Privacy Policy

Maintained by Wan Spicy · Last reviewed: 2026-11-11

Wan Spicy is designed for private, account-scoped creation rather than public posting. The Product has no public gallery, community feed, public creator profile, likes, reposts or publish-to-gallery button. A source image or result is not automatically displayed to other Wan Spicy users. This privacy boundary does not mean the service is anonymous, that no provider processes a file, or that every record is deleted at the same moment.

Privacy at a glance

Public gallery or feed: No.
Public creator profiles: No.
Automatic publishing: No.
Publish-to-community button: No.
Account-scoped media access: Yes, subject to the temporary-link boundary explained below.
Upstream storage and model processing: Yes, when needed to perform the selected task.
Blanket no-training guarantee: No confirmed guarantee covering every upstream provider.
Self-service delete-every-copy control: Not currently available.
Privacy and deletion requests: support@wanspicy.com.

Information we collect

We may collect account information such as your name, email address, profile image, authentication identifiers, plan status, transaction references, usage records, prompts, uploaded images and videos, generated outputs, device and browser information, and service logs.

Payment card details are handled by the selected payment provider and are not stored directly by Wan Spicy.

Prompts, uploaded media and generated results can contain personal information about the account holder or another person. Submit only material that is necessary for the requested task and that you are authorized to process. Do not include private messages, addresses, account credentials or other sensitive details when they are not needed.

Browser storage

If this site asks you to confirm your age, we store the confirmation version and an expiry timestamp in your browser's local storage for 30 days. This confirmation does not collect your date of birth or identity documents. It applies only to this site and browser. Clearing site data removes it; if browser storage is unavailable, we remember it only until the page is reloaded.

How we use information

We use information to authenticate users, provide and improve features, process subscriptions, enforce limits, store requested results, diagnose failures, prevent abuse, support users, and comply with legal obligations.

Operational records can also be used to connect a task to its account, calculate Credits, confirm a payment result, investigate abuse, secure media access and answer a support request. We do not state here that uploads are never processed by model providers, never retained in service logs or never used under an upstream provider's terms. No verified no-training commitment has been adopted for Wan Spicy.

We do not use the Product to create a public catalog of customer prompts, uploads or results. We also do not provide an in-product public publishing route even when a user would be willing to publish. This removes a class of accidental-sharing decisions from the creation workflow. A user can still download an available result and choose to share it through a separate service; that external action is controlled by the user and the destination's terms.

Service providers

We share the minimum information needed with service providers that support authentication, hosting, databases, storage, model processing, payments, security, and operational analytics. Those providers process information under their own terms and our applicable agreements with them.

Different providers receive different information. A model processor may need the prompt, source media and generation settings; a payment processor needs transaction and account references; hosting, database and storage services handle the records required to operate the Site. We do not sell a source image or generated video merely because it is submitted for a task.

WaveSpeed processing boundary

When a live task is routed through WaveSpeed, WaveSpeed is an upstream processor rather than a public Wan Spicy gallery. Its published Data Retention Policy says uploaded files are stored for seven days and then automatically deleted, while generated media generally remains available for up to seven days. Its Privacy Policy and Terms describe security, service use and longer-lived operational records. Provider routing must be confirmed for the specific live task; not every model label establishes that WaveSpeed handled it.

WaveSpeed's Terms say customer data can be used as necessary to provide the service and that aggregated or anonymized resultant data can be used to improve the service. That is not a blanket no-training commitment. Wan Spicy therefore does not state that an upload is never used under an upstream provider's terms. The relevant provider terms and request limits apply to the task.

Media access and visibility

Uploaded and generated media uses account-scoped access rather than an open public gallery. A media request checks the Site and account before issuing a temporary access URL. That control reduces casual public exposure, but it is not a promise that no service provider processes the file or that every copy is deleted at one identical moment.

The current Product has no route for another Wan Spicy user to search or browse your creation history. My creations is tied to the signed-in account. A temporary media URL should still be treated as a private access credential: do not publish or forward it. Someone who obtains a still-valid URL may be able to open it even though it is not listed in a public gallery.

Completed-video availability and record retention are different concepts. A download link can expire while billing, security, support or legal records are retained for a separate period. Download results you need to keep before the availability window shown by the Product ends.

Retention and security

We retain information for as long as needed to provide the service, maintain business and security records, resolve disputes, and meet legal requirements. Retention periods vary by record type.

We use technical and organizational safeguards, but no online service can guarantee absolute security.

WaveSpeed states that it uses TLS for data in transit and access controls for stored data. Those are provider-reported controls, not a promise of absolute security. Wan Spicy also checks Site and account scope before asking the shared Product for media access. Security controls reduce risk; they do not make an online generation task invisible to authorized systems and personnel needed to operate, secure or support it.

Retention depends on the type of record, account status, service requirement and applicable obligation. We do not publish a single deletion deadline for all prompts, uploads, outputs, task records, payment records and support messages. A request to delete information can be limited where a record must be kept for security, billing, dispute resolution or legal compliance.

Your choices

You can sign out, manage or cancel an eligible subscription, and contact us to ask about access, correction, or deletion of personal information. Some records may be retained where required for security, billing, dispute resolution, or law.

Before contacting support, identify the account and the specific task, payment or record involved without attaching unnecessary sensitive media. We may need to verify that a requester controls the relevant account before disclosing or changing personal information.

There is not currently a verified self-service control that erases an upload, output, task record and every provider copy in one operation. A deletion request can cover account-linked personal information, but the response may need to distinguish media, task metadata, billing records, fraud-prevention records, support messages and legal holds. Removal from My creations or expiry of a download link does not by itself prove that each upstream record was erased at that same time.

Private is not anonymous

Wan Spicy does not expose a public creator identity beside a generation, but sign-in, account, task, Credit, payment, device, security and support records can be linked to an account. Avoid placing unrelated names, addresses, private messages, credentials or other sensitive details in a prompt. If a support request can be resolved with a task reference and error message, do not attach the intimate source image.

Contact and updates

Privacy questions can be sent to support@wanspicy.com. Include the Site domain and a concise description of the request. This Policy can change as the Product, providers or legal requirements change; the date above identifies the version last reviewed for this Site.

We do not ask users to send passwords, full payment-card numbers or unlawful intimate material to support. If identity or account control must be confirmed, the requested verification should be proportionate to the privacy request.