Privacy policy

This Privacy Policy explains how DSpark LLC (“DSpark,” “we,” “us,” or “our”), the operator of Nallo, handles information when you visit or use the service. Nallo is currently a pre-launch Site. DSpark LLC’s registered address, verified privacy contact, and any jurisdiction-specific notices must be published before public launch.

Information we process

Account information

When you sign in, the shared Video Product may process identifiers such as your email address, display name, authentication provider, session information, and account ID. Authentication credentials are handled by the configured identity provider; Nallo does not create a separate password database.

Creation content

We process prompts, uploaded source images or other media, selected models and settings, generated outputs, and related metadata needed to provide the creation service. Creation records may include status, timestamps, Credit cost, error information, and references to stored media.

Usage and technical information

The service may process request times, pages and features used, browser and device information, IP-derived security signals, diagnostic events, and operational logs. These records help operate the service, prevent abuse, investigate failures, and improve reliability.

Credits and transaction information

When payments are enabled, the shared Video Product and its payment providers may process plan selections, purchase identifiers, payment status, currency, amount, subscription state, and refund status. Payment-card or wallet credentials are handled by the payment provider and are not intended to be stored by this Site.

How information is used

Information is used to:

• authenticate users and maintain sessions;
• accept prompts and source media, run generations, and deliver results;
• calculate, reserve, grant, and display Credits;
• operate subscriptions, purchases, cancellations, and refunds when enabled;
• secure the service, enforce usage rules, and investigate abuse;
• diagnose failures, measure reliability, and improve the user experience; and
• comply with applicable legal obligations and valid requests.

Service providers and disclosure

Information may be shared with providers that support authentication, hosting, storage, media processing, generation models, observability, fraud prevention, and payments. They receive information only as needed to perform their services or meet legal obligations. Information may also be disclosed when required by law, to protect users or the service, or as part of a lawful business transfer.

DSpark LLC does not independently sell personal information or build third-party advertising profiles from creation content.

Retention and deletion

Account, generation, media, Credit, transaction, and security records are retained only for as long as reasonably needed to provide the service, preserve transaction integrity, prevent abuse, resolve disputes, or meet legal obligations. Deleting a creation removes it from your normal history experience, but limited records may remain temporarily in backups, fraud-prevention systems, or legally required transaction records.

Security

Reasonable technical and organizational safeguards are used to protect information. No networked service can guarantee absolute security. Keep your sign-in method secure and report suspected unauthorized access through the support channel published in the production Site.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export certain personal information, or object to particular processing. You can delete supported creations from My Creations and sign out at any time. Additional account and privacy request controls, together with a verified contact method, must be available before public launch.

International processing

Providers may process information in countries other than your own. Where required, DSpark LLC will use an appropriate legal mechanism for cross-border transfers.

Children

Nallo is not directed to children under 13 or the minimum age required to consent to online services in their jurisdiction. Do not use the service if you cannot legally agree to the Terms of Use.

Changes to this policy

This policy may be updated as the service, providers, or legal requirements change. Material changes will be identified by a revised date and, where required, an additional notice.