Ziztu (getziztu.com) is an online studio for making AI video, images and music. This policy explains what data we collect, why, who processes it and the choices you have. In this policy, "we" means Ziztu. Questions: [email protected].
What we collect
- Account details. Your email address, your name if you give one, and a hashed version of your password (never the password itself). If you sign in with Google, we receive your Google email address, name and Google account ID.
- What you make. Your prompts and scripts, the photos, audio and video you upload, the images, clips and music you generate, and your projects.
- Billing. Stripe handles payments. We never see or store your card number. We keep your plan, credit balance, invoices and your Stripe customer ID.
- Usage and security data. Your credit and generation history, the pages and tools you use, and technical data such as IP address and browser type. We use it to run the service, to stop abuse such as repeated free trials, and to fix problems.
Cookies
We use the cookies the service needs: one that keeps you signed in, an anonymous ID so the free tools work without an account, and a short-lived cookie during Google sign-in.
When you arrive from another site or from a link with a campaign tag, we also set one first-party cookie that remembers that first source (for example a search engine or a newsletter) for 90 days, so we can see which channels bring people who sign up. It holds no personal data and is never shared. We do not set it for visitors in the EEA, the UK or Switzerland, or when your browser sends Global Privacy Control.
We do not use advertising cookies. Cloudflare Web Analytics counts visits without cookies and without tracking you across sites.
How we use your data
- To provide the studio and the tools, and to improve them.
- To take payments and keep your credit balance correct.
- To send account email: sign-in links, email verification, receipts and important notices about your account or the service.
- To prevent abuse and keep the service secure.
- To meet legal obligations.
We do not sell your data. We do not use your uploads or your results to train AI models.
Who processes your data
We use these service providers to run Ziztu:
- Railway: app hosting, database and file storage, in the United States.
- Cloudflare: DNS, content delivery, security, cookieless analytics and forwarding of email sent to [email protected].
- Stripe: payments and invoices.
- Resend: delivery of account email.
- Google: sign-in with Google, if you choose it.
- AI model providers: fal.ai runs most image, video and audio models; OpenRouter and OpenAI run the text and planning models. When you generate something, your prompt and any input files are sent to the provider that runs the model you chose. These providers keep their own copies under their own terms and retention rules.
Some of these providers process data in the United States and other countries.
How long we keep data
- Photos uploaded to the free tool pages are deleted from our servers within 24 hours.
- Your account, projects and generated media are kept while your account is open.
- To delete your account and its data, email [email protected] from the address on the account. We delete it within 30 days, except records the law requires us to keep, such as invoices.
- Security and server logs are kept for a short time and then deleted.
Your rights
You can ask us to access, correct, export or delete your data, or object to how we use it. Email [email protected] and we will answer within 30 days. If you are in the EU or the UK, you can also complain to your data protection authority.
Children
Ziztu is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, email [email protected] and we will delete it.
Security
All traffic is encrypted with HTTPS, passwords are stored only as hashes, and access to production data is limited to the people who run the service.
Changes
When we change this policy we update this page and the date below. For important changes we will also email account holders.
Last updated 11 October 2026. Contact: [email protected].