is active. It is shared only with the service providers that operate our platform (hosting, database, email, payments, and support) and with legal authorities where required. It is never transferred to our AI model providers, never used for advertising, and never used to train AI models. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time at myaccount.google.com/permissions; to delete your WowMade account and the data we hold, use the deletion option in your account settings or email us.

7. Biometric Data, Likeness, and Voice

Photos, videos, and audio you upload may contain facial geometry, voiceprints, body characteristics, or other biometric identifiers of you or other people. By uploading such content you give your express, informed, written consent to the collection, transmission, processing, and use of that biometric information for the purpose of producing the generation you requested, and you confirm that you have obtained the same consent from every other identifiable person in the upload.

We do not sell, lease, trade, or otherwise profit from biometric information, and we do not use it to train AI models. Biometric identifiers are not extracted or stored separately from the underlying upload. Uploads are transmitted to the AI providers listed in Section 5 to produce your generation and are deleted from our storage when you delete the creation or your account, and in any case no later than three (3) years after your last interaction with the service. This section is intended to satisfy the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act, the Washington biometric privacy law, and the EU GDPR.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit, secure infrastructure and access controls, and monitoring and incident response procedures. Despite these measures, no system can be guaranteed to be 100% secure.

9. Data Retention

  • Account data: retained while your account is active; deleted or anonymized within 90 days of account deletion, except where longer retention is required by law
  • Billing records: retained as required by tax and accounting law (typically 7 years)
  • Generated content and uploads: retained while your account is active so you can access your creations; deleted when you delete them or your account
  • Prompts: retained for service operation, quality assurance, and abuse prevention while your account is active
  • Biometric information in uploads: retained only as part of the underlying upload, on the terms in Section 7
  • Moderation and takedown records: retained as needed to enforce our policies and comply with legal obligations

10. Your Rights (EU/EEA/UK and Similar Jurisdictions)

  • Right to access your personal data
  • Right to correct inaccurate or incomplete data
  • Right to request deletion of your data
  • Right to restrict or object to processing
  • Right to data portability
  • Right to withdraw consent where processing is based on consent
  • Right to lodge a complaint with your local data protection supervisory authority

To exercise your rights, contact us at team@wowmade.ai. We respond within the timeframes required by applicable law (one month under GDPR).

11. US State Privacy Rights

If you reside in California or another US state with a comprehensive privacy law, you have the right to know what personal information we collect (Section 2), to access, correct, and delete it, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights.

We do not sell personal information for money. Our use of advertising cookies may constitute "sharing" for cross-context behavioral advertising under the CCPA/CPRA. You can opt out at any time:

  • Via the cookie banner or this button:
  • By enabling the Global Privacy Control (GPC) signal in your browser, which we honor automatically
  • By emailing team@wowmade.ai

12. Children's Privacy

Our services are intended only for adults 18 and older, and are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe that a child has provided us with personal data, please contact us and we will delete it.

13. Cookies and Tracking Technologies

We use cookies for authentication and, with your consent, for analytics and advertising measurement (Google Ads, Google Analytics 4, Meta Pixel, and Hyros). In the EU/EEA, UK, Switzerland, and any region we cannot identify, these services are not loaded and their cookies are not set until you accept them in our consent banner. Full details, including how to change your choice, are in our Cookie Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date, and material changes will be notified to account holders by email or in-app notice before they take effect.

15. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact:

Pinewood Labs1 LLC

30 N Gould St, Ste N, Sheridan, WY 82801, USA

Website: https://wowmade.ai

Email: team@wowmade.ai