Privacy Policy

a. Account information

When you sign up, we collect your email address and (if you use Google sign-in) your name and avatar URL as provided by Google.

b. Content you create

We store the prompts you submit, the reference images or replicas you upload, and the generated videos and thumbnails produced from them. For auto-mode, we also store the schedule (date and your preferred local publish time) and the auto-generated caption.

c. Connected social accounts

If you connect TikTok or Instagram for auto-publishing, we store the OAuth access token (and refresh token where applicable), your public handle, the platform user ID, and the granted scopes. Tokens are encrypted at rest using AES-256-GCM before being written to our database.

d. Payment information

Payments are processed by Stripe. We do not receive or store your full card number. We do retain transactional metadata (purchase amount, currency, status, and the Stripe-issued IDs) so we can issue invoices, manage credits, and meet tax-reporting obligations.

e. Technical and usage data

We collect basic technical information (IP address, browser, device, timestamps) and usage events (e.g. which models you generate with, success/failure status of generation and publish jobs) needed to operate and debug the Service. We do not use cross-site advertising trackers.

• To create your account, authenticate you, and process payments.
• To generate, store, watermark, and deliver your videos.
• To publish videos to social accounts you have connected, at the times you scheduled.
• To prevent abuse, enforce our Terms, and comply with legal obligations.
• To respond to support requests and send transactional emails (purchase confirmations, security alerts).
• To improve the Service in aggregate — never by reading your prompts or videos individually for marketing.

We do not sell your personal information and we do not use your content to train third-party foundation models on our own initiative. Prompts are sent to AI providers solely to fulfill your generation request.

We rely on the following processors and platforms. Each is bound by their own privacy commitments:

• Supabase — authentication and Postgres database (account, content, and connection metadata).
• Vercel — application hosting, edge functions, and Blob storage for generated videos and thumbnails.
• Google Cloud Run — short-lived media processing (watermarking).
• Stripe — payment processing.
• Google — Sign-in with Google (if you choose it).
• xAI and OpenRouter — AI model providers (Grok Imagine, Google Veo, ByteDance Seedance). Your prompt text and, where applicable, input images, are sent to these providers to perform generation.
• TikTok and Meta Platforms (Instagram) — when you connect your accounts and we publish on your behalf.

We disclose information to law enforcement only when legally compelled (e.g. valid subpoena) or to protect the rights, property, or safety of users or the public.

We use first-party cookies that are strictly necessary to keep you signed in and to preserve OAuth state during the connect flow. We do not use third-party advertising cookies.

• Account, content, and connection data are retained while your account is active.
• When you delete a video, it is removed from your library and from our Blob storage; provider caches may persist for a short period.
• When you disconnect a social account, we revoke and null the stored tokens immediately.
• Stripe transaction records are retained for as long as required by tax and accounting rules.
• You can request full account deletion by emailing us; backups are purged within 30 days of deletion.

We protect data in transit with TLS and at rest using the underlying provider’s encryption. OAuth tokens for connected social accounts are additionally encrypted with AES-256-GCM using a key held only in our application environment. No system is perfectly secure — please use a strong, unique password and tell us right away at security@streetinterview.ai if you suspect any compromise.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccuracies;
• delete your data;
• export your data in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time, where processing is based on consent.

Email privacy@streetinterview.ai to exercise any of these rights. We will respond within the timeframe required by applicable law.

The Service is not directed to children under 13 (or the relevant minimum digital-consent age in your country). We do not knowingly collect personal information from such children. If you believe a child has given us information, contact us and we will delete it.

The Service is operated in and may transfer data to jurisdictions where our providers operate (including the United States). Where required, we use appropriate safeguards such as standard contractual clauses.

We will update the “Last updated” date above when this policy changes. For material changes we will give in-app or email notice where reasonably possible.

Questions, concerns, or requests can be sent to privacy@streetinterview.ai.