Privacy Policy

This policy explains what [Company legal name] (“we”) collects when you use VidStudio, why, and who processes it. We do not sell your data and do not use advertising or analytics trackers.

What we collect

• Account: your name, email address and a hashed (not readable) password.
• Your content: scripts and voiceovers you provide, and what we make from them: shot plans, voiceovers, transcripts, images and videos.
• Billing: your credit balance and history, and the Razorpay payment reference for purchases. Razorpay collects your payment details; we never see your card.
• Technical: the IP address and browser type of your signed-in sessions, and service logs used to run and secure the Service and to measure its costs.

Cookies

We use one essential cookie to keep you signed in. Razorpay’s checkout sets its own cookies when you buy credits. We use no advertising or analytics cookies.

Why we use it

To provide the Service you ask for (performing our contract with you), to take payments, to keep the Service secure and prevent abuse, and to meet legal obligations such as tax records.

Who processes it

These providers process data on our behalf, each only for the purpose shown:

• Vercel: hosts the website and runs the app.
• Neon: database (account, projects, credits).
• Cloudflare R2: file storage (voiceovers, images, videos).
• Amazon Web Services: processing and rendering your videos.
• Anthropic: your script text, to plan the shots.
• OpenAI: your script text, to generate the voiceover; image prompts, to generate images.
• Groq: the narration audio, to time subtitles to each word.
• Pexels and Pixabay: search terms derived from your script, to find stock footage.
• Razorpay: payments, card, UPI and bank details.

Several are based in the United States, so your data may be processed outside your country, under the safeguards those providers offer. AI providers receive your content through their business APIs under terms that govern how they may retain and use it.

How long we keep it

We keep your account and content while your account exists. When you ask us to delete your account we delete your content and account data, except records we must keep by law (such as billing records). Rendered files may remain in backups for a short period afterwards.

Your rights

Depending on where you live (for example under the GDPR or India’s Digital Personal Data Protection Act), you can ask to access, correct, export or delete your personal data, and withdraw consent or object to processing. Email [support@your-domain]; we answer within 30 days. You may also complain to your data protection authority.

Security

Passwords are hashed, data travels over encrypted connections, and files are served only through short-lived signed links. No system is perfectly secure; we will tell you of a breach affecting you as the law requires.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

Changes and contact

We will post changes here and tell you of material ones. Contact: [Company legal name], [Registered address], [support@your-domain].