Privacy Policy

Operator and contact

Named operator: 李靖 (Li Jing) (individual operator).

Country/region: China.

Website: https://ainightwing.com. Service, billing, refund, security and privacy contact: support@ainightwing.com.

Controller and scope

This policy describes personal data processed by Nightwing AI for its website, sign-in, media workspace and billing. The data controller is 李靖 (Li Jing), an individual operator based in China. Contact support@ainightwing.com for privacy requests. Third-party websites and sign-in providers also have their own policies.

Account and security information

Google sign-in supplies your account identifier, verified email, name and avatar. Auth.js stores user records, linked provider accounts, authentication tokens and database sessions in Cloudflare D1. We use them to sign you in and associate media, jobs and orders with your account. Only the enabled sign-in methods shown on the sign-in page are active. We do not collect a Nightwing password. Rate-limit records and operational errors support abuse prevention and troubleshooting; hosting providers may process network and request metadata.

Creative work and task information

The application stores prompts, model choices, output settings, reference media metadata, media ownership, task identifiers and statuses, provider references, assistant plans and results, generation errors and content-check decisions. Uploaded and retained generated files use Cloudflare R2. These records provide your media library, generation workflow, task recovery and content controls. Do not upload sensitive personal data or another person's likeness or voice without the necessary authority.

AI Assistant model processing

Scene preparation uses Gemini 2.5 Flash (Google) for editable prompts and supported settings. Optional first-frame generation uses Z-Image-Turbo (Tongyi-MAI). Standalone image creation also offers Gemini Nano Banana 2 and Pro, OpenAI GPT Image 2, ByteDance Seedream 4.5 and Black Forest Labs FLUX.2 Pro. Nightwing AI connects these models through third-party hosted AI APIs from its server. The model names and developers identify the underlying technology; this access method does not imply a direct integration, official endorsement or partnership with the model developers. The selected Seedance, Veo or Hailuo model performs video generation as a separate request through the hosted AI service. Scene preparation sends the scene idea, current prompt, settings and required image references to the hosted model service. First-frame generation sends the prepared image prompt and output settings. These model requests use the generation processing partners described below; their data processing is separate from payment and prompt-safety screening.

Billing and customer communication

Nightwing stores account and order references, plan or pack identifiers, amounts, currency, payment and refund status, provider event references, credit balances, reservations and credit transactions. Guest purchases also store the receipt email and a browser-bound identity. A separate secure claim cookie lets a verified sign-in on that browser transfer the purchased workspace into the account; a receipt email alone cannot link accounts. Waffo Pancake receives your buyer email, account identifier and order information to process checkout, payment and refunds. Full card details are handled by Waffo Pancake and are not stored by Nightwing. Clearly labelled sandbox transactions collect no real funds. When you contact support, we process your account reference, message and any attachments to investigate and respond.

Purposes and applicable legal bases

We use account and creative data to provide the service you request, and billing data to deliver and reconcile purchased entitlements. Security and fraud controls protect accounts and the service. Where applicable law uses these concepts, the bases are performance of the requested service, legitimate interests in security and resolving errors, and legal obligations for payment records or lawful requests. Consent applies where required for optional processing. There is no active marketing or advertising-data sale integration. A sign-in or upload does not authorize an unrelated marketing purpose.

Service providers and international processing

Google provides sign-in and the support inbox. Cloudflare Email Routing forwards messages sent to our support address to that inbox. Cloudflare Workers hosts the website, D1 stores account and task records, and a private R2 bucket stores uploaded or retained media. Waffo Pancake processes payments and refunds when checkout is enabled; sandbox transactions collect no real funds. It also receives prompt text for pre-generation safety screening. Its prompt-scanning documentation states that this check does not retain the original prompt text; this does not change our separate private task-history storage. Third-party hosted AI services provide video generation, assistant scene preparation, standalone images, optional first-frame images and additional image moderation. For a funded AI request, Nightwing sends the processing partners the prompts, required reference media or time-limited media links, and settings needed for the selected operation. These services provide access to the selected model and return its result and task status. Insufficient credits prevent generation submission. The processing partners and selected model providers may process inputs under their own terms; their processing and retention policies are separate from our 24-hour generated-file retention. Providers can operate outside your country. Processing may occur outside your country, including locations where Cloudflare, Google, the payment processor, AI processing partners and the selected model providers operate. Applicable data-transfer requirements remain relevant; we do not promise that all processing occurs in one country.

Cookies and browser storage

Necessary cookies maintain authenticated sessions and OAuth security. Browser storage remembers theme preferences and local draft prompts, selected generation settings and assistant drafts. Local storage is on the device and is not the same as a server account record. Clearing browser storage can remove local drafts and preferences; it does not delete uploaded media, jobs or billing data. Google Analytics and Microsoft Clarity are not enabled on this site. Cloudflare may inject its own Web Analytics performance beacon at the hosting layer. First-party operational events help diagnose checkout, sign-in and generation. You can manage browser cookies and storage, but disabling necessary cookies can prevent sign-in.

First-party usage analytics

Nightwing AI records page visits, navigation, sign-in attempts, plan selections and checkout steps in its own Cloudflare D1 database to understand which pages help users. Random visitor and session identifiers connect visits; campaign labels, referring host, coarse browser/device information and approximate country or region may be recorded. Verified login and payment events are recorded on the server. We do not send your email, prompt, uploads, password, authentication tokens or card details to these analytics events, and do not calculate a browser fingerprint. Analytics respects browser Do Not Track and Global Privacy Control signals. Events and sessions are deleted after 90 days; visitor and checkout attribution records after 180 days.

Cloudflare Web Analytics

Cloudflare Web Analytics measures page loads and browser performance through a beacon served by Cloudflare. Cloudflare states that this service does not use analytics cookies or local storage and does not fingerprint visitors. This hosting-layer measurement is separate from our first-party operational events. Network delivery still involves Cloudflare as our hosting provider. See Cloudflare's Web Analytics documentation and privacy policy for its processing details.

Retention and expiry

Generated video files, retained thumbnails and final frames are available for 24 hours after completion. Download files you want to keep. Access stops at the displayed expiry time; a scheduled task runs every two minutes to delete expired R2 objects and retries failed deletions. A one-day R2 lifecycle rule also removes generated objects, including interrupted copies; lifecycle processing can lag the expiry time. Prompts, settings, task history and credit/payment records remain after video files expire. Inspiration conversations store your messages, creative summaries, prepared prompts and image references in your account; these context records remain available after the image files expire. Images created in Inspiration, including paid upgrades linked to its conversations, have a 24-hour download window enforced by authenticated access and scheduled object cleanup. Uploaded source references have a separate lifecycle and are not covered by this generated-file deadline. Database sessions expire after 30 days and email verification links after 10 minutes when email sign-in is enabled. Signed reference links stop access at their encoded expiry; this does not delete source files. Account, source-media, content-check, billing and support correspondence records currently have no scheduled retention cleanup. A complete deletion/export workflow and commercial record-retention schedule are not yet available.

Security and disclosure

Account ownership checks restrict private tasks and uploads. External AI media references use time-limited signed links; anyone holding a valid link can access the referenced file until it expires. Merchant signing keys stay server-side. Payment status is checked with the provider, and signed events are processed idempotently. Avoid sharing signed links, passwords, verification links or API keys. No system is entirely secure. Security notifications and legally required disclosures will follow applicable law; we do not claim an unverified certification or fixed incident-response deadline.

Your rights and requests

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection to processing, or withdrawal of consent where consent is the basis. Legal payment-record obligations can limit deletion of some records. Use the privacy contact below and identify your registered account without sending credentials or card numbers. Account ownership may need verification. You may also complain to the relevant data protection authority. Self-service account deletion and export are not currently implemented.

Age threshold and policy changes

Nightwing is intended for people aged 18 or older. It is not intended to collect children's information. If you believe a child has submitted personal data, contact us below. We update the date on this page when practices change, and material changes will be displayed on the website. Publication of this policy does not mean that payment-provider approval has been granted.

Provider privacy policies

Google · Cloudflare · Waffo Pancake

Funded AI requests share the required inputs with processing partners and the selected model providers, as described above.