Privacy Policy

This Privacy Policy describes how AVideo ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our AI-powered video and image generation platform (the "Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your privacy and ensuring transparency about our data practices. Please read this policy carefully to understand how we handle your information.

1. Information We Collect

1.1 Account Information

When you create an account on AVideo, we collect the following information:

• Email Address: Required for account creation and communication.
• Name: Your display name on the platform.
• Password: Stored in hashed form when you register with email and password. We never store passwords in plain text.
• Profile Image: Your avatar URL, which may be provided by you or retrieved from your social login provider.
• Email Verification Status: Whether your email address has been verified.

1.2 Social Login Information

If you choose to sign in using a third-party social platform (such as Google), we receive and store:

• Provider Account ID: Your unique identifier from the social platform.
• Provider Name: The name of the social login provider (e.g., Google).
• Access and Refresh Tokens: OAuth tokens used to authenticate your session. These are stored securely and used solely for authentication purposes.

We do not access your contacts, social media posts, or other personal content from your social accounts.

1.3 Session and Technical Data

When you use the Service, we automatically collect:

• Session Tokens: Used to keep you logged in securely.
• IP Address: Collected for security purposes and fraud prevention.
• User Agent: Browser and device information to optimize your experience.
• Session Expiration Data: Timestamps to manage session validity.

1.4 Content and Generation Data

When you use our AI generation features, we collect and store:

• Text Prompts: The text descriptions, labels, or instructions you provide to generate images or videos.
• Generated Content: The images and videos produced by our AI models, stored in your media library.
• Generation Parameters: Technical details such as the AI workflow used (e.g., Rapid, ZImage), generation seeds, and job identifiers.
• File Metadata: File size, content type, and creation timestamps for generated media.

1.5 Payment and Billing Data

When you purchase credits, we collect:

• Payment Method: The type of payment used (e.g., credit card, cryptocurrency).
• Transaction Details: Purchase amount, currency, credit quantity, and transaction status.
• Payment Gateway Reference: External references from our payment processors for reconciliation.
• Payment Metadata: Gateway-specific data required for processing.

Important: We do not directly store your full credit card number, CVV, or bank account details. Payment card information is processed and stored by our third-party payment processors (e.g., Stripe, Coinbase). We only retain tokenized references and transaction metadata.

1.6 Credits and Usage Data

We maintain records of your credit activity, including:

• Credit Balance: Your current credit balance on the platform.
• Transaction History: A complete ledger of all credit movements, including purchases, generation charges, refunds, and promotional bonuses.
• Generation Charges: Records of credits reserved, consumed, or refunded for each generation request.
• Storage Usage: Your storage slot allocation and which assets occupy each slot.

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

• To create and manage your account
• To authenticate your identity and maintain secure sessions
• To process your text prompts through our AI models and deliver generated images and videos
• To manage your media library and storage
• To process credit purchases and maintain your credit balance

Platform Operations

• To maintain an auditable ledger of all credit transactions
• To detect and prevent fraud, abuse, and unauthorized access
• To enforce our Terms of Service
• To monitor system performance and troubleshoot issues

Communication

• To send account-related notifications (e.g., email verification, password resets)
• To notify you of important changes to the Service or this Privacy Policy
• To respond to your support requests and inquiries

Improvement and Development

• To analyze usage patterns and improve our AI models and platform features
• To develop new features and services

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data include contractual necessity, legitimate interests, legal obligations, and consent. You may withdraw consent at any time where consent is our legal basis for processing. Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.

4. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

4.1 Service Providers

We share information with third-party service providers who assist us in operating the platform, including cloud hosting, payment processing, and analytics providers.

4.2 Legal and Compliance

We may disclose your information when required by law, regulation, or legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of AVideo, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.4 Community Features (Planned)

In the future, if you choose to publish content to our community features, the generated images or videos you share will be visible to other users. Your prompts and generation parameters may also be shared in connection with community content. Participation in community features is entirely voluntary.

5. Data Storage and Security

5.1 Where We Store Your Data

• Account and transactional data is stored in PostgreSQL databases hosted by Neon (serverless cloud database).
• Generated images and videos are stored in Cloudflare R2 object storage.
• Our application is deployed on Cloudflare Workers, a globally distributed edge computing platform.

Your data may be processed and stored in data centers located outside your country of residence. Where we transfer data internationally, we implement appropriate safeguards as required by applicable law.

5.2 Security Measures

We implement technical and organizational measures to protect your personal information, including:

• Passwords are stored using industry-standard hashing algorithms; we never store plain-text passwords.
• Session management with token-based authentication and automatic session expiration.
• Unique idempotency keys on credit and billing transactions to prevent duplicate operations.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Encryption in transit (HTTPS/TLS) for all data transmitted between your browser and our servers.

While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Credits purchased on the platform do not expire. Your credit balance will be maintained for as long as your account is active.

7. Your Rights and Choices

7.1 Rights Under GDPR (EEA/UK Users)

If you are located in the EEA or UK, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Restriction: Request restriction of processing of your personal data.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us using the information in Section 13. We will respond within 30 days (extendable by 60 days for complex requests). You also have the right to lodge a complaint with your local data protection supervisory authority.

7.2 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: We do not sell or share your personal information for cross-context behavioral advertising. If this changes, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a request, please contact us using the information in Section 13. We will acknowledge receipt within 10 business days and respond within 45 calendar days.

7.3 Account Controls

All users can:

• Update account information through the Settings page.
• Delete generated content from the Media Library.
• View credit transaction history on the Billing page.
• Request account deletion by contacting us.

8. AI-Generated Content and Intellectual Property

8.1 Your Prompts

The text prompts, labels, and descriptions you provide remain your input. We store your prompts to deliver the Service (i.e., to generate content and to display prompt history in your media library). We may use anonymized or aggregated prompt data to improve our AI models, but we will not publicly disclose your individual prompts without your consent.

8.2 Generated Content

Images and videos generated through the Service are produced by AI models. The intellectual property status of AI-generated content is an evolving area of law. We grant you a license to use the content you generate through the Service, subject to our Terms of Service. Please consult the Terms of Service for detailed information about content ownership and usage rights.

8.3 AI Model Training

We may use generation data (including prompts and outputs) in anonymized or aggregated form to improve and train our AI models. If you object to this use, please contact us to opt out. Opting out will not affect your ability to use the Service.

9. Cookies and Tracking Technologies

We use essential cookies and similar technologies for authentication and session management. These are strictly necessary for the operation of the Service and cannot be disabled. We may use analytics tools to understand how users interact with the platform. Where non-essential cookies are used, we will obtain your consent in accordance with applicable law.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

11. International Data Transfers

Our Service operates globally through Cloudflare's edge network. Your data may be transferred to, and processed in, countries other than your country of residence. These countries may have different data protection laws than your own.

Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate transfer mechanisms, which may include:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other legally recognized transfer mechanisms

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you by email or through a prominent notice on the platform before changes take effect.
• Where required by law, obtain your consent before applying material changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@avideo.com

For EEA/UK residents: If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.