Privacy Policy

The controller is [Company legal name], [Street and number], [Postcode and city], [Country]. For anything about your data, write to [privacy email].

• Account data — email address, password (stored only as a hash by our authentication provider), name, team and workspace membership, role and permissions.
• Content you create or upload — videos, images, audio, scripts, hooks, captions, prompts, brand kits, social account profiles you set up, comments and notes.
• Research data — public social media videos, channels and statistics you choose to analyze.
• Billing data — top-ups, balance, generation costs and invoices. Card details are handled by our payment provider; we never see or store full card numbers.
• Usage and technical data — which features ran and what they cost, error logs, IP address and browser information needed to keep the service secure and working.
• Connected services — if you connect a phone farm or social accounts, the identifiers and settings needed to hand content over to them.

• To provide the app: sign-in, storing your projects, generating and rendering content (performance of our contract with you).
• To bill usage and keep your balance accurate (contract and legal accounting duties).
• To keep the service secure, prevent abuse and fix errors (our legitimate interest).
• To send service emails such as sign-in links, receipts and important changes (contract).
• To answer your support requests (contract / legitimate interest).

We don't use your content to train our own AI models, and we don't build advertising profiles.

We work with carefully chosen providers who process data on our behalf and only for the purposes above:

• Supabase — database, authentication and file storage.
• Vercel — hosting, delivery and file storage.
• Stripe — payments and top-ups.
• Resend — transactional email.
• Remotion / Amazon Web Services — video rendering.
• OpenAI, Google (Gemini), Groq, Venice AI — AI text, analysis and transcription.
• ElevenLabs — AI voiceover.
• EnsembleData and the YouTube Data API — fetching public social media data for research.

When you use AI features — writing hooks, analyzing videos, reviewing drafts, transcribing or voicing — the relevant input (for example your prompt, text, a video frame or an audio file) is sent to the AI provider that performs the task and the result is returned to you. We use these providers' business APIs, whose terms don't allow them to train their models on API data by default. AI output can be inaccurate; review it before you publish.

Some providers process data outside your country, including in the United States. Where that happens we rely on adequacy decisions or standard contractual clauses and the providers' own security commitments.

We keep account data and content for as long as your account exists. When you delete content it is removed from storage; when you delete your account, your data is deleted within [e.g. 30 days], except records we must keep by law (such as invoices). Security logs are kept for a limited time.

Depending on where you live, you can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and object to processing based on legitimate interests. You can also complain to your data protection authority. Write to [privacy email] — we answer within 30 days.

Data is encrypted in transit, access to it is limited per workspace and role, and payment data stays with our payment provider. No system is perfectly secure; if we ever learn of a breach that affects you, we will tell you as required by law.

We may update this policy as the product changes. The date at the top shows the latest version; important changes are announced in the app or by email.