Privacy policy

This policy explains what we collect, why we collect it, and what you can do about it. It is written to be read rather than to be legally impressive.

What we collect

Account data. Your email address, your name if you give one, and your store URL if you connect one. Required to give you an account.

Content you provide. Product URLs you paste, images you upload, and scripts you edit. Required to generate the videos you asked for.

Generated output. The videos and images we produce for you, stored in your library so you can retrieve them.

Connected accounts. If you connect TikTok or Instagram for publishing, we store the access token those platforms issue us. We never receive or store your password for those platforms.

Payment data. Handled entirely by our payment processor. We receive a transaction reference, the plan, the amount and the last four digits of the card. We never see the full card number.

Usage data. Which features you use, how many videos you generate, and error reports. Used to keep the service working and to decide what to build.

What we do not do

• We do not sell your data.
• We do not use your product images or generated videos to train models offered to anyone else.
• We do not publish anything to your connected accounts unless you explicitly ask us to.

Why we are allowed to hold it

Account data, content and generated output are processed to perform the contract you entered when you subscribed. Usage data is processed on the basis of our legitimate interest in keeping the service working and improving it. Marketing email, if you receive any, is sent on the basis of consent you can withdraw at any time.

How long we keep it

Data	Retention
Account data	Until you delete your account, then 30 days
Generated videos and images	Until you delete them, or 90 days after account deletion
Uploaded source images	12 months after last use
Connected account tokens	Until you disconnect, or you delete your account
Payment records	7 years, because tax law requires it
Usage logs	14 months

Who else touches it

We use third party providers for hosting, video rendering, payment processing, transactional email and error monitoring. Each receives only what it needs to do its job, and each is bound by a data processing agreement. Video rendering may run on infrastructure outside your country.

Your rights

You can request a copy of your data, correct it, delete it, or ask us to stop processing it. Email us and we will act within 30 days. You can delete your account yourself from the dashboard at any time, which triggers the deletion schedule above without you needing to ask.

Changes

If we change this policy in a way that affects you, we will email you before it takes effect rather than quietly updating the date at the top.