Privacy Policy
Last updated: 2026-10-21
This Privacy Policy explains how Toc Toc Dance handles personal information when you use the Toc Toc Dance AI video generator at toctocdance.app. It covers the website, the generator, accounts, credits and support. It is a general notice; your statutory privacy rights always apply.
Who we are
Toc Toc Dance operates toctocdance.app and the Toc Toc Dance AI video generator. Data controller: Toc Toc Dance, Shenzhen, China. Privacy contact: support@toctocdance.app. If you have a question about this policy or want to exercise a privacy right, contact us using the details above.
Information you provide
Account details: your name, email address and profile image. If you sign in with a password, we store a password hash. If you use Google, GitHub or Microsoft sign-in, we receive the identifier and basic profile information that provider shares with us. Uploaded photo: the image you submit to the generator, together with file metadata such as size, type and storage location. Generation details: the template or mode you confirm, task identifiers, status, timestamps and the finished clip. Purchases: the credit pack you buy, payment status, amount, currency and order or payment identifiers. We do not receive or store your full card number. Support and feedback: the message you send, your email address and any attachment or account information you include. You must be at least 18 years old to use the service. Do not upload identity documents, financial information or other sensitive personal data. The generator only needs a clear photo of the person you have permission to use.
Information we collect automatically
Technical data: IP address, browser and device type, operating system, user agent, requested pages, timestamps and error or security logs. Cookies and similar technologies: a session cookie to keep you signed in, an anonymous visitor cookie named aics_anon, and analytics cookies set by the analytics services described below. The anonymous visitor cookie is first-party and HttpOnly. Usage and analytics events: page views, calls to action, sign-up, generation and payment steps, referral origin and campaign parameters. Our first-party analytics records identifiers, enums and numbers. It does not store your email address, name or raw IP address in event properties. We use this information to keep the service working, understand which parts are used, measure conversion, diagnose errors and prevent abuse.
How we use information
We use personal information to: • create and authenticate your account and keep your session secure; • run the generation you request and return the finished clip; • save your generation history and let you download or delete results; • process credits, payments, refunds and chargebacks; • screen uploaded images and enforce our Terms of Service; • measure product usage, conversion and errors; • provide support and respond to your requests; • comply with legal, tax, accounting and security obligations. We do not sell your personal information. We do not use your uploaded photos or generated clips to train public AI models.
AI generation and photo processing
When you start a generation, your photo is sent to our AI generation provider, fal.ai, together with a fixed Toc Toc dance template video. The model is Kling v3 standard motion-control. It uses your photo as the person and the template as the source of motion, camera movement, timing and original audio. Before generation, the image may be checked by our moderation provider, SeeAPI, for nudity and sexual content. SeeAPI fetches the image from its public storage URL; we do not download the image bytes to run the check. Images larger than 20 MB are rejected without moderation. The finished clip is temporarily available from the provider and is then copied to Cloudflare R2 storage so you can play, download and delete it. The public link is served through cdn.toctocdance.app. AI-generated output can contain visual artifacts or inaccuracies. It is not a guaranteed likeness of the person in the photo. See the Terms of Service for the limits of the service.
Google user data and social sign-in
If you choose "Continue with Google", we request only the standard openid, email and profile scopes. We receive your name, email address and profile image. We do not access Gmail, Google Drive, Google Calendar, Google Contacts or any other Google API data. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalized or non-personalized AI or machine-learning models. We do not send Google user data to the video-generation provider. Google user data is used only to create, authenticate, secure and support your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at myaccount.google.com/permissions at any time, or delete your account from Profile. If we support GitHub or Microsoft sign-in in your region, the same principles apply to the basic profile data those providers share.
Payment processing
Payments and checkout are handled by Dodo Payments. Dodo processes card and wallet details and acts under its own terms and privacy policy. We receive confirmation that a payment succeeded or failed, the amount and currency, the credit pack, and identifiers that let us match the payment to your account. We keep payment and credit records for accounting, tax, refund and chargeback purposes. We do not store full card numbers on our systems.
Service providers
We share information with providers that help us run the service, only for the parts they support: • fal.ai — AI video generation; • Cloudflare — hosting, database (D1), object storage (R2), CDN and email delivery; • Dodo Payments — checkout and payment processing; • SeeAPI — image moderation; • Google Analytics and Microsoft Clarity — analytics and session measurement, when enabled; • Google, GitHub and Microsoft — social sign-in, if you choose to use it. These providers may process data on our behalf or as independent controllers for their own services. They are bound by their own terms and privacy policies. We do not sell personal information or share it with data brokers or advertisers.
Cookies and analytics
Essential cookies keep you signed in and let us recognise an anonymous visitor across a session. The service cannot work without the session cookie. Analytics cookies and scripts help us measure page views, conversion and errors. We use our own first-party event log. When third-party analytics is enabled, we may also use Google Analytics 4 and Microsoft Clarity. The first-party log stores identifiers, page paths and event properties needed for the sign-up, generation and payment funnels. It does not store email addresses, names or raw IP addresses in event properties. We do not use these tools for advertising or sell the data they collect. You can block or delete cookies in your browser, but some parts of the service, including sign-in and generation, may stop working.
Data retention
Account data is kept while your account is active. Your uploaded photos and generated clips are kept so your history works, until you delete the item or your account. When you delete your account from Profile, we remove your profile, generations, uploads and remaining credits. We aim to complete deletion within 30 days. Some records may be kept longer where the law requires it, such as payment, tax, accounting, fraud-prevention and chargeback records. Residual copies in backups may take longer to disappear. First-party analytics events are kept for a limited period for measurement and then deleted or aggregated. Support messages are kept for as long as needed to resolve the request and meet legal obligations.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port or restrict the processing of your personal information, to object to certain processing, and to withdraw consent where processing is based on consent. You may also have the right to complain to your local data protection authority. You can delete your account from Profile. Account deletion is permanent and also removes remaining credits. You can also contact support@toctocdance.app to request access, correction or deletion. We may need to verify your identity before acting. We respond within the deadlines required by applicable law, normally within 30 days. Some rights are limited where we must keep records for legal, tax, accounting, fraud-prevention or chargeback reasons.
Security
We use technical and organisational measures designed to protect personal information, including TLS in transit, access controls, least-privilege access and encryption at rest where the provider supports it. Only people who need access to operate, secure or support the service can access stored data. No method of transmission or storage is completely secure. If you believe your account or data has been compromised, contact support@toctocdance.app immediately.
International transfers
Our providers may process information in countries other than the one where you live. Those countries may have different data protection laws. Where required, we rely on appropriate safeguards such as standard contractual clauses or an equivalent transfer mechanism offered by the provider.
Children
The service is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18, and you must not upload a photo of a minor. If you believe a minor has provided personal information or appears in an uploaded photo, contact support@toctocdance.app and we will review and remove it.
Changes to this policy
We may update this policy when the service, its providers or the law changes. The date at the top shows the latest revision. If a change is material, we will take reasonable steps to make it visible on the site. Continued use after an update means you accept the revised policy.
Contact
Privacy questions and requests: support@toctocdance.app. Toc Toc Dance Shenzhen, China We aim to respond to privacy requests within 30 days or within the shorter period required by applicable law.
Ready to make the clip from one photo? The prepared template carries the move and the original knock audio.
Create a toc toc dance clip