Privacy Policy
Template: the business owner must complete every bracketed placeholder and have this reviewed before launch.
Controller
[YOUR COMPANY NAME], [YOUR REGISTERED ADDRESS]. Contact: [YOUR CONTACT EMAIL]. [ADD YOUR DATA PROTECTION OFFICER OR EU REPRESENTATIVE IF REQUIRED.]
What we collect
Account data (email, display name, hashed password or Google sign-in), the inputs you submit, generated output, uploaded files, projects, credit and billing records, and technical logs. With your consent, the campaign parameters (UTM tags) of the link that brought you to the site.
Why we use it
To provide the service and your account (contract), to process payments and keep accounting records (legal obligation), to prevent abuse and keep the service secure (legitimate interests), and, only with consent, to measure which videos and campaigns bring visitors.
Processors
Supabase (database, authentication and file storage), Creem (payments and tax, as merchant of record), our AI providers [LIST THE TEXT AND IMAGE PROVIDERS YOU ENABLE, e.g. Anthropic, fal.ai], Google (YouTube Data API, and Google sign-in if enabled), our hosting provider [e.g. Vercel], and, with consent, Plausible Analytics if enabled. [CONFIRM DATA PROCESSING AGREEMENTS AND INTERNATIONAL TRANSFER MECHANISMS.]
YouTube API Services
When you paste a YouTube link or compare channels we use YouTube API Services to fetch public video and channel details. By using these features you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). See the Google Privacy Policy (https://policies.google.com/privacy).
Connected YouTube channels
If you connect your channel, we ask Google for read-only access to your channel and YouTube Analytics. We use this data only to show you your own analytics and to generate recommendations you request. We store an encrypted access token, never sell or share the data, and don't use it for advertising. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements. Disconnect at any time from Channel Analytics or at https://myaccount.google.com/permissions; disconnecting deletes the token and revokes our access. [CONFIRM THIS MATCHES YOUR PRACTICES BEFORE APPLYING FOR GOOGLE VERIFICATION.]
Teams
If you join a team, its members can see the projects, designs and images shared with that team, and your name and email address.
How long we keep it
Account data is kept while your account is open. Deleting your account removes your profile, projects, generations, credits and files. Billing records may be kept by Creem and by us as required by law. [STATE YOUR RETENTION PERIODS.]
Your rights
You can access, correct, export and delete your data, object to or restrict processing, and withdraw consent at any time (use "Privacy choices" in the footer). Delete your account under Settings. You may complain to your data protection authority.
Cookies and storage
We use strictly necessary cookies to keep you signed in. Attribution data is stored in your browser only if you allow it.