Privacy Policy

• Account data: name, email, and authentication details (managed by Clerk).
• Uploaded media: reference images and videos you upload.
• Generated media: the videos and images the Service produces for you.
• Prompts: the text and settings you submit to generate content.
• Billing data: subscription and payment status (card details are handled by Stripe; we never store full card numbers).
• Usage and technical data: generation activity, credit ledger, and security logs used to operate and protect the Service. With your consent, product analytics events (see section 4).

To provide and improve the Service, process generations, manage billing and credits, prevent abuse and enforce our Terms, provide support, and meet legal obligations. We screen prompts for safety and may retain limited flagged excerpts for review.

We share data only with the providers that operate the platform on our behalf, under confidentiality obligations, and where required by law. We do not sell your personal data.

• Clerk, authentication and account management.
• Stripe, payment and subscription processing.
• Cloudflare R2, storage of uploaded and generated media.
• Neon, our application database.
• Railway, application hosting.
• OpenRouter and the underlying AI model providers, which process your prompts and reference media to generate output.
• Resend, transactional and (where applicable) product emails.
• PostHog, product analytics, only after you consent (section 4).

We use a small number of necessary cookies required for login, security, and payments. We do not run analytics, session replay, or marketing/advertising technologies until you opt in via our cookie banner. When you grant analytics consent, we use PostHog to measure product usage; we never send your email, name, prompts, uploaded or generated media, file names, billing details, or raw AI provider data to PostHog, and session replays mask all text and inputs. You can change or withdraw your choices any time via the “Cookie Preferences” link or our Cookie Policy.

Media is stored in private object storage (Cloudflare R2) and served only via short-lived, access-scoped signed links. Each customer’s data is isolated at the application layer and by database row-level security. No method of storage or transmission is perfectly secure.

We keep your data while your account is active, with one exception: if your subscription ends, your workspace’s creative content — generated videos and images, uploaded media, projects, footage reels, models, products, brand kits, and workspace templates — is permanently deleted after a 14-day grace period, as shown in your billing settings; resubscribe before then to keep everything. Your account, credit history, and billing records are unaffected. You can delete your account at any time; when you do, we hard-delete your personal data, generations, and stored media (purging them from object storage). Diagnostic and security logs are kept for bounded operational windows, and records of admin actions and completed deletions are retained as compliance evidence. Billing and tax records held by Stripe may be retained separately where required by law, even after app, profile, and media data are deleted.

Depending on your location you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can export your account, project, and media metadata and delete your account; contact us if you need help exercising any of these rights.

Your data may be processed in countries other than your own. The Service is not directed to children and is intended for users 18 and older.

Questions or requests: [email protected].