[Legal] Privacy
Privacy policy
Last updated: 10 November 2026
Draft for launch. The marked fields need the operator's legal details: [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [CONTACT EMAIL]. The list of processors below should be checked against the live setup before publishing.
1. Who is responsible
agentvideo.app is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], which is the controller of the personal data described here. Contact: [CONTACT EMAIL].
2. What we collect
- Account. When you sign in with Google we receive your email address, name and profile picture.
- Content. The prompts and settings you submit, and the videos and poster frames made from them.
- Billing. Your plan, subscription status, credit balance and a ledger of credits spent. Card details go to the payment provider and never reach us.
- Usage and security logs. Job history, API key usage and request metadata, kept to run the service and prevent abuse. Rate limits are applied per IP address and per account.
- Page statistics. Cookieless counts of pages viewed and buttons clicked, described in section 3.
3. Cookies and measurement
This site sets no cookies for measurement and stores no identifier in your browser. The app sets one session cookie after sign-in, which is needed to keep you signed in. We do not use advertising cookies, Google Analytics or other third-party trackers.
We keep our own page and click statistics so we know which pages are read and which buttons are used:
- What is recorded. The page path, which labelled link or button was clicked, the seconds a page was visible, the host name of the site you came from, campaign tags in the link (utm), your country and whether the device is a desktop, phone or tablet.
- No cross-day identifier. To count visitors, the server derives a one-day code from the date, your IP address and your browser's user agent. It changes every day, so visits on different days cannot be linked. The IP address itself is not stored.
- Never recorded. Prompts, email addresses and names are not part of these statistics.
- Opting out. If your browser sends Global Privacy Control or Do Not Track, nothing is sent and anything received is dropped.
- How you arrived. The first page you opened, the referring host and campaign tags are kept in your browser's sessionStorage for the tab. If you sign up in that tab, that note is saved once with the new account so we know which pages lead to sign-ups. It is cleared when the tab closes.
- Retention. Event rows are deleted after 180 days.
Cloudflare Web Analytics runs on this domain as a second, independent visitor count. It uses no cookies and does not fingerprint visitors.
If you turn the animated agents off, that choice is saved in your browser's local storage and is not sent to us.
4. Why we use it
- To provide the service you asked for: signing you in, running jobs, storing and serving your videos (performance of a contract).
- To bill you and keep accounting records (contract and legal obligation).
- To keep the service safe: screening prompts, rate limits, abuse prevention (legitimate interest).
We do not sell personal data, and we do not use your prompts or videos to train models. [CONFIRM WITH THE MODEL PROVIDER'S TERMS]
5. Who processes data for us
- Cloudflare: hosting, database, file storage, network and Cloudflare Web Analytics.
- Google: sign-in.
- Polar: payments, as merchant of record.
- Anthropic: the language model that writes the scene code. Your prompt is sent to the model as part of a job.
Some of these providers process data outside your country, including in the United States. [TRANSFER MECHANISM, e.g. SCCs]
6. How long we keep it
- Finished videos: 30, 90 or 180 days depending on your plan, or until you delete them.
- Account data: while your account exists.
- Billing and ledger records: as long as accounting law requires. [RETENTION PERIOD]
- Security logs: [LOG RETENTION].
7. Your rights
Depending on where you live, you can ask for access to your data, correction, deletion, a copy, or restriction of processing, and you can object to processing based on legitimate interest. Write to [CONTACT EMAIL]. You can also complain to your local data protection authority.
8. Children
The service is not meant for children under 16 and we do not knowingly collect their data.
9. Changes
If this policy changes in a way that matters, we will say so in the app or by email before the change applies.