Privacy Policy

This Privacy Policy applies when you visit Longtake, create an account, use the AI video workspace, upload creative materials, purchase Credits, contact us, or otherwise interact with the service. It should be read together with our Terms of Service.

In this Policy, "Longtake," "we," and "us" refer to the operator of the Longtake service. Third-party websites and services follow their own privacy policies.

Account and workspace information

We handle information used to create and operate your account, including an internal user ID, display name, email address, profile image URL, account status, and default workspace and project identifiers. If you sign in with Google or email, our authentication provider receives the information needed to complete that sign-in flow. Longtake does not receive your Google password.

Creative materials and generation data

We handle prompts, prompt-to-material references, uploaded image, video, and audio files, filenames, media type, size, dimensions, duration, generation settings, selected model, task status, previews, thumbnails, generated Output, and generation history. This information is needed to upload, inspect, generate, preview, download, edit, and regenerate content.

Credits and transaction information

We handle Credit balances and settlements, purchase amount, currency, payment order and checkout identifiers, transaction status, fulfillment status, and timestamps. Payment credentials and checkout details you enter on Stripe's hosted page are handled by Stripe under its own policy.

Usage, device, and diagnostic information

When you use Longtake, we and our providers may receive request times, pages and features used, interactions, model and generation events, referring page, IP address, browser and device information, error details, and server or security logs. We use this information to operate, secure, diagnose, and improve the service.

Communications

If you contact us, we handle your email address, message, attachments, and related support history so that we can respond and maintain an appropriate record of the request.

Longtake currently uses browser storage for the following purposes:

• Necessary authentication and security: session and related cookies are used to keep you signed in and protect the service. The Longtake frontend does not expose the access token to page scripts.
• Workspace drafts: IndexedDB may store the selected model, prompt, generation settings, saved time, and temporary material metadata so your unfinished workspace can be restored on that browser.
• Analytics: in production, Google Analytics and PostHog may use cookies or similar browser storage to measure site and product usage. You can block or clear this storage through browser settings.

You can clear local drafts and cookies through your browser settings. Clearing necessary storage or blocking necessary cookies may sign you out or prevent parts of the service from working.

We use information to:

• authenticate users and manage accounts, workspaces, and projects;
• upload and inspect materials, submit model requests, provide Output, maintain generation history, and support downloads;
• display pricing, process Credit purchases, confirm payment fulfillment, maintain the Credit ledger, and prevent duplicate transactions;
• provide support and send transactional, operational, or security communications;
• detect abuse, protect accounts, troubleshoot errors, and maintain the reliability and safety of Longtake;
• understand product use and improve Longtake through configured analytics services; and
• comply with law and establish, exercise, or defend legal claims.

Depending on applicable law, these activities may rely on performance of our agreement with you, our legitimate interests in operating and securing the service, your consent, or compliance with legal obligations. Where we rely on consent, you may withdraw it for future processing.

We disclose only the information reasonably necessary for the purpose at issue. Current product integrations include:

Authentication providers

Logto supports email and Google sign-in, session management, and account security. If you choose Google sign-in, Google processes the sign-in under its own privacy terms.

Storage and media processing

Uploaded files can be sent directly from your browser to Tencent Cloud Object Storage using temporary, object-specific credentials. Longtake's backend then confirms and inspects the uploaded media.

AI model providers

The provider of the model you select receives the prompts, materials, parameters, and related identifiers needed to process your request. For ByteDance models, eligible materials may also be submitted for Seedance provider-availability checks. See the ByteDance Seed privacy policy. Other providers may be available in the workspace and will follow their applicable terms and data practices.

Payments

Stripe hosts checkout and processes payment and fraud-prevention information. Longtake receives information such as the payment order, amount, status, and Credit fulfillment needed to complete and support the purchase.

Analytics

Google Analytics may receive site usage, device information, cookies, and a Longtake user ID for a signed-in session. PostHog may receive product interaction and device information together with your internal user ID, name, email address, and default workspace and project identifiers. When configured for the production service, these analytics integrations load automatically.

Legal and safety disclosures

We may disclose information when reasonably necessary to comply with law or valid legal process, protect the rights and safety of users or others, investigate abuse or fraud, enforce our terms, or complete a merger, financing, acquisition, reorganization, or transfer of the service. Where appropriate, a successor will be required to handle information under this Policy or provide notice of materially different practices.

Longtake does not sell your User Content or payment information.

Longtake and its providers may process information in countries or regions other than where you live. Data protection laws in those locations may differ. Where required, we use an approved transfer mechanism or other safeguards required by applicable law.

We retain information for as long as reasonably necessary to provide the service, maintain your account and history, complete transactions, meet legal and accounting obligations, resolve disputes, prevent abuse, and enforce agreements. Retention depends on the data type, account status, selected provider, and legal requirements.

Browser drafts remain on your device until Longtake replaces them or you clear the site's browser data. Deletion requests may not immediately remove information from backups, transaction records, security logs, or records that must be retained by law.

We use technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. Authentication credentials, temporary upload access, and protected media URLs are limited according to their purpose. No internet service is completely secure, so we cannot guarantee absolute security.

Protect your sign-in method and contact anyfastmaas@gmail.com if you suspect unauthorized access or a security issue involving your account.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of certain personal information, and to appeal or complain to a privacy authority. You may also withdraw consent without affecting earlier lawful processing.

• Use browser controls to clear cookies, local storage, or IndexedDB drafts.
• Use your Google account settings to review or revoke Google sign-in access.
• Contact anyfastmaas@gmail.com to request access, correction, deletion, or another privacy action that applies to you.

We may need to verify your identity and authority before completing a request. We may also deny or limit a request where permitted by law and will explain the reason when required.

Longtake is not directed to children who are below the minimum age to use an online service in their location, and we do not knowingly collect their personal information. If you believe a child provided personal information without valid permission, contact us so we can review and take appropriate action.

We may update this Policy to reflect changes in Longtake, its providers, or applicable law. We will post the revised version here and update the date above. If a change is material, we will provide additional notice where required by law.

For questions or privacy requests, email anyfastmaas@gmail.com. Please do not send passwords, full payment card numbers, or unnecessary sensitive materials by email.