Privacy Policy
Updated and effective October 29, 2026. Version 2026-10-29.5. This policy explains what TrainWindowAI (trainwindowai.com) processes, which providers process it, and for how long.
1. Operator and contact
TrainWindowAI is operated by Chen Wenjian, an individual operator in China, who is the data controller for this service. Privacy requests, deletion, safety reports and support: support@trainwindowai.com.
2. Information we process
Your account name, email and authentication identifiers; vehicle photos you upload; generated videos; job, credit and moderation records; checkout and transaction references, buyer/account emails, product details, amounts, status and payment/refund event records; support emails; security logs such as IP address, browser metadata and request times; and, where described below, how you found us and what you did on the site. The generator uses a fixed original prompt, not free-form user text. Full card details are handled by Waffo Pancake and its payment partners, not stored by us. We do not use face recognition to identify people.
3. Accounts
When account services are enabled, you sign in with an email and password handled by Better Auth on our server. Google sign-in is available only when shown as an enabled option. Email sign-up does not send a verification email, so an email address alone does not prove mailbox ownership; privacy requests may need extra checks. Password hashes are stored in our database and never sent to AI providers.
4. Necessary cookies
We use a first-party authentication cookie to keep you signed in. Sessions expire after 30 days and may be renewed when you return; signing out ends the session. Blocking this cookie prevents account features from working. We do not set advertising cookies. Third-party video players may set their own cookies after you choose to load them, as described below.
5. Why we process it
Where applicable law requires a legal basis: account access, requested generation, delivery and purchase processing rely on performing our contract with you; support relies on that contract and our legitimate interest in resolving requests; security, abuse prevention and necessary service notices rely on our legitimate interest in operating a safe service; tax, accounting and required disclosures rely on legal obligations. Any optional analytics and its basis are described separately below. We do not currently send marketing emails or use customer media for marketing.
6. Providers and AI models
Vercel hosts the website. Neon stores account and application records in an independent database. Cloudflare R2 provides private storage for photos and results when generation is enabled. During that workflow, your photo is sent through a short-lived private link to SeeAPI (GROWCRAFT PTE. LTD.) for image moderation and to APIMart to run the model; finished results are sent the same way to SeeAPI for moderation. Waffo Prompt Sift screens the complete fixed prompt before generation. Waffo Pancake is the intended Merchant of Record, subject to merchant approval; checkout is currently unavailable. Feishu Mail hosts our support mailbox and processes the email address, message and attachments you send us. Google provides sign-in only when the option is enabled and you choose it. The models in use are listed on our About page.
7. Analytics
We do not run analytics scripts and do not record how you found us.
8. Embedded third-party videos
Instagram and YouTube examples load only when you choose to load their players. At that point the platform receives your IP address, device information and referrer and may set cookies under its own privacy policy. You can use the source links instead. These clips remain hosted by their original platforms.
9. Storage and retention
Photos and results are private: they are never shown in a public gallery and are only accessible from the account that created them. They are retained for retrieval while your account is active; download a local copy. Deletion requests are handled by the operator through support. There is no automatic timed deletion in this release. Prompt-review logs retain the account and request identifiers, template and model, a prompt hash, decisions, check IDs, rule version and error type; they do not retain prompt text, photos or signed media links. Input and output moderation outcomes are kept with the job. These records are included in account-deletion requests, subject to the limited legal, dispute and security holds described below. Provider security logs follow their own retention schedules. We review support and operational records for deletion when no longer needed; payment and credit records are retained for applicable accounting obligations. Deleting our copy does not erase files you downloaded or copies retained by providers under their own terms.
10. Model training and sharing
We do not sell personal information, do not use your photos or results to train models, and do not publish them or use them in marketing. External providers process data under their own terms; we do not promise provider-side zero retention.
11. Support and security record periods
Our retention limit for routine support correspondence is 90 days after the request is resolved; for operator-held security and troubleshooting logs it is 90 days after the event. Deletion is manually managed, not automated. Records needed for an unresolved dispute, security investigation or legal obligation are restricted to that purpose and reviewed every 30 days; we delete them within 30 days after the hold ends, unless a legal retention duty remains. Job and prompt-review records follow the account-deletion rule above. These limits do not set the retention periods of our providers.
12. Transaction and credit records
Checkout is disabled and there are currently no customer payment records. When purchases become available, our payment integration will store account and buyer email addresses; account, order, product, checkout-session and payment references; product descriptions; amounts, currencies, status and timestamps; checkout request/session details; payment and refund event records received from Waffo; and credit-ledger entries. A pending checkout request can also contain the account name. These records support delivery, reconciliation, fraud checks, refunds, disputes and applicable tax and accounting duties. We limit access to those purposes; this does not mean that we receive or store full card numbers or card security codes. Account closure does not erase records that must legally be retained. The retention period is determined by the applicable record category and statutory duty, and any unresolved claim; it is not an indefinite permission to retain the entire account or media. Before accepting payments, we will confirm and publish the numerical retention schedule for those records. Waffo and its payment partners retain their own payment records under their policies and legal duties.
13. Provider retention and deletion requests
SeeAPI states that API request records and logs are retained for 60 days, while stored input/output files, task information and moderation results have no scheduled automatic expiry. Deletion of those records requires a request to SeeAPI. Expiring our signed media links does not delete copies a provider already retrieved. APIMart does not specify a fixed content-retention period in its published privacy policy. Vercel runtime-log retention depends on the hosting plan and observability configuration; its linked documentation describes those periods. We do not promise provider-side zero retention. For verified deletion requests, we aim to remove the account, private media and moderation records under our control within 30 days, subject to legal holds, and request removal of relevant provider-held copies. We track provider responses and tell you about outstanding copies or retention exceptions; our 30-day target is not a guarantee of deletion from every provider or backup.
14. International processing and security
The operator accesses service records from China; the Neon application database is hosted in the United States. Hosting, private storage, support email, payment and AI providers may process data in other countries. A provider’s registered address does not establish where every request is processed. Vercel and Cloudflare publish data-processing addenda containing Standard Contractual Clauses and other transfer provisions for transfers within their scope. Neon is governed by its current product terms and the referenced Databricks agreements. Those documents are linked below; they do not establish that every AI-provider or operator transfer is covered. Provider-specific processing locations and any additional transfer arrangements must be confirmed before customer generation opens. Contact us to request information about the safeguards applicable to your data. We use HTTPS, password hashing, private storage, short-lived signed links, ownership checks and server-side credentials, and restrict access to what is needed to operate the service. These technical controls do not replace legally required transfer safeguards. No system is completely secure; where required by law we notify affected people and authorities of qualifying breaches within the applicable statutory deadlines.
15. Your rights
Depending on where you live, you may request access, correction, deletion, restriction or portability of your data, object to processing, or withdraw consent. Email support@trainwindowai.com from your account email. We aim to respond within 30 days. You may also complain to your local data protection authority. The service is for adults 18+. If you believe a child has provided personal information, contact us so we can investigate and remove it.
16. Changes
We publish the updated version and effective date on this page and announce material changes through a visible site notice at least 14 days before they take effect. Changes required urgently by law or to address a security incident may take effect sooner, with notice as soon as practicable.
Provider privacy and processing documents
Questions? support@trainwindowai.com