Privacy Policy
What we collect, why, who processes it, and how long we keep it.
Last updated: 2026-10-18
Victoria Secret AI is run by Deerlight Labs. This page explains what happens to your information when you use the site.
What we collect
- Your account: your email address, and your name and profile picture if you sign in with Google.
- Your photos: the photo you upload to make a video.
- Your videos: the videos made from your photos.
- Purchases: what you bought, when, and the amount and country, as reported by our payment processor. We never see or store your card number.
- Basic usage data: pages you visit, your device type and approximate location from your IP address, used to run and improve the site and to stop abuse. A random visitor ID kept in your browser lets us count how many visitors reach each step; it isn't linked to your name.
- Cookies: to keep you signed in and to remember your choices.
Signing in with Google
If you choose to sign in with Google, Google shares your name, email address and profile picture with us, and nothing else. We use them only to create your account, sign you in and keep your videos and purchases together. We don't sell them, use them for advertising or share them beyond the services below that run the site. You can remove our access at myaccount.google.com/permissions. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
To make your videos, to run safety checks on photos and videos, to show you My videos, to handle payments, refunds and support, to prevent fraud and misuse, and to improve the service. We don't sell your information, and we don't use your photos to train AI models.
Who processes it for us
These services process data only to provide their part of the service to us:
- WhatsToken makes the video from your photo with the MiniMax-H3 model. SeeAPI checks generated videos for safety.
- Sightengine checks photos and video frames for nudity, minors and people.
- Cloudflare hosts the site and stores photos and videos.
- Stripe processes card, Apple Pay and Google Pay payments. Your statement shows DEERLIGHT LABS.
- PayPal processes payments you make with PayPal.
- Google signs you in, if you choose to sign in with Google.
How long we keep it
- Uploaded photos: deleted within 7 days.
- Videos: kept for 30 days in My videos, then deleted.
- Records of refused uploads: kept for up to 90 days to stop abuse.
- Account and purchase records: for as long as your account exists, and longer where the law requires it (for example, tax records).
Your choices and rights
You can ask us to show you, correct or delete your information, or to close your account, by writing to support@deerlightlabs.com. Depending on where you live (for example in the EU, the UK or California), you may have further rights, such as objecting to some uses of your data or complaining to a data protection authority. We answer requests within 30 days.
Children
The site is not for anyone under 18. We refuse photos that appear to show children, and we delete accounts we learn belong to a child.
Security
Data travels over encrypted connections. Uploaded photos are stored under random names that can't be guessed, and videos are only shown to the account that made them.
Changes
If we change this policy in an important way, we will say so on the site.