Privacy Policy

Last updated: October 14, 2026

This Privacy Policy explains how AtomTrend (“we”, “us”) collects, uses, shares and protects personal data when you use our website and service, which turns your photo into personalised trend videos. It applies to users worldwide, including the European Economic Area and the United Kingdom, the United States and the Commonwealth of Independent States.

1. Who is responsible for your data

The controller (in Russian law, the “operator”) of your personal data is AtomTrend service operator (legal identity details are pending confirmation), operator postal address is pending confirmation. For any privacy question or request, write to [email protected].

2. What we collect

• Account data. Depending on how you sign in: your Google account identifier, name and verified email address (Google sign-in); or your email address (email sign-in). We use your saved account email for payment receipts. We do not receive your Google password. Previously created accounts may retain their legacy sign-in identifier until account deletion.
• Photos you upload. The portrait you choose to upload so we can create your character.
• Generated content. Character sheets (images of you in three views) and videos generated for you, the trend templates you used, saved characters and favourites.
• Credits and activity. Your credit balance, credit transactions and the history of your generation requests.
• Invitations. Your referral code, accepted invitations, first-payment qualification and reward adjustments. Friends see aggregate counts, not your name or payment details.
• Technical data. IP address, browser and device information, request logs and the cookies described in section 10. We use them to run and protect the service.

We do not collect payment card data or use advertising trackers. We use our own website analytics to understand navigation and improve the service: page and dialog visits, photo-upload and generation events, result viewing and checkout steps. We store a random browser identifier and event times, and link the current anonymous visit to your account after sign-in. Analytics do not record form values, passwords, payment details or photo contents.

3. Photos of your face

Your photo shows your face, and the laws of some places treat facial images or face geometry as biometric or special-category data, for example the GDPR, Russian Federal Law 152-FZ, the Illinois Biometric Information Privacy Act and the Texas Capture or Use of Biometric Identifier Act. We use your photo only to generate your character sheets and videos at your request. We do not use it to recognise or identify you, to verify identity, or to train AI models, and we do not sell it.

Before uploading, we ask for your explicit consent and for confirmation that the photo shows you. Upload only your own photo. You can withdraw consent at any time by deleting your photos, characters and videos or your whole account; this does not affect processing that already took place.

4. Why we use your data and on what legal basis

• To provide the service: create and secure your account, sign you in, generate characters and videos, keep your credits and history (performance of a contract).
• To process your face photo: generation of your character and videos (your explicit consent).
• To keep the service safe: prevent abuse, fraud and duplicate charges, fix errors (our legitimate interests).
• To meet legal duties: respond to lawful requests and keep records required by law (legal obligation).
• To send sign-in codes to your email when you choose email sign-in (performance of a contract). We do not send marketing emails without separate consent.

5. Who we share data with

We share personal data only with service providers that process it on our behalf and under our instructions:

• AI generation providers receive your photo, character sheet and the chosen trend video to produce results. They process this data on our instructions.
• Sign-in provider (Google) confirms your identity when you choose it.
• Email delivery (Resend) sends sign-in codes to your email address.
• Payment provider (Lava) takes payments and subscription renewals. It receives your account email and the order amount. You enter card details on Lava’s payment page; we do not receive them.
• Hosting and infrastructure providers store the service and its data.

These providers keep copies under their own retention rules, which may continue for a period after you delete content from AtomTrend. We may also disclose data when required by law or to protect rights and safety. We do not sell personal information and do not share it for cross-context behavioural advertising.

6. International transfers and data location

Our primary database is located in the Railway asia-southeast1-eqsg3a region, on the service's persistent /data volume. Some providers process data in other countries, including the United States. Generation requests may send uploaded photos and selected videos to Higgsfield and, when configured, KIE or OpenRouter. Authentication and email use the providers listed in this policy. The processing locations and contractual transfer arrangements for external providers are pending confirmation.

If you are in the Russian Federation, Kazakhstan or another country that requires citizens’ personal data to be recorded and stored in local databases: the current deployment uses the Railway region described above; storage in a database located in your country has not been confirmed. We notify the competent authority of cross-border transfers where the law requires it.

7. How long we keep data

• Account data, credits and history: while your account exists.
• Photos, character sheets and videos: until you delete them or your account.
• Sign-in sessions: up to 7 days. Email sign-in codes: 10 minutes. Sign-in confirmations: 5 minutes.
• Website journey analytics: up to 90 days, or until you delete the linked account or opt out for that browser.
• Referral browser tokens: up to 30 days. Referral qualification and reward records, including a digest of the sign-in identifier, are retained after account deletion to prevent duplicate rewards and reconcile refunds.
• Abuse prevention: keyed digests of sign-in identifiers and first-offer deadlines remain after account deletion to prevent repeated welcome credits and promotional claims. Deleting an individual generation hides its content while preserving its usage and request record; account deletion removes those generation records.
• Records we must keep by law: for the period that law requires.

You can delete your account and files at any time in your profile settings (“Delete account”). This removes your account, photos, characters and videos from our servers.

8. Your rights

Depending on where you live, you may have the right to:

• access your personal data and receive a copy, including in a portable format;
• correct inaccurate data;
• delete your data, or block or restrict its processing;
• object to processing based on legitimate interests;
• withdraw consent at any time;
• opt out of the sale or sharing of personal information and limit the use of sensitive personal information (California). We do not sell or share it and use sensitive data only to provide the service;
• not be discriminated against for exercising your rights.

To exercise a right, email [email protected]. We may need to verify your identity, and you may use an authorised agent. We answer within 30 days (GDPR) or 45 days (California), or sooner where local law requires. You may also complain to your data protection authority: in the EU or UK, your local supervisory authority; in Russia, Roskomnadzor; in Kazakhstan, the authorised body for personal data protection.

9. Age

AtomTrend is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.

10. Cookies

We use service cookies and first-party website analytics. Journey records and the analytics identifier expire after 90 days. A visit ends after 30 minutes of inactivity. We respect Do Not Track and Global Privacy Control signals; you can also disable analytics and delete the recorded journey for this browser below.

• atom_session: keeps you signed in, up to 7 days.
• atom_google: protects the sign-in process, 5 minutes.
• atom_lang: remembers the interface language, 1 year.
• atom_referral: remembers the first valid invitation opened in this browser, up to 30 days.
• atom_link: counts a visit by a partner’s named link and a sign-up after it, up to 90 days.
• atom_journey: a random first-party analytics identifier, up to 90 days.
• atom_analytics_off: remembers your analytics opt-out, up to 1 year.
• atom_cookie_choice: remembers the choice in the cookie bar, for 1 year.

11. Security

We use encrypted connections, store only hashed session and sign-in tokens, limit access to data and protect accounts against cross-site requests. No system is completely secure, so we cannot guarantee absolute security. We will notify you and the authorities of a data breach where the law requires it.

12. Subscriptions and automatic renewal

A subscription renews automatically. Before you pay, the checkout shows the amount charged now, the renewal amount and how often it is charged: every month, or every 3, 6 or 12 months for a longer term (Lava counts 3 and 6 months as 90 and 180 days). By paying for a subscription, you agree that Lava charges the renewal amount at the start of each new period until you turn off renewal.

• A longer term is paid in full up front, and its credits arrive as a separate allowance every month.
• Extra credits offered with the first purchase are a one-time payment and are not charged again on renewal.
• To stop renewal, open Top up, then Subscription, and tap “Turn off renewal”. Once Lava confirms it, no further charges are made; the period you have already paid for stays active until it ends.
• Receipts are sent to your account email.

13. Changes

We may update this policy. We will change the date at the top and, for significant changes, tell you in the service before they take effect.

14. Contact

AtomTrend service operator (legal identity details are pending confirmation), operator postal address is pending confirmation. Email: [email protected].