Privacy Policy

This Privacy Policy explains how Cmoon Inc ("Cmoon Inc," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use Camflow, available at https://camflow.io, and any related websites, applications, products, APIs, tools, enterprise offerings, and services that link to this Privacy Policy (collectively, the "Services"). Camflow is a product and service name of Cmoon Inc.

If you have questions, contact us at cmoonchat@gmail.com.

1. Scope

Through Camflow, Cmoon Inc provides AI-powered creative tools, including tools for generating and editing videos, images, text, audio, voice, and related media. This Privacy Policy applies to personal information processed through the Services, our websites, account systems, billing flows, customer support, marketing activities, and related business operations.

This Privacy Policy does not apply to third-party websites, platforms, payment processors, AI providers, or services that we do not control.

2. Personal Information We Collect

We may collect the following categories of personal information.

Information you provide

• Account information, such as name, email address, password, login method, profile details, and account settings.
• User Content, such as prompts, instructions, text, images, videos, audio, voice recordings, files, reference materials, uploaded media, generated outputs, metadata, and related creative settings.
• Payment and transaction information, such as plan type, billing history, invoice details, payment status, and purchase records. Payment card details are usually processed by third-party payment processors and not stored directly by us.
• Communications, such as support requests, feedback, survey responses, emails, and messages you send to us.
• Enterprise information, such as company name, team members, roles, administrators, billing contacts, and workspace settings.
• Rights and consent information, such as confirmations, releases, permissions, ownership representations, and other information showing that you are authorized to upload or use particular content, likenesses, voices, images, or other materials.

Information collected automatically

• Device and usage information, such as IP address, browser type, operating system, device identifiers, language, time zone, pages viewed, referring URLs, clickstream data, feature usage, generation activity, error logs, and performance data.
• Cookies and similar technologies, such as browser cookies, local storage, pixels, SDKs, and analytics tags.
• Security information, such as authentication logs, abuse signals, fraud indicators, rate-limit data, and moderation signals.

Information from third parties

We may receive information from third-party login providers, payment processors, analytics providers, advertising partners, enterprise customers, affiliates, AI model providers, infrastructure providers, service providers, and publicly available sources. For example, if you sign in with a third-party account, we may receive your email address, name, profile image, or authentication token as permitted by that provider.

3. Sensitive Content, Faces, Voices, and Biometric Information

The Services may allow you to upload images, videos, audio, voices, likenesses, or other media that include people. We process this content to provide the requested creative features, such as generating or editing videos, images, text, audio, or voice-related outputs.

You must not upload or use another person's likeness, image, voice, biometric information, private data, or personal content unless you have permission or another valid legal basis.

Unless we expressly state otherwise, Cmoon Inc does not use uploaded faces, voices, or media to identify a person or create biometric identifiers for identification. However, Cmoon Inc and third-party AI providers may process uploaded content as needed to provide, secure, moderate, evaluate, improve, train, or support the selected feature and related AI systems.

Do not submit highly sensitive personal information, medical information, government identifiers, financial account numbers, confidential business secrets, or content you are not authorized to use. The Services are not designed for regulated, confidential, privileged, or sensitive information unless a separate written agreement with Cmoon Inc expressly says otherwise.

4. How We Use Personal Information

We may use personal information to:

• provide, operate, maintain, and improve the Services;
• create and manage accounts, subscriptions, credits, enterprise plans, and billing;
• process Inputs and generate Outputs;
• personalize features, remember settings, and improve user experience;
• provide customer support and respond to requests;
• monitor performance, debug errors, test features, evaluate model behavior, and develop new products;
• analyze usage, trends, and product effectiveness;
• improve, train, fine-tune, test, evaluate, benchmark, and develop AI model quality, safety systems, moderation tools, abuse-prevention systems, ranking systems, and AI-related features, including through User Content, Outputs, metadata, aggregated information, de-identified information, anonymized information, or derived information where permitted by law and applicable product settings or agreements;
• detect, prevent, and respond to fraud, abuse, security incidents, policy violations, and illegal activity;
• send service notices, administrative messages, updates, security alerts, and support communications;
• send marketing communications where permitted, and allow you to opt out;
• comply with legal obligations, enforce our terms, and protect rights, safety, and property; and
• complete corporate transactions, such as financing, merger, acquisition, reorganization, or sale of assets.

5. AI Processing, Model Improvement, and Third-Party Providers

To provide AI features, we may process User Content using our own systems and third-party AI providers. Depending on the feature, we may share prompts, uploaded files, reference materials, generated content, metadata, account identifiers, usage data, and technical information with third-party providers as needed to provide, secure, moderate, analyze, improve, train, test, evaluate, or support the Services, where permitted by law and applicable product settings or agreements.

We may use User Content, Outputs, and related metadata to improve the Services, improve model performance, develop new AI features, evaluate quality, create benchmarks, detect abuse, and enhance safety systems. This may include human review and automated review, subject to internal access controls and applicable law. Enterprise customers may have different data-use terms if stated in a signed agreement.

If you delete User Content or request deletion of personal information, we will handle the request as described in this Privacy Policy and applicable law. Deletion may not remove information that has already been aggregated, de-identified, anonymized, used to generate derived data, incorporated into logs needed for security or legal purposes, retained in backups pending ordinary deletion cycles, or reflected in model weights or evaluation data in a way that no longer reasonably identifies you.

We seek to share only the information reasonably necessary for the relevant feature or business purpose and to use contractual, technical, and organizational safeguards where appropriate. Third-party providers may process information according to their own terms, privacy policies, and data-processing arrangements. Some providers may retain, log, review, or use submitted content to provide, secure, improve, or enforce their own services, depending on the provider and feature.

If a feature allows you to choose among models or providers, your selection may determine which third-party provider processes your content.

6. Cookies, Analytics, and Advertising

We use cookies and similar technologies to operate the Services, keep you signed in, remember preferences, measure performance, understand usage, improve products, and support marketing.

You can control cookies through your browser settings. If you block cookies, some parts of the Services may not work correctly.

We may use analytics and advertising partners to measure campaigns, understand how users find and use the Services, and deliver or evaluate relevant marketing. Where required by law, we will request consent or provide opt-out choices.

7. How We Disclose Personal Information

We may disclose personal information to:

• service providers that host, secure, operate, analyze, support, or improve the Services;
• AI model, media processing, rendering, storage, moderation, and infrastructure providers;
• payment processors, billing providers, fraud prevention providers, and tax or accounting service providers;
• authentication, communications, email, customer support, and CRM providers;
• analytics and advertising partners, subject to applicable law and user choices;
• enterprise customers or workspace administrators, if your account is part of an organization;
• affiliates, subsidiaries, successors, or business partners involved in operating the Services;
• legal, regulatory, law enforcement, or government authorities when required or appropriate;
• professional advisors, such as lawyers, auditors, insurers, and accountants; and
• parties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

We may also disclose aggregated, de-identified, or anonymized information that does not reasonably identify you.

8. International Transfers

Cmoon Inc operates the Services from the United States and may use service providers in the United States and other countries. Your personal information may be processed in countries that may have data protection laws different from those in your country.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

9. Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, complete transactions, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, maintain security, and support legitimate business purposes.

Retention periods vary depending on the type of information and context. For example:

• account information is generally retained while your account is active;
• billing and transaction records may be retained as required for tax, accounting, and legal compliance;
• User Content may be retained while needed to provide the Services, allow access to your projects, improve safety, resolve disputes, or comply with law;
• logs and security records may be retained for fraud prevention, abuse detection, and service integrity; and
• information may be retained in backups for a limited period before deletion through ordinary backup cycles.

When information is no longer needed, we may delete, anonymize, aggregate, or isolate it.

10. Your Choices and Rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or appeal of certain decisions involving your personal information.

You may also:

• update account information in your account settings;
• request account deletion by contacting us;
• opt out of marketing emails by using the unsubscribe link or contacting us;
• control cookies through your browser settings;
• request to opt out of certain targeted advertising, sale or sharing of personal information, or model-improvement uses where applicable law requires such choices or where we offer them; and
• choose not to upload certain content or use features that require third-party AI processing.

To make a privacy request, contact cmoonchat@gmail.com. We may need to verify your identity before responding. We will not discriminate against you for exercising privacy rights.

11. Notice for European and UK Users

If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing may include:

• performance of a contract, such as providing the Services and managing your account;
• legitimate interests, such as securing, improving, and marketing the Services, preventing abuse, and supporting business operations;
• consent, such as for certain cookies, marketing, sensitive-data processing, biometric-related processing, or optional AI improvement uses where required; and
• legal obligations, such as tax, accounting, and compliance requirements.

You may have the right to complain to your local data protection authority. We encourage you to contact us first so we can try to resolve your concern.

If we are required to appoint an EU, UK, or Swiss representative or provide additional region-specific disclosures, we will update this Privacy Policy or provide a supplemental notice.

12. Notice for United States State Privacy Laws

Depending on your state, you may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain processing of personal information. You may also have the right to opt out of targeted advertising, certain profiling, or the sale or sharing of personal information, as those terms are defined by applicable law.

Cmoon Inc does not knowingly sell personal information for money. Some analytics or advertising activities may be considered "sharing," "targeted advertising," or a "sale" under certain state privacy laws. Where required, we will provide applicable opt-out methods, which may include contacting cmoonchat@gmail.com or using a privacy control we make available. Where legally required, we will honor recognized browser-based opt-out preference signals, such as Global Privacy Control, for the browser or device that sends the signal.

13. Children

The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from children or allow children to use the Services. If you believe a child has provided personal information to us, contact us at cmoonchat@gmail.com and we will take appropriate action.

14. Security

We use reasonable technical, organizational, and administrative measures designed to protect personal information. However, no system, transmission, or storage method is completely secure. You are responsible for keeping your account credentials safe and for using the Services in a secure environment.

15. Third-Party Links and Services

The Services may contain links to third-party websites, platforms, tools, models, payment processors, or services. We do not control and are not responsible for the privacy practices of third parties. Review their privacy policies before using them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Services with a new effective date. If changes are material, we may provide additional notice. Your continued use of the Services after the updated Privacy Policy becomes effective means you acknowledge the updated policy.

17. Contact

Cmoon Inc
30 N Gould St Ste R
Sheridan, WY 82801
United States

Email: cmoonchat@gmail.com