What we promise – and what we don't
Only statements the product backs up today. No certificates we don't have, no badges we haven't earned.
What the product guarantees
Every exported ad is marked as AI-generated in its file metadata. Removing the label is off by default.
Creating an AI character from photos of a real person requires a recorded consent statement and their full name. Deleting the character revokes it.
Model providers run their safety filters on every image and video. A blocked generation is refunded automatically.
You see the exact credit cost before every click, and failed generations are refunded automatically.
Passwords are stored with Argon2id, session and share-link tokens only as hashes. Review links are view-only and expire.
Delete any result, product or character whenever you want – deleted characters can't be used again.
Who processes data for us
The services the product is wired to, and when they come into play.
| Service | Purpose | When | Location |
|---|---|---|---|
| kie.ai | AI image, video, voice and music generation (model aggregator) | Every generation | On request |
| Stripe | Payments and invoices | Plans and top-ups | On request |
| Brevo | Transactional email (sign-in links, receipts) | When an email is sent | On request |
| Object storage (S3-compatible) | Uploads and generated media | Always | On request |
| Hosting provider | App and database | Always | On request |
| Meta / TikTok | Ad performance and launching | Only if you connect an ad account | On request |
Retention at the AI provider and the rest of the details are in the privacy policy.
Seen an ad made with surfugc that breaks the law or uses someone's likeness without consent? Report it – a person reviews every report.