Privacy Policy

AiMediaCraft is independently operated. For privacy questions or requests, contact [email protected].

We process the following categories of information: Account and Security Data: • email address, optional display name, password hash, account status, and your recorded acknowledgment of the Terms of Service and Privacy Policy version; • device UUID, device name, and device binding records; and • successful login, token refresh, and authenticated Desktop Client startup records, including server receipt time, IP address, client type, client version, operating-system platform, processor architecture, and associated device UUID where applicable. Task and Usage Data: • task titles, prompts, document paths or links, workflow settings, task status, step outputs, generated JSON or summaries, intermediate output paths or URLs, logs, usage records, and error information. Payment Data: • Stripe customer, subscription, Checkout Session, PaymentIntent, and price identifiers; payment method type; plan; billing interval; status; access dates; amount; currency; and refund status. • We do not receive or store full card numbers or payment-account credentials. Optional Portal Analytics: • when you consent to Google Analytics, page views, session and referral information, browser or device data, approximate location, and similar usage information. Local Desktop Data: • video files, audio, images, scripts, configuration files, and rendering files are normally stored on your device. Necessary task information and paths may still be sent to the backend as described above.

We use information to: • create and secure accounts, authenticate users, manage devices, and help investigate account-access issues; • coordinate tasks, recover progress, display status, meter usage, and troubleshoot failures; • understand which supported Desktop Client version and platform last connected for customer support and compatibility work; • administer plans, payments, subscriptions, and customer support; • send verification, password reset, transaction, and necessary service messages; • prevent abuse, fraud, and security incidents; and • understand Web Portal usage through Google Analytics only after consent. We do not sell personal data, use your task inputs to train AI models, run advertising tracking, or make automated decisions that produce legal or similarly significant effects.

The Desktop Client runs browser automation on your device using third-party accounts that you control. Content submitted through those sessions is sent directly from your device to the selected third-party provider and is governed by your agreement with that provider. To provide the Service, relevant information may also be processed by providers of cloud hosting and databases, content delivery and network security, storage and encrypted backups, payments, email delivery, and optional analytics after consent. These providers process information as needed to provide those services and under their own terms and privacy notices.

Account, task, authentication-event, and billing-related server data is primarily processed and stored in Hong Kong. Cloud delivery, security, encrypted backup, payment, email, analytics, and other service providers may process information in additional regions. If you use the Service from another country or region, your information may therefore be transferred across borders. Local mandatory data-protection rights remain applicable where required.

We use measures appropriate to this Service, including Argon2id password hashing, HTTPS in transit, access controls, restricted production access, and encrypted database backups. No internet service can guarantee absolute security. You are responsible for securing your device, email account, AiMediaCraft password, and third-party accounts.

Successful login, token refresh, and authenticated Desktop Client startup records are retained for 90 days, then deleted through routine rotation. Other account, task, usage, and subscription information is retained while needed to operate the Service, support your account, resolve disputes, prevent abuse, and meet payment or legal obligations. You may request account deletion by emailing [email protected] from your registered email address. After confirming the request, we will delete or anonymize data that is no longer required. Information may be retained where reasonably necessary for payments, security, fraud prevention, disputes, or legal obligations. Deleted information may remain in encrypted backups until those backups expire through their normal rotation. Stripe and other providers may retain transaction or service records under their own requirements. Files stored locally on your device remain under your control.

You may view account and task information available in the Portal, update your display name, request access, correction, or deletion by emailing [email protected], and manage optional analytics through the Portal's Cookie Settings. We may need to verify your identity before completing a request.

Essential browser storage is used for authentication, security, and language preferences. The Portal may store access and refresh tokens in localStorage and a language preference in localStorage and a cookie. Google Analytics is optional and is loaded only after you grant analytics consent. You may reject it or revisit your choice through Cookie Settings. We do not use advertising trackers.

The Desktop Client normally keeps completed videos and intermediate production files on your device. It sends a device UUID and necessary account, task, status, usage, and diagnostic information to our backend. After successful authentication, the Desktop Client sends one startup event for that running application process. This limited record is not a heartbeat and is not used to claim that a user remains online. We do not collect Desktop Client exit events, offline startup queues, content-interaction analytics, or crash reports. Browser automation sessions with third-party AI services occur locally on your device. AiMediaCraft does not receive your passwords for those third-party accounts.

We may update this Privacy Policy by publishing a new version and effective date. We may use reasonable additional notice when appropriate or required. This Privacy Policy is drafted in English. Translations are provided for convenience; the English version controls where legally permitted. Questions and privacy requests may be sent to [email protected].