Aizvu privacy policy.

Last updated: October 26, 2026. This policy applies to Aizvu as a collection of creative tools, including visual references, structured prompts, shot plans and written ideas. Hosting and provider arrangements must be reviewed by the operator before public launch.

Images and prompts

Your browser compresses an uploaded image before sending it to the backend. The application processes the image in request memory and does not intentionally write image uploads or generated prompts to disk or a database. Connected mode sends the compressed image and request text to the configured vision provider. That provider may process or retain data under its own policy. The operator has not yet published a confirmed provider retention agreement. Do not submit confidential or sensitive images.

Direct image URLs

Your browser contacts the image host directly. The host receives normal connection data, including your IP address. Browser access restrictions may prevent reading an image. The backend does not retrieve arbitrary remote image URLs.

Abuse prevention

When configured, Cloudflare Turnstile processes a security challenge and the backend verifies its token. The application derives a daily HMAC hash from the IP supplied by a trusted proxy and stores that hash, the tool slug, UTC date and a usage count in Upstash Redis until the daily bucket expires. It does not intentionally store the raw IP in Redis. Hosting providers may keep their own network and security logs. Each tool uses its own registry-configured allowance, currently five attempts per IP per UTC day; provider failures after a successful security check may still consume an attempt.

Optional analytics

Google Analytics and Microsoft Clarity load only if the operator configures valid identifiers and you choose Allow. Clarity session recording is restricted to content pages and never loads on tool pages. Unified tool_used, tool_error and copy_result events send only the tool slug after consent. Images, ideas, generated text, raw IPs and provider errors are not event parameters. Contact-page inputs also exclude session recording. A tool request outline stays in browser memory until you copy it; it is not submitted or saved by this site. Your choice is saved in browser local storage. Clear the analytics-consent entry in site storage to change the choice.

Local examples and browser state

Example mode does not send your image to a vision provider. Upload previews and generated text remain in page memory and are cleared on a full reload. Copying sends text to your clipboard only when requested. The ChatGPT action copies your prompt and opens a separate site; you choose what to paste there.

Questions or rights requests

See the contact page for the operator’s current contact status. A verified address, legal operator identity and applicable jurisdiction remain launch requirements. We do not invent those details.