Privacy Policy

Last updated November 3, 2026

This policy explains what we collect when you order a Pipsoo video or write to us, why, who handles it for us, how long we keep it, and what you can ask us to do with it.

Who we are

Pipsoo is run by LILYA DEVELOPMENT TRAINING - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. We decide how your data is used. Write to us at hello@pipsoo.com.

What we collect

The first name of the person the video is for, which you type.
Your message and the occasion you pick. Pipsoo says this message in the video.
Your email, to send the video and talk to you about your order.
Your add-on choices, such as an outfit or a second video with another first name and message.
Payment information. Stripe collects your card details directly. We never see or store your full card number. We receive the card brand, the last 4 digits, whether the card is in Apple Pay or Google Pay, and identifiers that let us charge an add-on you ask for.
Your consent to our terms and to saving your card for this order, with the date, time and exact wording, plus a scrambled version of your IP address and the name of your browser.
Contact form messages: your email, the first name on your order if you give it, and what you write.
Technical data, such as your IP address, which we use to limit abuse and which our hosting provider logs briefly.

Please do not put sensitive information in your message, such as health details, an address, or anything about a person that they would not want shared. The first name and message may be about someone else. Only use them if you believe that person would be happy to receive this.

Why we use it

To take your payment and make and deliver your video, which is the contract between us.
To check your message against our content rules and to prevent fraud and abuse, which is our legitimate interest.
To read and answer your contact form message, which is our legitimate interest in helping you.
To keep accounting and tax records, which the law requires.
To charge an add-on with your saved card, only when you tap to add it, which you agree to at checkout.

We do not use your name, message or video to train AI models. We do not send marketing email unless you ask for it. We do not post your video anywhere.

Who handles your data

We share only what each provider needs to do its job:

Stripe: payments, saved cards, fraud checks and receipts.
Cloudflare: hosts this website, our order database, your finished video and contact form messages.
Anthropic: its Claude AI reads your first name, message and occasion to check them against our rules and to plan the video.
fal: runs the AI models that make the images and the video. It receives the words and instructions for your video.
Kling: the AI video model we run through fal to generate Pipsoo saying your message.
Hostinger: hosts the private server that runs our production steps and passes on contact form messages.
Telegram: how we receive each finished video to review it before it goes out, and an alert with each contact form message.
Resend: delivers the email with your link, and brings contact form messages to our support inbox.
Namecheap (Private Email): hosts our support inbox, so it receives what you write to hello@pipsoo.com and through the contact form.

We do not sell your personal information and we do not share it for targeted advertising. We may disclose data if the law requires it or to defend a legal claim.

Where it goes

We are based in the United Arab Emirates and our providers operate in the United States and other countries. Your data may be processed outside your own country. Where the law requires it, we rely on our providers' standard contractual protections for these transfers.

How long we keep it

First name, message and video: 12 months after delivery, so you can download it again, then deleted.
A refused or refunded order's first name, message and video: 30 days, unless we need them to handle a dispute.
An order you never paid for, including a message refused before payment: 30 days, then the whole order is deleted.
Saved card: only used during the add-on window right after checkout on your order. We remove it from Stripe when that window closes.
Order, payment and consent records, including your email and the IP and browser details kept with your consent: as long as tax, accounting and dispute rules require, up to 7 years.
Contact form messages: 12 months on our website, then deleted. Copies stay in our support inbox, in our Telegram alerts and in the run history of our private server until we remove them. We remove them when you ask.
Technical logs: a few weeks at most.

Deleting your data

Write to hello@pipsoo.com from the email you ordered with. We delete your first name, message and video within 30 days, except records the law makes us keep. Once deleted, your link stops working and we cannot send the video again.

To delete your contact form messages, write to us from the email you used on the form. We delete them within 30 days, with their copies in our support inbox, our Telegram alerts and the run history of our private server.

Your rights

Depending on where you live, you can ask to access your data, correct it, delete it, receive a copy, object to or limit certain uses, and withdraw consent. If you are in the EU or UK, you can also complain to your local data protection authority.

If you live in California, you have the right to know what we collect, to delete it, to correct it, and not to be treated differently for using these rights. We do not sell or share personal information as California law defines those words. To use any right, write to hello@pipsoo.com. We answer within 30 days and may ask you to confirm your order email first.

Cookies and browser storage

We use no advertising or analytics cookies. Your browser remembers the name and message you are typing during your visit, in its own session storage, so a page reload does not erase them. Stripe sets its own cookies on its checkout pages and on our add-on pages to process payments and prevent fraud.

Children

Pipsoo is sold to adults. You must be at least 18 to order. We do not knowingly collect data from children under 13. Pipsoo himself is a character made by AI, not a real child. If you think a child gave us their data, write to us and we will delete it.

Security

Delivery links use long random tokens that are hard to guess, and anyone with your link can watch the video, so share it only with people you trust. We limit who can reach order data. No system is perfectly safe. If a breach affects you, we will tell you as the law requires.

Changes

If we change this policy, we update the date at the top. Orders already placed stay under the promises made when you placed them.