Privacy Policy

We collect the following categories of information:

• Account data: your email address, name, avatar, and authentication identifiers from Google or email sign-in.
• Content data: the prompts, images, audio, brand assets, and reference frames you upload, and the videos you generate.
• Billing data: purchase history, credit ledger entries, and payment metadata handled by our payment processor (we do not store full card numbers).
• Security telemetry: hashed IP address, approximate location, device and browser fingerprint signals, and proxy/VPN indicators, used solely for fraud prevention.
• Usage data: log, analytics, and diagnostic information about how you interact with the Service.
• Communications: messages you send to support and related correspondence.

We use information to: provide, operate, and secure the Service; create and authenticate your Account; process payments and manage your credit balance; render and deliver your videos; provide customer support; prevent, detect, and investigate fraud and abuse; comply with legal obligations; enforce our Terms; and communicate with you about your Account and important changes.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws.

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Performance of a contract: to create your Account, deliver Generations, and process purchases.
• Legitimate interests: to secure the Service, prevent fraud, and improve our offering, balanced against your rights.
• Legal obligation: to meet accounting, tax, and compliance requirements.
• Consent: where required, for example certain communications; you may withdraw consent at any time.

To generate videos, your Inputs are processed by our serverless GPU compute provider and, when you enable prompt enhancement, by our AI text provider. These providers process data on our behalf under contractual safeguards and do not use your content to train their models except as permitted by their terms. AI Output is generated automatically and may be inaccurate; you remain responsible for reviewing it.

We use automated controls — including disposable-email filtering, device/network telemetry, and payment risk scoring — to protect the platform. These may automatically delay, hold, or decline a request that fails our checks. Where such processing produces a legal or similarly significant effect and the law grants you the right, you may request human review by contacting support@eactivenet.com.

We use strictly necessary cookies and similar technologies to authenticate sessions, remember preferences, secure the Service, and prevent fraud. Because these are essential to operating the Service, disabling them may prevent you from signing in or generating content. We do not use third-party advertising cookies.

We share data with vendors who help us operate the Service, including cloud hosting and database, serverless GPU compute, object storage, payment processing and fraud scoring, and email delivery. Each acts as our processor and may process data only as needed to perform its function under contractual confidentiality and security obligations.

We may also disclose information to comply with law, respond to lawful requests and legal process, enforce our Terms, protect the rights, property, and safety of users and the public, and in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

Generated videos and uploaded workspace materials are automatically and permanently deleted seven (7) days after creation, as described in our Data Retention Policy. Account, billing, credit-ledger, and fraud-prevention records are retained for as long as your Account is active and thereafter for the period required to meet accounting, security, dispute-resolution, and legal-compliance obligations, after which they are deleted or anonymized.

We use industry-standard safeguards including encryption in transit, encryption of stored secrets, hashed IP storage, scoped access controls, and session invalidation on account termination. No method of transmission or storage is perfectly secure, but we work to protect your information and maintain procedures to address suspected incidents.

Depending on your location, you may have rights to access, correct, port, or delete your personal data; to object to or restrict certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority. EEA/UK residents have rights under the GDPR/UK GDPR; California and other U.S. state residents have rights under applicable state privacy laws, including the right to know, delete, correct, and to non-discrimination for exercising those rights.

You can request deletion of your Account at any time, which scrubs your stored content and associated metadata. To exercise any right, contact support@eactivenet.com from your Account email. We will verify your identity and respond within the timeframe required by law. You may use an authorized agent where the law permits.

We may process and store information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards — such as Standard Contractual Clauses — for cross-border transfers of personal data.

The Service is not directed to individuals under 18, and we do not knowingly collect their personal information. If we learn we have collected such data, we will delete it. If you believe a minor has provided us information, contact support@eactivenet.com.

We may update this Policy from time to time and will note the effective date above; material changes will be communicated through the Service or by email. For privacy questions or to exercise your rights, contact support@eactivenet.com.