Privacy.

Panda Roll is operated by Enclave HK Limited. We use your account details to authenticate you, your profile and follows to connect you with other people, and your viewing activity to recommend videos.

Sign-in and service providers

When you choose Google sign-in, Clerk receives your Google account identifier, email address, and basic profile information to create and secure your Panda Roll account. Google sign-in requests only identity, email, and profile permissions. It does not request your Gmail messages, contacts, files, or calendar. Apple and email sign-in are also available.

Clerk processes sign-in information. Google Cloud stores account data and media, and checks text you post for safety. OpenRouter and the providers it routes DeepSeek models to receive your ideas, script, and recent creative conversation to help develop your story. We request providers that do not collect data for training or storage under OpenRouter’s routing policy. fal processes prompts and the images you attach or import to generate videos and images. Photos you import are not inspected by us; the providers that generate media apply their own filtering. Apple handles in-app payments and optional push notifications. We do not receive your payment card number.

Your creations and profile

Your prompts and script are sent to generation and moderation providers when you use those features. Avoid including sensitive personal information. Videos stay in your private drafts until you publish them. Messages are stored so you and the person you message can read them, are checked for safety, and are deleted when either account is deleted. A private account shares published videos with approved followers; recipients may still copy content you share.

Photo and camera access is optional and used for the profile image you choose. Push notifications are optional. We do not use advertising tracking or sell your personal information.

Retention and deletion

Recommendation viewing history is retained for up to 90 days. Account deletion immediately hides your profile and posts; deletion of active media and linked authentication is processed in the background. Database backups and deleted-media recovery copies normally expire within seven days. We retain a hashed signup identity and the gift receipt to prevent repeated promotional claims. Limited payment, abuse-prevention, and audit records may remain where needed to meet legal and financial obligations.

Your choices

You can withdraw AI processing permission in Settings; this stops new processing and cancels unfinished videos. Processing already sent to a provider may finish. You can also edit your profile, change privacy and notification preferences, block people, or delete your account in Settings. For access, correction, export, or other privacy requests, contact sumer@enclave.money.