Privacy Policy
What HufanUGC collects, why it is needed, and how account, payment, upload and generation information is handled.
Effective October 20, 2026Scope
This policy describes information handled by the HufanUGC website and Studio. We use it to provide AI image/video generation, review EVC Plus payments, secure accounts and answer support requests. We do not ask for your EVC Plus PIN or automatically debit your EVC Plus account.
Information we handle
| Category | Examples and reason |
|---|---|
| Account | Name, email, Somali phone number, password hash, email verification status, Google account ID if you sign in with Google, chosen plan, onboarding answers and settings. These create and secure your account. |
| Payments and credits | Amount, payer number and name, EVC Plus transaction ID, payment status, subscription periods, credit balance and ledger. These let us verify transfers, grant access and keep records. |
| Creation history | Prompts, model and settings, generated files, generation status, errors, provider request details and credits used. These process requests, show your history and diagnose failures. |
| Uploaded files | Product, creator and reference images and saved assets. These are stored for your library and sent as references when you choose to use them. |
| Support and security | Support request name, email, category, subject, message and optional ID; session and technical request information. These help us answer requests and limit abuse. |
Do not put passwords, verification codes, EVC Plus PINs or unnecessary sensitive personal information in prompts, uploads or support messages.
Sign in with Google
If you choose “Continue with Google”, Google shares your name, email address, whether that email is verified, and your Google account ID with HufanUGC. We ask only for basic sign-in permissions (openid, email and profile). We never see your Google password, and we do not ask for access to Gmail, Drive, Contacts or any other Google service.
- We use this information only to create your HufanUGC account or sign you in to it, and to show your name and email in your account.
- We keep your Google account ID and email with your account so the same Google account signs you in next time. We do not keep Google access tokens after sign-in.
- We do not sell Google user data or use it for advertising. We do not share it with AI providers or other third parties, with two exceptions: where the law requires it, and when you yourself connect an AI assistant (such as Claude or ChatGPT) to your HufanUGC account under AI Connectors. That assistant can then read your account name and email until you disconnect it there.
- You can remove HufanUGC from the third-party connections in your Google Account at any time; to keep using your account, set a password with “Forgot?” on the sign-in page. To delete your account and the Google details linked to it, send a support request.
HufanUGC’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How information is used
- Create and authenticate accounts, send verification codes and important account or payment messages.
- Manually review reported EVC Plus transfers and activate plans or purchased credits after approval.
- Send the prompt and references needed for a generation to its selected provider, save results and show history.
- Apply credit, plan, upload and daily limits; detect errors or abuse; and respond to support requests.
- Maintain transaction, generation and service records needed to operate and investigate the platform.
Providers, administrators and public display
Relevant prompts, reference images and settings are sent to the third-party AI provider that processes a request, such as OpenAI or Replicate when the model is connected. The configured email service processes verification and account/payment emails. The hosting service stores the database and files. Administrators can review account, payment, generation and support records to operate HufanUGC.
Public pages also request fonts from Google Fonts, preview media from Pexels and model logos from jsDelivr. Your browser connects to those services to load the resources; they may receive ordinary request information such as your IP address. See Cookie Information.
An administrator can select a completed video for the public showcase; its media and title may then be visible to site visitors. Ask support to review a showcased item for removal. The current site does not use an advertising-tracking service or sell personal information.
Storage, retention and security
Account records, payment history, credit ledger, uploads, generated files and support requests are stored on service storage. The current service has no fixed automatic deletion period for these records. You can delete some assets and generations in the Studio; records needed for accounting, security or disputes may remain. Ask support about account or data removal.
Passwords are stored as hashes rather than plain text. Sign-in uses an HttpOnly session cookie. Private generated images are served through an ownership check, uploads are restricted by type, and provider keys stay on the server. No online service can promise perfect security; report suspected unauthorized access promptly.
Your choices and requests
You can update account details and settings in the Studio, change your password, manage saved assets, review payment and credit history, and stop future plan renewal. For access, correction, deletion or showcase-removal questions, send a support request using your account email. We may need to verify a request and retain records where necessary for the service or legal obligations.
See Cookie Information for browser storage. Disabling essential session storage can prevent sign-in or disrupt the Studio.
Updates and contact
We may revise this policy when our features or data practices change. The effective date above identifies this version. For a privacy question, choose “Privacy & data” in Contact support.