Privacy Policy

1. Data We Collect

We collect the following types of information:

• Account information: Email address and display name, provided during registration.
• API keys: If you use BYOK (Bring Your Own Key) mode, we store your third-party API keys in encrypted form.
• Usage data: Information about how you interact with the Platform, including features used, credit consumption, rendering requests, and session metadata.
• Rendered content: URLs and metadata associated with videos, audio, and images you generate on the Platform.
• Payment data: Billing information is collected and processed by Stripe. We do not store your credit card details.

2. How We Use Your Data

Your data is used for the following purposes:

• Authentication: To verify your identity and manage your account.
• Service delivery: To process rendering requests, voice synthesis, and other Platform features.
• Billing: To track credit usage and process payments.
• Analytics: To understand usage patterns and improve the Platform. We use aggregate, anonymized data for this purpose.

3. Third-Party Sharing

We share data with third-party services only as necessary to operate the Platform:

• Supabase — Database and authentication. Stores your account data, project data, and encrypted API keys.
• Stripe — Payment processing. Receives your billing information to process credit purchases.
• fal.ai — AI rendering. Receives image and audio data necessary to generate your videos.
• ElevenLabs / Fish Audio — Voice synthesis. Receives text and audio data to generate speech for your projects.
• Vercel — Hosting. Serves the Platform and may process request logs.

We do not sell your personal information to any third party, ever.

4. Data Storage & Security

Your data is stored in Supabase databases hosted in a US region. All data is encrypted at rest and in transit. We follow industry-standard security practices to protect your information, including encrypted connections (TLS), secure authentication flows, and regular access audits. However, no system is perfectly secure, and we cannot guarantee absolute security.

5. API Key Handling

If you provide third-party API keys for BYOK mode, they are stored in encrypted form in our database. Your keys are never shared with anyone, never logged in plaintext, and are used exclusively to make API calls on your behalf when you trigger a rendering or voice synthesis request. You may delete your stored API keys at any time through the Platform settings.

6. Cookies

We use cookies solely for authentication session management. These cookies are necessary for the Platform to function and keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Delete your account and associated data
• Export your data in a portable format

To exercise any of these rights, contact us at privacy@psyop360.com. We will respond to your request within 30 days.

8. Children's Privacy

Psyop360 is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at privacy@psyop360.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the email address associated with your account. Continued use of the Platform after changes take effect constitutes your acceptance of the revised policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us at privacy@psyop360.com.