Privacy Policy
Version 2026-10-01 · Effective 1 October 2026 · Last updated 18 October 2026
This policy explains what personal data [COMPANY LEGAL NAME] collects when you use Script2Reel, why, and your rights.
Data we collect
- Account data: email address, name (optional), sign-in provider, email verification status.
- Content: the briefs, text and data you submit, and the videos generated from them.
- Billing data: plan, credit transactions. Card details are handled by our payment partner and never reach our servers.
- Technical data: IP address, browser type, and logs needed to operate and secure the Service.
- Approximate country: when you open the site, we look up the country of your IP address in a database stored on our own servers (no third party receives your IP) only to suggest prices in your currency and a suitable payment method. You can change it on the Pricing page. We don't store the result or your IP address for this purpose.
- Messages you send us through the Help page (your email, topic, message and, if you attach one, the video concerned).
- A record of when you accepted our Terms of Service and Acceptable Use Policy (document version, date, a one-way hash of your IP address and a shortened browser description), kept as evidence of our agreement.
How we use it
- To provide the Service: generate scripts, narration, images and render your videos.
- To manage your account, credits and payments, and to prevent abuse of free credits.
- To send essential service emails (verification, password reset, receipts) and to answer your messages.
- To check briefs and videos against our Acceptable Use Policy and to handle reports of misuse.
We process your data to perform our contract with you (providing the Service), for our legitimate interests in keeping the Service secure and preventing abuse, and to comply with legal obligations.
We do not sell your personal data. We do not use your content to train our own AI models.
Service providers (sub-processors)
We use trusted providers to run the Service:
- Google Cloud / Firebase — hosting, authentication, AI text-to-speech and image generation (United States).
- Cloudflare — content delivery and file storage.
- Neon — managed database.
- Our payment partner (merchant of record) — checkout, invoicing and tax.
- SePay — payments in Vietnamese dong by bank transfer (VietQR): order number, amount and payment status (Vietnam).
- DeepSeek — AI language model that writes video scripts from your brief and checks briefs for safety (China).
- Pexels and Pixabay — stock media search (search terms only, no personal data).
Documents you upload
Documents you attach to a video (PDF, Word, text, Markdown, CSV or Excel files) are used only to create that video: we read their text and tables, send the relevant parts to our AI language model provider to write the script and draw charts with your numbers, and check them for safety. We do not use your documents to train AI models. Uploaded files and the text extracted from them are deleted automatically after 7 days, or earlier when you remove the file or delete your account. Charts in the video list the file they came from.
Photos and clips you upload
Photos and video clips you add to your media library are used only to make your own videos. When you upload a file we convert it (for example HEIC to JPEG), remove hidden metadata such as GPS location, and send a small preview or a few frames to Google's AI model (Google Cloud) to describe what it shows and to check it against our Acceptable Use Policy. We do not use your media to train AI models or for any other purpose. Your library keeps your files until you delete them or your account; files that fail the check are deleted within 24 hours.
Retention
We keep account data while your account is active. Generated videos and inputs are kept until you delete them or your account, and removed from backups within a limited period. Uploaded documents are kept for at most 7 days (see above). When you delete your account, the messages you sent us are anonymised (we keep only their topic and date) and your terms acceptance records are deleted.
When you delete your account yourself, it is locked straight away and permanently deleted after 7 days, together with your sign-in account. Until then you can restore it by signing in again. Your public share links are turned off and unfinished videos are cancelled as soon as you ask.
Your rights
Depending on where you live (e.g. GDPR, CCPA), you may access, correct, export or delete your data, and object to certain processing. Contact [email protected].
Cookies
We use only cookies and local storage needed for sign-in and your preferences (such as the colour theme and language). No advertising trackers.
International transfers
Data may be processed in the United States and other countries where our providers operate, with appropriate safeguards.