Privacy
Last updated October 25, 2026
This policy explains what personal data Furmous collects, why, who receives it and what your rights are. We collect only what is needed to make your videos and take payments, plus website analytics (with your consent in Europe, see Cookies). We do not sell data or show ads.
Who is responsible
The controller is Błażej Kustra, ul. Romana Kiełkowskiego 10b lok. 12, 30-704 Kraków, Poland. For anything about your data, email hello@furmous.ai.
What we collect
- Account: your email address, and the name and profile picture Google or Apple share if you sign in with them.
- Your content: pet photos and names, clips you upload, the directions and descriptions you type, and the videos we generate for you. Clips you upload may show other people; see “People in your clips” below.
- Purchases and credits: which pack you bought, the amount, the Stripe payment reference, the time you agreed to immediate supply, and how you spent credits. We never see your card details.
- Reports and support: problem reports, their notes, and emails you send us.
- Safety records: when an automated check blocks a request, we keep the category (for example “violence”), not the content.
- Technical data: IP address, browser and request logs kept by our hosting providers for security and troubleshooting.
Why, and on what legal basis
- To run your account, make your videos, take payments and handle refunds and complaints: performing our contract with you (GDPR Art. 6(1)(b)).
- To keep tax and accounting records of payments and to answer lawful requests from authorities: legal obligation (Art. 6(1)(c)).
- To check uploads for prohibited content, prevent fraud and abuse, keep the service secure, handle reports of illegal content, and defend legal claims: our legitimate interests (Art. 6(1)(f)).
Uploads are checked automatically before you are charged, and a request that fails the check is not generated. This does not have legal or similarly significant effects on you, but if you think a check got it wrong, email us and a person will look at it.
People in your clips
If you upload a clip that shows people, we process their image only to render your video, on your instruction and on the basis of our legitimate interest in providing the service. You must have their permission (see the Terms). Anyone who appears in a clip can ask us to delete it via Report content or by email.
Who receives it
We use the providers below to run Furmous. They process data on our behalf under data processing agreements, unless marked as independent controllers. Your content is sent to an AI provider only when you start a video.
| Provider | What for | Where |
|---|---|---|
| Convex | Database, file storage and backend for your account, uploads and videos | USA |
| Vercel | Hosts the website | USA |
| Cloudflare (R2) | Stores and delivers copies of your photos, clips and videos, and the template videos (sees your IP address) | Global |
| Google (Google Analytics) | Website analytics, with your consent in Europe (see Cookies) | EU / USA |
| Higgsfield | Renders your video with the model you choose (ByteDance Seedance, Alibaba Wan, Kuaishou Kling or Higgsfield Genjutsu). Receives your pet photos, the source clip and your text | USA |
| Alibaba Cloud (Model Studio) | Renders some Wan videos directly. Receives the same as Higgsfield | USA (Virginia) |
| OpenAI | Automated safety check of photos, clip frames and text; checks that photos show a pet | USA |
| Stripe (Link) | Payments. Packs are sold through Link, Stripe’s merchant-of-record service, which takes the payment, handles tax, sends receipts and answers payment questions. Stripe is an independent controller for payment data | Ireland / USA |
| Resend | Sends sign-in codes by email | USA |
| Google, Apple | Sign-in, if you choose it. Independent controllers | USA |
Transfers outside the European Economic Area rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. Email us for a copy of the relevant safeguards.
Your files are delivered from links with long random addresses that can't be guessed, so only you (and the providers above, while rendering) get them. Anyone you share a link with can open that file. We do not use your photos, clips or videos to train AI models, and we do not show them to anyone else or use them as examples without your permission.
How long we keep it
- Your content and videos: until you delete them or your account.
- Account, credit history and reports: until you delete your account.
- Payment records: kept by Stripe, and in our accounting for as long as tax law requires (in Poland, generally 5 years from the end of the year of the payment).
- Copies at AI providers: kept only as long as each provider's own terms allow after the video is rendered. OpenAI keeps data sent to its API for up to 30 days to detect abuse and does not use it to train its models.
- Hosting logs: a short period set by each provider, for security and troubleshooting.
Deleting your account on the Account page signs you out everywhere and erases your uploads, videos, pets, credit history and login from our systems.
Your rights
You can ask us to access, correct, delete or export your data, to restrict its use, or object to processing based on our legitimate interests. Email hello@furmous.ai; we reply within one month. You can also complain to a data protection authority, in Poland the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or the authority where you live.
Cookies, local storage and analytics
Your browser stores your sign-in session (so you stay signed in) and whether you muted template previews. Both are needed for features you use. Stripe sets its own cookies on its checkout page for fraud prevention.
Google Analytics. furmous.ai uses Google Analytics 4 to see how visitors find and use the website. It is provided by Google Ireland Limited, which processes the data for us under Google's terms (Google is also a controller for some uses, as its terms describe). It collects the pages you view, where you came from, your approximate location (country and city, from your IP address, which Google Analytics doesn't store), your device, browser and screen size, and how long you stay. It sets the cookies _ga and _ga_<id>, which hold a random identifier and last up to 2 years. Data in Google Analytics is kept for 14 months and then deleted. Google may process it outside the European Economic Area under the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
If you visit from the European Economic Area, the United Kingdom or Switzerland (or we can't tell where you are), Google Analytics doesn't load at all unless you accept it in the cookie banner; the legal basis is then your consent. You can change your choice at any time with the “Cookie settings” link in the footer; rejecting removes the Google Analytics cookies. Elsewhere it loads without a banner, on the basis of our legitimate interest in knowing how the website is used. We also set a cookie, furmous_region, that records only “eu” or “other” for 30 days, so we know whether to show the banner, and we store your choice in your browser's local storage for 12 months.
Age
Furmous is for adults (18+). We do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will tell you by email or on the site before it applies.