PRIVACY
Privacy Policy
Last updated: October 16, 2026
This policy explains how NAPPIAD handles information submitted through nappiad.com and related project communications. For privacy questions, contact hello@nappiad.com.
Information we collect
- Name and email address.
- Your project brief, product description and creative references.
- Images of products or characters and, for Viral Video orders, the reference video clip you upload for production.
- For self-serve accounts: verification email, session details, saved generation settings, prepaid balance and ledger, generation status and completed MP4.
- Technical service events such as page views, portfolio opens and form progress. These events are used to understand and improve the service and are not used for cross-site advertising.
- Security and anti-abuse information processed by infrastructure providers when needed.
Why we use this information
We use submitted information to review your request, communicate with you, produce the requested work, operate and secure the service, diagnose errors, measure service usage and comply with applicable legal obligations.
Legal bases
Where GDPR or similar law applies, processing is generally based on steps requested by you before entering a contract, performance of a contract, legitimate interests in operating and securing the service, and legal obligations where applicable.
Self-serve accounts and files
Self-serve product images are stored in private Cloudflare R2 storage, and the current upload workflow sets a 24-hour expiration for source image access. Finished videos are stored privately and made available through the verified customer account. Contact hello@nappiad.com regarding deletion or retention of completed generations.
Uploaded files for custom production
Source images and submitted reference videos uploaded through the project form are stored in private infrastructure for project review and production. Submitted source assets are scheduled for deletion after 30 days; incomplete upload drafts are scheduled for deletion after 7 days. Project records and correspondence may be retained longer where reasonably needed for project administration, security, accounting or legal obligations.
Service providers
We may use infrastructure and communications providers such as Cloudflare for hosting, storage and security, and Resend for transactional email when email delivery is enabled. Stripe processes checkout payment information when prepaid credit purchases are enabled. Payment-card data is not intended to be stored by NAPPIAD directly.
International transfers
Some service providers may process data outside your country. Where required, appropriate transfer safeguards are used by those providers.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of personal data, and to request data portability. You may also have the right to complain to a relevant data-protection authority.
Security
Uploaded project files are stored privately rather than in the public portfolio bucket. Internal review links are time-limited. No online service can guarantee absolute security, but access controls and limited retention are used to reduce risk.
Browser session data
The self-serve generator stores the sign-in token in browser session storage and may temporarily save a draft idea and generation settings when you open checkout. Product photos are not stored in this browser draft and must be reattached when you return.
Cookies and similar technologies
NAPPIAD does not currently rely on advertising cookies for the project flow. Cloudflare Turnstile or similar security technology may process technical information when anti-spam protection is enabled.
Contact
Privacy requests can be sent to hello@nappiad.com.