Privacy Policy

Who is responsible

We Create Visuals is a trading name of Loykey Pte. Ltd., a company registered in Singapore (UEN 202517562K) at 68 Circular Road, #02-01, Singapore 049422. You can reach a person at info@loykey.com. We are the controller of your personal data for the purposes of the EU and UK GDPR and Singapore's PDPA.

What we collect

Your email address, so we can send you the video and a receipt.

Your video description and any reference images or reference videos you upload. These can contain personal data, for example a person's face. Please only upload material you are allowed to share.

Your order details: length, format, price, the time you accepted our terms, and the payment status. Card details are entered on Stripe's page and never reach us.

Basic technical data (IP address, browser type, time of request) that our hosting provider records in server logs to keep the site running and secure.

Visit statistics from Vercel Web Analytics, which counts page views and the steps of our order form without cookies and without storing your IP address or identifying you.

Meta Pixel data (if you are in the EU/EEA, the UK, Switzerland or Brazil, only after you accept marketing cookies; elsewhere by default, unless you switch it off under "Cookie settings"): data collected by the Meta Pixel (the pages you visit, the order steps you complete, the order value, and browser and device identifiers including cookies such as _fbp), so we can measure our ads on Facebook and Instagram. If you decline, it is never loaded.

We do not create accounts.

Why we use it (legal bases)

To make, deliver and support your order: performance of a contract (GDPR Art. 6(1)(b)).

To keep accounting and tax records: legal obligation (Art. 6(1)(c)).

To keep the service secure, prevent fraud and count visits with cookieless statistics: our legitimate interests (Art. 6(1)(f)).

To measure our ads with the Meta Pixel: your consent (Art. 6(1)(a)) in the EU/EEA, the UK, Switzerland or Brazil; elsewhere our legitimate interest in measuring our advertising. Either way you can switch it off at any time with "Cookie settings" at the bottom of every page.

Outside the EU/EEA and the UK, if you start an order but don't finish paying, we may send you one reminder email about that order, with a link to finish it; we don't send more. Our delivery emails can include a short note about our packs. Apart from that, we never send you marketing emails unless you ask us to, and we never use your images to train AI models.

Who we share it with

Only the service providers needed to run the service, each bound by a data-processing agreement: Stripe (payments and order records), Vercel (website hosting and temporary storage of reference images and videos), Resend (sending emails), Vercel Web Analytics (cookieless visit statistics), and the AI video-generation providers we use to make your video, which receive your description and reference images only for that purpose. We can name the specific generation providers on request.

When the Meta Pixel is on (see above): Meta Platforms Ireland Ltd., which receives Meta Pixel data. For collecting that data Meta and we are joint controllers; Meta's own use of it is covered by its privacy policy at facebook.com/privacy/policy.

Some of these providers are based in or process data in the United States and other countries outside the EEA/UK. Those transfers are protected by the European Commission's Standard Contractual Clauses or equivalent safeguards.

We share data with authorities only when the law requires it. We never sell personal data.

How long we keep it

Reference images and videos are deleted automatically from our storage 30 days after upload.

Order records (email, description, price, date) are kept by our payment provider for as long as tax and accounting laws require, normally up to 7 years, and are not used for anything else.

Server logs are kept by our hosting provider for a short period, typically days, for security.

Meta Pixel data (when it is on) is kept by Meta under its own policy; the _fbp cookie expires after 90 days.

Your rights

You can ask to access, correct, delete, restrict or object to the use of your data, and to receive a copy in a portable format. Email us and we will reply within one month. We may need to keep some order records where the law requires it.

If you are in the EU, EEA or UK you can also complain to your local data protection authority. In Singapore, you can contact the Personal Data Protection Commission.

California residents: we do not sell or share personal information for cross-context behavioural advertising.

Security and age

Data travels over HTTPS and is stored with reputable providers with access limited to the people who make your video.

This service is for people aged 18 and over. We do not knowingly collect data from children.

Changes

If we change this policy we will update the date at the top of this page.