Privacy Policy

1. What we collect

When you create an account we store your email address, name, industry, and optional job role in our database (hosted on Supabase).

When you upload a video for motion capture we temporarily store the video file on our GPU servers (hosted on Modal.com) for the duration of inference. The source video, overlay video, and extracted motion data are stored in cloud storage tied to your account.

When you generate an AI video we additionally store the character reference image you upload and the resulting generated video in cloud storage tied to your account.

When you purchase credits we store the transaction record returned by our payment processor (amount paid, pack purchased, receipt identifier). Card details are handled entirely by the payment processor and are never seen or stored by us.

2. How we use your data

• To authenticate you and manage your account.
• To process your videos and deliver motion capture results.
• To generate AI video using your character image together with your captured motion on our behalf.
• To process payments when you purchase credits and send you a receipt.
• To enforce usage quotas and prevent abuse.
• To send transactional emails (sign-in links, receipts, generation status).

We do not sell your data, use your videos to train AI models, or share personal information with third parties except as needed to operate the service:

• Supabase — database, authentication, and cloud storage.
• Modal.com — GPU compute for motion capture.
• Replicate — GPU compute for AI video generation. Reference images and captured motion are sent to Replicate for the duration of each generation only.
• Stripe — payment processing for credit purchases.
• Resend — transactional email delivery.

3. Data retention

Your account data is retained as long as your account exists. You can delete individual generations from the app. When you delete your account, all associated data (profile, generations, stored files) is permanently removed.

4. Security

All traffic is encrypted via TLS. Authentication uses Supabase magic-link tokens. API requests between the frontend and GPU backend are signed with HMAC, and webhook callbacks from our payment and AI video providers are signature-verified before they can affect your account. Row-level security policies restrict database access to each user's own data.

5. Cookies

We use essential cookies only — Supabase auth session cookies required for sign-in. No analytics or advertising cookies.

6. Contact

Questions about this policy? Email armen@videomo.ai.