CameoMachine is operated by PauleyCo, LLC ("CameoMachine," "we," or "us"). We help you create AI-edited videos using footage, reference photos, and character descriptions you provide. This policy explains the information involved in that service and your choices about it.
Questions or requests: mike@pauleyco.com.
Information we collect
Account information. We receive your email address, account identifier, authentication status, and account profile information. If you sign in with Google, Google provides basic identity information, which can include your name, email address, profile picture, and Google identifier. Supabase processes authentication and stores account and identity information for us. CameoMachine uses your email and verification status for account access and your name and email for account display. Google sign-in does not give CameoMachine access to your Gmail messages, Google Drive files, or contacts.
Content and generation information. We process videos, their audio, reference photos, character descriptions, editing choices, previews, generated videos, and associated job information. Media can contain information about you and other people. We also record generation status, error details, selected quality, usage, and token charges.
Payments. Stripe collects payment and checkout information directly. We receive payment status and transaction references and keep account identifiers, purchased token amounts, prices, dates, refunds, and token activity. CameoMachine does not store full payment-card numbers or card security codes. If you choose Link or another payment service offered at checkout, that service also processes information under its own terms and privacy policy.
Service and browser information. Our servers record information such as IP address, request time, requested page or endpoint, response status, and error information. We use authentication cookies to maintain your session. Browser storage remembers editing choices and draft identifiers so you can resume work in the same browser tab. Clearing that storage may remove the browser's ability to restore a draft.
Support information. If you contact us, we receive the information you include in your request.
How we use information
We use information to authenticate accounts, control access, prepare and generate videos, provide downloads, process token purchases, maintain balances, respond to support requests, and troubleshoot or protect the service. We also use relevant records to reconcile payments and address legal obligations and disputes.
Google identity information supports sign-in and account management. We do not include your Google name, email, or profile picture as inputs to the video-generation request merely because you used Google sign-in. Content you independently upload or type is processed as part of your generation request.
We do not sell personal information, use it for targeted advertising, or use Google account information to train AI models. We do not use uploaded media or generated videos to train models operated by CameoMachine. We do not use your media in marketing without separate permission. These commitments about CameoMachine do not establish the practices of every downstream AI provider.
Service providers and sharing
We use the following providers to operate CameoMachine:
- Supabase provides authentication and stores account, project, generation, and token records.
- Amazon Web Services hosts our application and stores working media, submitted inputs, generated outputs, and backups.
- Stripe processes purchases and refunds. We send the account reference and purchase details needed to credit the correct token balance.
- reAPI and its upstream model providers process generation requests. We send the prepared video, including its audio, reference photos, editing descriptions, and generation settings through reAPI. The media is made available through temporary access links so the provider can retrieve it.
Our use of external AI processing means submitted media and descriptions leave CameoMachine's own hosting environment. The providers' processing, retention, and locations must be considered separately from our own storage schedule.
reAPI states that it forwards request content to upstream providers, stores generated outputs for 30 days, and makes those output copies accessible to anyone who possesses their URL. It also states that reAPI itself does not train models on prompts or generated content. This does not establish the training or retention practices of each upstream model provider. See reAPI's privacy policy.
We may disclose relevant information when required by law, to investigate misuse or protect people and the service, or in connection with a business transfer subject to applicable privacy requirements. Support access to account or job information is limited to what is needed for the request or investigation.
How long information remains available
CameoMachine is a temporary editing workspace. Its current cleanup schedule for working media is:
| Media | Scheduled cleanup or download expiry |
|---|---|
| Unsubmitted draft media | 24 hours after draft creation |
| Inputs for completed or failed generations | 24 hours after the job reaches its final status |
| Inputs for submissions with an unresolved outcome | Seven days after the job is marked for review |
| Completed video downloads | 30 days after completion |
Download any finished videos you want to keep. Active jobs are protected from cleanup while processing. Cleanup runs periodically and retries failed deletions, so physical removal can occur after the scheduled time. These schedules do not cover provider copies, your downloads, retained account or job metadata, financial records, or backups.
Account, job-history, and transaction records can remain after working media expires. We retain account information while needed to maintain the account and service. Relevant records may remain longer for accounting, payment reconciliation, fraud prevention, legal obligations, or resolving disputes. The appropriate period depends on the record's purpose and applicable requirements. Billing records can remain after account deletion. Backup and provider copies follow separate retention and deletion processes; deleting a working copy does not immediately erase every backup or provider copy.
Your choices and requests
You can download completed videos during their availability window and discard eligible unsubmitted drafts. Account settings include account deletion. Self-service deletion currently requires active uploads and generations to finish and remaining live token balances or reservations to be resolved first. Contact us for help resolving those items or to make a privacy request independently of the self-service process.
You can revoke CameoMachine's Google access from your Google Account. Revocation does not itself delete information already held by CameoMachine or its providers. Deleting a CameoMachine account does not delete your Google, Stripe, or Link account.
Contact mike@pauleyco.com to request access, correction, a copy, or deletion of your information, or to report the unauthorized use of your likeness. We may need to verify your identity before acting. Depending on where you live, applicable law may provide additional rights, including objections, restrictions, portability, or a right to complain to a regulator. We will handle requests under the law that applies and explain any records we must retain. Provider deletion may require a separate request; contact us so we can coordinate it.
Security and processing locations
We use HTTPS, account access controls, and private storage for copies managed by CameoMachine. Temporary media links and provider output links can allow access to anyone who obtains them, so avoid sharing them unintentionally. No storage or transmission method provides an absolute security guarantee.
CameoMachine uses hosting in the United States. Our service providers may process information in other countries with different privacy laws. We do not represent that all processing remains in the United States. Any safeguards or notices required by applicable law apply to those transfers.
Adults only
CameoMachine is available only to people aged 18 or older and is not directed to children. We do not permit users to submit a minor's likeness. If you believe a person under 18 has provided personal information or a minor's likeness has been submitted, contact mike@pauleyco.com so we can investigate and take appropriate action, including deletion where required.
Policy changes
We will publish the current policy and its revision date on our website and give notice of material changes through the service or an account email. Where a change requires additional consent, we will obtain it before making that new use of information.