Privacy Policy

• Account data: your email address, display name, avatar, and sign-in provider identifier.
• Billing data: subscription status, plan, renewal date, and a payment processor customer reference. Card numbers are handled by our payment processor and never reach our servers.
• Prompts: the full text of every prompt you submit, including prompts that were blocked.
• Generated media: the videos and thumbnails produced from your prompts, plus their generation settings.
• Moderation records: the verdict, category, reason, and timestamp for each screening decision, linked to your account.
• Usage and technical data: credit transactions, render history, IP address, browser and device information, and error logs.

We do not ask for, and you should not submit, photographs of identifiable people, biometric data, health data, or other special-category personal data.

• To provide the service: generating, storing, and delivering your videos (performance of a contract).
• To bill you and prevent payment fraud (performance of a contract; legitimate interests).
• To moderate content and enforce our policies (legitimate interests; compliance with legal obligations).
• To respond to takedown notices, legal process, and safety reports (legal obligation).
• To debug, secure, and improve the service (legitimate interests).

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use your prompts or generated videos to train our own generative models.

• Model providers: your prompt and generation settings are sent to the third-party model that renders your video.
• Cloud infrastructure and storage providers that host the application and your media.
• Our payment processor, which handles checkout, subscriptions, and cancellations.
• Classification services used in the moderation pipeline.
• Law enforcement or regulators where we are legally required to disclose, and NCMEC where a report concerns child sexual abuse material.

Current sub-processors

• Runway AI, Inc. (United States) — text-to-video rendering. Receives your prompt and generation settings.
• Supabase, Inc. (United States / EU) — database, authentication, and encrypted media storage.
• Cloudflare, Inc. (global) — application hosting, edge delivery, and DDoS protection.
• Stripe, Inc. (United States) — payments, subscriptions, and invoicing. Card details go directly to Stripe; we never see them.
• Google LLC, via the Lovable AI Gateway (United States) — automated prompt and output-frame classification for moderation.
• Resend, Inc. (United States) — transactional and account email delivery.

We update this list when a provider changes. Material changes are announced on this page before they take effect, and you may object by writing to privacy-flowpixelai@my.com.

• Generated videos and thumbnails: retained while your account is active, and deleted within 30 days of account deletion.
• Prompts: retained for 12 months for abuse prevention and dispute resolution, then deleted or de-identified.
• Moderation records for blocked or rejected content: retained for 24 months for legal defence and audit purposes, and longer where required by law.
• Billing records: retained for the period required by tax and accounting law, typically 7 years.
• Server and error logs: retained for 90 days.

Our providers may process data outside your country, including in the United States. Where that involves transferring personal data out of the EEA or UK we rely on the European Commission's Standard Contractual Clauses and the UK Addendum, together with supplementary safeguards.

Depending on where you live you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to receive it in portable form, and to withdraw consent. California residents may also request disclosure of the categories of information collected and may opt out of any sale or sharing — we do neither.

You can delete your account and all associated generated media at any time from your account page. For any other request, write to privacy-flowpixelai@my.com. We respond within 30 days. You may also complain to your local data protection authority.

Strictly necessary cookies and local storage keep you signed in, secure form submissions, and carry your checkout session. These are required for the service to function and cannot be switched off.

Optional analytics cookies, which tell us which features get used, only run if you choose “Accept all” in the cookie banner. Choosing “Reject optional” keeps them off, and your choice is stored locally on your device. We do not run advertising or cross-site tracking cookies at all. You can change your decision at any time:

Data is encrypted in transit and at rest, access to production data is restricted to the people who need it, and moderation records are append-only. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as required by law.

The service is 18+ and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has an account, contact privacy-flowpixelai@my.com and we will remove it.

FlowPixel AI
6339 Charlotte Pike, Nashville, TN 37209, USA
privacy-flowpixelai@my.com

See also our Terms of Service and AI content labeling notice.