Privacy policy
Effective 17 September 2026.
VisualizeAI is a product of HomeShopperAI Inc. This policy explains what we do with your data.
Photos you upload
- Uploaded photos are stored privately and used only to create your character.
- Every uploaded photo is analyzed by a third-party AI model (Anthropic's Claude) for content safety — checking for public-figure likeness, apparent minors, and prohibited content — before any generation happens. We keep a cryptographic hash of the photo and the safety scores, not the photo itself, in our audit log.
- Generation is performed by xAI's Grok Imagine; your locked character portrait is sent to xAI to create poses and clips.
- The original upload and unselected candidates are deleted as soon as you lock a character, or automatically after 7 days if you don't. Retiring a character permanently deletes its portrait, poses, and clips.
Account data
- Authentication is handled by Clerk; payments by Stripe. We store your email, plan, credit history, and the content you create.
- Likeness attestations (the checkbox, timestamp, and IP) are logged and retained for legal compliance.
- Safety-audit records (hashes and scores, never photos) are retained even after content deletion.
Publishing to YouTube
This service uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies to the data Google receives.
- What we access. Only what publishing needs: permission to upload a video to your channel, and read-only access to your channel's name and ID so we can show you which channel is connected. We never read your videos, comments, analytics, or subscribers.
- What we store. Your channel name and ID, and the access and refresh tokens Google issues, encrypted at rest. For each upload we keep the video ID, its link, and its privacy status so the app can show you what it posted.
- What we do with it. Upload the clip you asked us to upload, when you press the button. Nothing is uploaded automatically and nothing is posted without you choosing it. Every upload is declared to YouTube as containing synthetic media, because it does.
- What we never do. We do not sell or share your YouTube data, use it for advertising, or use it to train any model. VisualizeAI Character Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Revoking access. Disconnect on the billing page removes our tokens and revokes them with Google. You can also revoke us at any time from Google's security settings, which works even if you never open this app again.
- How long, and how often it is refreshed. Your channel name and ID are re-read from YouTube at least every 30 days while the connection exists, and deleted the moment you disconnect (or when your account is deleted). Access tokens expire within an hour and are replaced; the refresh token is kept only while you stay connected. The record of each upload (video ID, link, privacy setting) is kept with the clip it belongs to and deleted with it. We do not keep any other YouTube data.
- Deletion. Disconnecting deletes the stored tokens and channel details. Videos already on your channel belong to you and stay there; delete them in YouTube Studio. You choose each upload's visibility (private, unlisted or public) when you send it.
Publishing to TikTok
Posting to TikTok uses TikTok's Login Kit and Content Posting API. By connecting an account you also agree to TikTok's Terms of Service, and TikTok's Privacy Policy applies to the data TikTok receives.
- What we access. Your TikTok display name and avatar, so we can show which account is connected; the posting settings your account allows (who can view, whether comments, duets and stitches are on); and permission to post a video you choose. We never read your videos, followers, messages or analytics.
- What we store. Your TikTok user ID and display name, and the access and refresh tokens TikTok issues, encrypted at rest. For each post we keep TikTok's post ID and its status so the app can show you what it posted.
- What we do with it. Post the clip you asked us to post, with the caption, privacy level and settings you chose in the app, when you press the button — or, if you choose “Send to TikTok drafts”, place it in your TikTok inbox for you to finish in the TikTok app. Nothing is posted automatically. Every direct post is labelled as AI-generated, as TikTok requires.
- What we never do. We do not sell or share your TikTok data, use it for advertising, or use it to train any model.
- Revoking access. Disconnect on the billing page removes our tokens and revokes them with TikTok. You can also remove the app at any time from TikTok's settings under Security and permissions → Apps and services.
- Deletion. Disconnecting deletes the stored tokens and account details. Videos already on your profile belong to you and stay there; delete them in TikTok.
Publishing to Instagram
Posting to Instagram uses Meta's Instagram API with Instagram Login. By connecting an account you also agree to Meta's Instagram Terms of Use, and Meta's Privacy Policy applies to the data Meta receives. Posting needs an Instagram Business or Creator account.
- What we access. Your Instagram user ID, username and account type, so we can show which account is connected; and permission to publish a Reel you choose. We never read your posts, followers, messages, comments or insights.
- What we store. Your Instagram user ID and username, and the access token Meta issues, encrypted at rest. For each post we keep Instagram's media ID and link so the app can show you what it posted.
- What we do with it. Publish the clip you asked us to publish as a Reel, with the caption you wrote, when you press the button. To do that we give Instagram a short-lived link to the video file. Nothing is posted automatically. Every Reel is declared as AI-generated.
- What we never do. We do not sell or share your Instagram data, use it for advertising, or use it to train any model.
- Revoking access. Disconnect on the billing page deletes our copy of the token. To remove the app on Instagram's side, use Instagram → Settings → Website permissions → Apps and websites.
- Deletion. Disconnecting deletes the stored token and account details. Reels already on your profile belong to you and stay there; delete them in Instagram.
Cookies and storage on your device
- Sign-in cookies. Clerk sets cookies that keep you signed in and protect against request forgery. They are strictly necessary; the service does not work without them.
- Connection cookies. When you connect YouTube, TikTok or Instagram, a short-lived cookie holds the one-time state value that ties Google's, TikTok's or Meta's reply back to your request. It expires in minutes and stores nothing about you.
- No tracking. We set no advertising or cross-site tracking cookies, and no third party places cookies through this site other than Clerk (sign-in) and Stripe (payment pages).
Contact
Questions about this policy, your data, or a YouTube, TikTok or Instagram connection: email hello@visualizeai.pro, or write to HomeShopperAI Inc., 9655 49 Ave NW, Edmonton, AB T6E 5Z5, Canada. Content removal: use the Report content form. Step-by-step deletion instructions: Deleting your data.