Privacy policy

In short

We collect what we need to run the service and nothing else. We do not sell your data. We do not use your prompts, your uploads or your generations to train models. What you generate is private to your account and is deleted when its retention period ends.

What we collect, and why

Nepali law requires that personal data be used only for the purpose it was collected for, so each item below states its purpose.

• Your Google account details: email address, name and profile picture, received when you sign in. Used to identify your account and to show you your own generations, purchases and invoices. We never see your Google password, and we do not email you.
• Your prompts: sent to our model provider to produce the video or image, and shown back to you in your library.
• Files you upload as references: images, video and audio you attach to a generation. Sent to our model provider so the model can work from them, and shown back to you while you are setting the generation up. We do not look through them, and we do not use them for anything else.
• Your generated videos and images: stored so you can watch, view and download them, until their retention period ends.
• Your purchases: what you bought, when, and the amount, to grant credits and issue the receipt we are required to keep. Payment is handled entirely by Khalti; we never see your card or wallet credentials.
• Your IP address and browser at sign-in and when free credits are claimed, to detect fraud and abuse of those credits.
• Two cookies: one that keeps you signed in, and one that exists only for the few seconds a sign-in takes. Both are strictly necessary to run the service. We set no advertising or tracking cookies of any kind.
• Your mobile number, if you choose to claim the free welcome credits. We send it a one-time code to check the number is yours, and we keep a one-way scrambled fingerprint of it so the same number cannot claim the free credits twice. That fingerprint is kept even if you delete your account, because otherwise deleting and re-registering would claim the credits again. It cannot be turned back into your number, and it is never used to contact you.

Who we share it with

Five, and each one only gets what it needs to do its job:

• Our model provider (BytePlus) receives your prompt and any reference files you attach, in order to produce the video or image.
• Our storage provider holds your finished videos and images and the files you upload, until they are deleted.
• Khalti, our payment gateway, receives your name, email, phone number if given, and the amount, in order to take payment.
• Our SMS provider receives your mobile number, and only if you ask for a verification code, in order to deliver it.
• Our bot-check provider receives your IP address when you request that code, to tell a person apart from a script.
• Government authorities, where we are legally required to disclose something.
• Nobody else. We do not sell your data, we do not share it for advertising, and we do not use your prompts, uploads or generations to train models.

The model provider and the storage provider are both outside Nepal, so your prompt, your uploads and your finished files are transmitted abroad and held there. By using the service you consent to that transfer.

How long we keep it

• Generated videos and images: the retention period shown on your account, then permanently deleted from our storage.
• Reference files you attached to a generation: kept for as long as that generation is, and deleted with it.
• Reference files you uploaded but never used: deleted automatically after 24 hours.
• Purchase and tax records: retained as long as Nepali tax law requires, even after you delete your account. We cannot delete these on request.
• Sign-in sessions: 30 days from your last visit, then deleted automatically.
• Everything else: until you ask us to delete your account.

Your rights, and withdrawing consent

You consent to this policy when you create an account, and you can withdraw that consent at any time by asking us to delete it. We will ask again if we ever want to use your data for a purpose not listed above.

You may ask us to:

• tell you what personal data we hold about you;
• correct anything inaccurate;
• delete your account, your prompts, your uploads and your generations;
• give you a copy of your data.

Write to [email protected]. Each of these is handled by hand rather than by a button, and we will complete it within 15 days.

Two things survive deletion: purchase and tax records, which the law requires us to keep, and the scrambled fingerprint of any mobile number used to claim free credits, which cannot identify you and exists only to stop the same number claiming twice.

You can download your videos and images yourself at any time from your library, without asking.

How we protect it

• Sign-in sessions are stored as one-way hashes, so a database leak yields no usable sessions, and any session can be revoked instantly.
• Your files are served through short-lived private links. Storage is never public, so a guessed address reveals nothing.
• We never store card or wallet details; Khalti handles payment entirely.
• All traffic is encrypted in transit.

No system is perfectly secure. If a breach affects your data we will tell you and the relevant authority without undue delay.

Contact

Questions about this policy, or about your data, go to [email protected].