Privacy Policy

1. Introduction

Video Blade Inc. ("Company", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our AI video creation platform ("Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Data Controller

Video Blade Inc. is the data controller responsible for your personal data. For GDPR purposes, our Data Protection Officer can be reached at dpo@video-blade.com.

3. Information We Collect

3.1 Information You Provide

Data Type	Examples	Purpose
Account Data	Name, email, password	Account creation & authentication
Payment Data	Card details, billing address	Subscription processing (via Stripe)
Content Data	Text prompts, creative descriptions	Generating AI content per your requests
Communication Data	Support tickets, emails	Customer support & service improvement

3.2 Information Collected Automatically

Data Type	Examples	Purpose
Usage Data	Features used, generation history, token usage	Service improvement & analytics
Device Data	Browser type, OS, screen resolution	Compatibility & optimization
Log Data	IP address, timestamps, page visits	Security, fraud prevention, diagnostics
Cookie Data	Session IDs, preferences	Authentication & personalization

3.3 Information from Third Parties

If you sign in via Google, GitHub, or other OAuth providers, we receive your name, email, and profile picture as authorized by you during the OAuth flow.

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the Service you subscribed to
• Legitimate interest: Analytics, fraud prevention, and service improvement
• Consent: Marketing communications, non-essential cookies
• Legal obligation: Tax records, compliance with law enforcement requests

5. How We Use Your Data

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (receipts, account alerts, security notifications)
• Send marketing communications (only with your consent; you can opt out anytime)
• Analyze usage patterns to improve features and user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

6. AI-Generated Content & Prompts

When you submit text prompts to generate content:

• Your prompts are sent to third-party AI providers (OpenAI, Google, ElevenLabs, etc.) for processing
• We store your prompts and generation history in your account for convenience
• We do not use your prompts or generated content to train our own AI models
• Third-party AI providers may have their own data retention policies; see Section 7
• You may delete your prompt history at any time from your account settings

7. Data Sharing & Third Parties

We share your data with the following categories of third parties:

Category	Providers	Data Shared
AI Processing	OpenAI, Google AI, ElevenLabs, Kie.ai	Text prompts, generation parameters
Cloud Infrastructure	AWS (us-west-2)	Account data, generated files
Payment Processing	Stripe	Payment & billing info
Analytics	Google Analytics, Mixpanel	Anonymized usage data
Email Service	SendGrid	Email address, name

We require all third-party providers to adhere to appropriate data protection standards. We do not sell your personal data to any third party.

8. Data Storage & Security

• Data is stored on AWS servers in the us-west-2 (Oregon) region
• All data in transit is encrypted via TLS 1.3
• Data at rest is encrypted using AES-256
• Database access is restricted to authorized personnel only
• We perform regular security audits and vulnerability assessments
• Passwords are hashed using bcrypt with appropriate salt rounds

9. Data Retention

• Account data: Retained while your account is active, plus 30 days after deletion request
• Generated content: Stored in your account until you delete it, or 90 days after account closure
• Payment records: Retained for 7 years for tax/legal compliance
• Server logs: Retained for 90 days, then anonymized
• Analytics data: Retained in anonymized form indefinitely

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for processing based on consent at any time

To exercise these rights, email privacy@video-blade.com. We will respond within 30 days (or 72 hours for GDPR data access requests).

11. International Data Transfers

Your data may be transferred to and processed in the United States. For transfers from the EU/EEA, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• EU-US Data Privacy Framework where applicable

12. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at privacy@video-blade.com and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 14 days before the changes take effect.

14. Contact Us

For privacy-related questions or requests:

Email: privacy@video-blade.com
DPO: dpo@video-blade.com
Address: Video Blade Inc., 100 Innovation Drive, Wilmington, DE 19801, USA

If you are in the EU and believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority.