Account data. Your email address and name. If you sign in with Google, we receive your Google profile email and name through the OAuth flow. If you create a password, we store only a bcrypt hash of it — never the password itself.

Content you submit. The prompts and stories you enter, plus the settings you choose (style, video type, aspect ratio, duration, background music and voice). These are needed to generate your video.

Generated output. The videos, narration audio and images produced for your account, along with job status records so you can track generation progress.

Billing data. Your subscription plan, credit balance and transaction history. We do not see or store your card number; Stripe handles payment instruments directly.

Technical data. Standard server logs such as IP address, request timestamps and error traces, used for debugging and abuse prevention.

• To generate the videos you request and deliver them to your dashboard.
• To authenticate you and keep your account secure.
• To track credit balances and process subscription payments.
• To diagnose failures, monitor the generation queue and prevent abuse.
• To respond to support requests you send us.

We do not sell your personal data, and we do not use your prompts or generated videos to train third-party models without your explicit consent.

Generating a video requires several specialist services. Each receives only what it needs to do its part:

• Stripe — payment processing and subscription management.
• Google — authentication only, and only if you choose to sign in with Google.
• ElevenLabs — text-to-speech narration. Receives the script text for the video you are generating.
• Amazon Web Services — job queueing and storage for generation tasks and their output.
• Neon (PostgreSQL) — hosting of our database, including account and asset records.

Each processor acts on our instructions under its own terms. We do not transfer data to any party for their independent marketing use.

We use strictly necessary cookies and session storage to keep you signed in and to maintain your subscription state across the checkout flow. We do not run third-party advertising or cross-site tracking cookies. If analytics are added later, this section will be updated and, where required by law, consent will be requested first.

Account data is kept for as long as your account is open. Generated videos and their source prompts are retained while your account is active so you can re-download them. Billing records are retained for the period required by tax and accounting law, which typically means several years after a subscription ends. Server logs are rotated on a short cycle.

Depending on where you live, you may be able to ask us to:

• give you a copy of the personal data we hold about you;
• correct inaccurate data;
• delete your account and associated content;
• restrict or object to particular processing;
• export your data in a portable format.

Email support@changeme.example to make any of these requests. We will respond within 30 days. Deleting your account removes your videos, so download anything you want to keep first.

Traffic is served over HTTPS. Passwords are hashed with bcrypt. Database access is restricted to credentials held server-side and never exposed to the browser. Payment details never touch our servers. No system is perfectly secure, but we limit what we collect so that a breach would expose as little as possible.

The service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal information, contact us and we will delete it.

We will update the “Last updated” date at the top of this page whenever the policy changes materially, and will notify account holders by email before a change that reduces your rights takes effect.