1. Who we are
{site} operates this website and the video generation service available through it. For the purposes of applicable data protection law, {site} is the controller of the personal data described in this policy. Contact: {email}.
2. Data we collect
| Category | What it includes | Why |
|---|---|---|
| Account data | Email address, password hash, display name, account settings, preferred theme | To create and secure your account |
| Generation data | Prompts, uploaded images, selected model, duration, aspect ratio, generated files and their metadata | To produce and deliver your videos |
| Billing data | Credit balance, top-up history, order IDs, and limited transaction references from our payment partners | To credit your balance and handle billing disputes |
| Technical data | IP address, browser type, device type, timestamps, error logs, request identifiers | Security, abuse prevention, debugging |
| Communications | Messages you send to support | To answer you |
We do not receive or store full card numbers. Payment details are collected and processed directly by our Merchant of Record and payment partners.
3. How we use your data
- Provide the service: authenticate you, run generations, store and serve your files.
- Bill you: maintain your credit balance, process top-ups, issue refunds, prevent payment fraud.
- Keep the service safe: detect abuse, enforce our Acceptable Use Policy, rate-limit and block malicious traffic.
- Support you: respond to requests and troubleshoot issues.
- Improve the product: aggregated, de-identified usage statistics (for example, which models are used and how often generations fail).
- Comply with law: respond to lawful requests and meet our accounting and tax obligations.
4. Legal bases (EEA/UK visitors)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the service you requested), legitimate interests (securing the service, preventing abuse, improving the product), consent (where we ask for it, such as optional cookies), and legal obligation (tax and accounting records).
5. Who we share data with
- Payment partners. Our Merchant of Record and card processors handle your payment and receive the information needed to process it and calculate tax.
- Model providers. To generate your video, your prompt and any reference image are transmitted to the provider of the model you selected.
- Infrastructure providers. Hosting, storage, and CDN providers that operate the service on our behalf.
- Professional advisers and authorities. Where required by law, court order, or to protect our rights.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
6. International transfers
Our providers may process data in countries other than yours. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.
7. How long we keep data
- Account data: while your account is open, then for a short period to allow account recovery and to meet legal obligations.
- Generation data: prompts and job records stay with your account. Generated videos are kept for 30 days after they are ready, then the files are deleted. Download anything you want to keep.
- Billing records: kept for the period required by tax and accounting law.
- Logs: kept for a short period for security and debugging.
8. Security
We use encryption in transit (HTTPS), hashed passwords, access controls, and rate limiting. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities as required by law.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. To exercise a right, email {email}. We respond within the period required by law.
If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have the rights described in the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising them.
10. Cookies and local storage
We use strictly necessary cookies and local storage to keep you signed in, remember your theme preference, and protect against cross-site request forgery. We do not use advertising cookies. If we add optional analytics, we will ask for consent where required.
11. Children
The service is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Automated processing
We use automated systems to detect abuse, enforce rate limits, and moderate content. These systems may block a request or suspend an account. You can contact us to ask for a human review of a decision that significantly affects you.
13. Changes to this policy
We may update this policy. If a change is material, we will notify you by email or in the product before it takes effect. The date at the top shows when it was last revised.
14. Contact
Privacy questions and requests: {email}