Privacy Policy

1. Data we collect

Account data: your email address and, if you sign in with Google, the basic profile Google shares (name, email, profile picture).

Content: the descriptions you write, the images you upload, and the videos generated for you.

Billing and usage: wallet top-ups and charges, and a record of each generation (model, settings, status and cost, and the IP address and browser it was submitted from). Card details are handled by Stripe and never reach us.

Technical data: IP address, browser information and logs needed to run and secure the service.

2. How we use it

To sign you in, run your generations, keep your wallet and history, show your creations back to you, prevent abuse, provide support, and improve the service. We do not sell your personal data.

Each generation is recorded with the account, IP address and browser that submitted it so that we can trace AI-generated content back to its source when it is misused.

3. Who we share it with

Service providers who process data for us: Clerk (sign-in), Stripe (payments), PostHog (usage analytics and error reports), OpenRouter and xAI (when you use Enhance, your description and images are sent through OpenRouter to xAI's Grok model to rewrite the description), Amazon Web Services (hosting and storage of uploads and videos), Cloudflare (network delivery), and the AI model providers that generate your videos, which receive your description and images for that purpose.

We may also disclose data when the law requires it or to protect the service and its users.

4. Cookies and local storage

We use cookies and browser storage that are needed to keep you signed in (set by Clerk), and remember your preferences. We use PostHog to count page visits and to record errors so we can fix them; it does not record your screen or what you watch, and it stays off if your browser sends Global Privacy Control. We do not use advertising cookies.

5. Retention

We keep your account data, history and content while your account is active, and billing records for as long as accounting and tax rules require. When you delete a video, it disappears from your account at once; we keep the file for 30 days so we can act on reports of abuse, then delete it, and keep a record that the generation took place. When you ask us to delete your account, we delete or anonymise the rest. We may keep content that violates our Terms, along with related account and device information, for as long as needed to enforce our Terms and meet legal obligations.

6. Your choices

You can ask us for a copy of your data, to correct it, or to delete your account and its content, by writing to us from the email on your account. Depending on where you live you may have further rights, which we will honour.

7. Security and international transfers

Uploads and generated videos are stored privately and shared only through links that expire. Our providers may process data in the United States and other countries.

8. Changes

We may update this policy; the date at the top shows the latest version.