Effective Date: May 14, 2026 Last Updated: May 14, 2026
1. Introduction
This Privacy Policy ("Policy") describes how we, a Cayman Islands exempted company (together with its affiliates, "we", "us", or "our"), collects, uses, discloses, retains, and protects personal data in connection with the websites, applications, and AI-powered video generation services we operate at relaydance.com and its subdomains (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree with any part of this Policy, you must immediately cease using the Service.
This Policy works alongside our Terms of Service and any service-specific terms referenced therein.
2. Eligibility and Geographic Scope
2.1 Who May Use the Service
The Service is offered exclusively to users who:
- are at least eighteen (18) years of age, or have reached the age of majority in their jurisdiction of residence, whichever is greater;
- have the legal capacity to enter into a binding contract;
- are not residents of, or physically located in, mainland China (the People's Republic of China, excluding the Hong Kong SAR, Macao SAR, and Taiwan);
- are not residents of any jurisdiction subject to comprehensive sanctions administered by the United States Office of Foreign Assets Control, the United Nations Security Council, the European Union, or other applicable sanctioning authorities;
- are not otherwise prohibited by applicable law from receiving the Service.
2.2 No Service to Mainland China
We do not market, target, solicit, or knowingly provide the Service to any user located in mainland China. We do not maintain infrastructure, employees, or registered legal presence in mainland China. The Service is not designed or intended to comply with the regulatory regime applicable to "online information services" originating in or directed at mainland China, including but not limited to the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Personal Information Protection Law of the People's Republic of China ("PIPL"), and the Interim Measures for the Management of Generative Artificial Intelligence Services.
By creating an account or using the Service, you represent and warrant that you are not a resident of, and are not accessing the Service from, mainland China.
3. Information We Collect
We collect the categories of personal data described below. We collect only what is necessary for the stated purposes and we minimize collection wherever practicable.
3.1 Information You Provide
- Account information: the email address you register with, a chosen username, and an API key issued by us;
- Authentication credentials: salted hashes of passwords (we never store plaintext passwords);
- Payment information: order identifiers and amounts processed through third-party payment service providers. We do not directly receive, store, or process your full card number, bank account number, or payment passwords;
- Generation inputs: the text prompts, reference images, reference videos, and reference audio you submit to the Service;
- Generation outputs: the task identifiers, model selection, parameters, and metadata associated with each video generation request;
- Communications: any messages, support tickets, or feedback you send to us.
3.2 Information Collected Automatically
When you interact with the Service we automatically collect:
- IP address (truncated for analytics where possible), approximate geolocation derived from IP, user-agent string, device type, operating system, and language preference;
- session cookies and equivalent first-party tokens necessary to keep you signed in;
- request metadata including timestamps, HTTP status codes, and pages or API endpoints accessed;
- aggregate technical telemetry for service reliability and abuse prevention (rate-limiting, anti-bot, anti-fraud).
3.3 Information We Do Not Collect
We do not collect government identification numbers, biometric identifiers (other than as expressly required by a reference-portrait verification flow that you affirmatively initiate), financial account numbers, precise GPS location, or any "special category" data within the meaning of GDPR Article 9.
4. How We Use Your Information
We use personal data for the following purposes, each with a corresponding legal basis under applicable law:
| Purpose | Legal Basis (GDPR-style) |
|---|---|
| Providing the Service you requested (account creation, generation requests, output delivery) | Performance of a contract |
| Billing, settlement, and dispute resolution | Performance of a contract; legal obligation |
| Security, fraud detection, rate-limiting, anti-abuse | Legitimate interests |
| Service improvement using aggregated, de-identified telemetry | Legitimate interests |
| Communicating service announcements, security notices, and material policy changes | Legitimate interests |
| Complying with legal process, court orders, regulatory requests, and tax obligations | Legal obligation |
We do not use your personal data to build advertising profiles, sell to third parties for marketing, train any AI model on your private inputs without explicit opt-in consent, or perform automated decision-making that produces legal effects on you.
5. Third-Party Service Providers
To provide the Service we rely on the following categories of processors. We have, or will enter into, written data-processing agreements with each that impose obligations at least as protective as those in this Policy.
| Provider | Function | Region |
|---|---|---|
| BytePlus Pte. Ltd. (an affiliate of ByteDance, Singapore) | AI model inference (Seedance video generation), asset library | Singapore (ap-southeast-1) |
| Cloudflare, Inc. | Object storage (R2), edge CDN, DDoS mitigation, DNS | Global (we use APAC edge) |
| HostKVM | Compute infrastructure for our application servers | Japan (Tokyo) |
| Third-party payment service providers ("PSPs") | Payment authorization and settlement | Varies by jurisdiction of the user |
| Email delivery providers | Transactional email (account confirmation, billing receipts) | Varies |
We do not sell or rent your personal data to any third party. We share personal data with the above providers only to the extent strictly necessary for the corresponding function, and we contractually prohibit them from using your data for their own purposes.
6. International Data Transfers
The Service operates across multiple jurisdictions. By using the Service you understand and consent that your personal data may be transferred to, stored in, and processed in jurisdictions outside your country of residence, including without limitation the Cayman Islands, Singapore, Japan, the United States, and the European Economic Area.
For users located in the European Economic Area, the United Kingdom, or Switzerland, transfers of personal data to jurisdictions not recognized by the European Commission as providing an adequate level of protection are made pursuant to the Standard Contractual Clauses (2021/914) or equivalent safeguards. A copy of our standard transfer instruments is available on request to privacy@relaydance.com.
7. Data Retention
We retain personal data only for as long as necessary for the purposes set out in this Policy.
| Data Category | Retention Period |
|---|---|
| Account profile (email, username, hashed password) | Active account life; deleted within 30 days of account closure |
| API keys | Active account life; immediately revoked on closure |
| Generation inputs (prompts, uploaded reference assets) | Uploaded reference files: 30 days on our storage; the user-supplied source URL handed to BytePlus typically becomes obsolete within 24 hours of generation |
| Generation outputs (video URLs) | Hosted on the upstream model provider, typically expire within 24 hours; we do not maintain an independent archive |
| Asset library entries (user-curated reference library) | Until you delete them, or until 12 months after last access, whichever is first |
| Billing and transaction records | Minimum period required under applicable tax and accounting law (typically 5-7 years) |
| Server logs and security telemetry | 90 days rolling |
| Support correspondence | 24 months from last contact |
When the retention period expires we delete or irreversibly anonymize the data unless a longer retention is required by law.
8. Data Security
We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These include:
- TLS 1.3 encryption in transit; encryption at rest for backups;
- per-user object-key prefixing in our storage layer, so an authentication-bypass against one account cannot enumerate other accounts' uploads;
- short-lived, signed URLs for all access to user-uploaded media (typically expiring within hours);
- principle-of-least-privilege access control for our personnel;
- regular database backups stored in a separate region;
- continuous network-level abuse mitigation provided by Cloudflare.
Despite our safeguards, no method of transmission or storage is one hundred percent secure. We cannot guarantee absolute security. In the event of a personal data breach affecting your data we will notify you and the relevant authorities to the extent and within the timeframes required by applicable law.
9. Your Rights and Choices
Subject to applicable law and to verification of your identity, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you;
- Rectification: request correction of inaccurate or incomplete data;
- Erasure ("right to be forgotten"): request deletion of your data, subject to retention obligations imposed by law;
- Restriction: request that we limit processing while a dispute is resolved;
- Portability: receive your data in a structured, commonly used, machine-readable format;
- Objection: object to processing based on legitimate interests;
- Withdraw consent: where we rely on consent, withdraw it at any time (this does not affect prior lawful processing);
- Complaint: lodge a complaint with the data-protection authority of your jurisdiction.
To exercise any of these rights, please contact privacy@relaydance.com. We will respond within thirty (30) days, or such shorter period as required by applicable law. We may need to verify your identity before fulfilling a request.
California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information within the meaning of CCPA/CPRA.
10. Cookies and Similar Technologies
We use only strictly necessary first-party cookies and equivalent storage:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Keep you signed in | Session |
Cloudflare protection tokens (__cf_bm, cf_clearance) |
Anti-bot, anti-DDoS | Up to 30 days |
We do not use advertising cookies, cross-site tracking, fingerprinting, or third-party analytics that profile individual users.
11. Children and Age Verification
The Service is not intended for, and is not made available to, anyone under the age of eighteen (18) or the age of majority in their jurisdiction of residence, whichever is greater.
We do not knowingly collect personal information from minors. If we discover that we have collected personal information from a minor we will delete that information promptly. If you are a parent or guardian and you believe a minor has provided us with personal information, please contact privacy@relaydance.com.
Where you generate or upload content that depicts identifiable adult persons, you represent and warrant that you have the necessary rights and consents to do so and that no depicted person is a minor.
12. Adult Content Notice
Portions of the Service may permit the generation, viewing, or storage of content that is sexually explicit, suggestive, or otherwise intended for an adult audience. By accessing such features you confirm that:
- you are an adult under the laws of your jurisdiction;
- the consumption, generation, or possession of such content is lawful where you are located;
- you will not generate content that is illegal in any jurisdiction, including without limitation child sexual abuse material, non-consensual intimate imagery, content depicting real persons without their consent, or content otherwise prohibited by our Terms of Service.
We reserve the right to refuse generation requests, remove content, and terminate accounts at any time at our sole discretion.
13. Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this Policy. If the changes are material we will provide additional notice by email or by a prominent in-product notification.
Your continued use of the Service after a revised Policy takes effect constitutes your acceptance of the revised Policy.
14. Governing Law and Disputes
This Policy is governed by, and shall be construed in accordance with, the laws of the Cayman Islands, without regard to its conflict-of-laws principles.
Any dispute, controversy, or claim arising out of or relating to this Policy, including the formation, interpretation, breach, or termination thereof, shall be exclusively and finally resolved by arbitration administered by the Hong Kong International Arbitration Centre (HKIAC) in accordance with its rules in force at the time of commencement. The seat of arbitration shall be Hong Kong. The language of the arbitration shall be English.
Nothing in this section limits the rights of users in the European Economic Area, the United Kingdom, or other jurisdictions to bring claims in their local courts where such right cannot be lawfully waived.
15. Contact Us
For any questions, requests, or complaints regarding this Policy:
- Email (Privacy): privacy@relaydance.com
- Email (General Support): support@relaydance.com
End of document.