Privacy Policy

We collect the following categories of information:

• Account information. Email address, password (stored as a salted hash by our auth provider), and, if you sign in via Google or Apple, the basic profile information those providers return (name, email, avatar URL).
• Profile information. Optional information you choose to add, including profile picture and display preferences.
• User content. The Flows, prompts, uploaded media, configuration, and generated outputs (videos, audio, captions, images) you create or store on the Service.
• Connected-account tokens. When you connect a third-party account (e.g., TikTok, YouTube, Instagram), we store the OAuth tokens needed to publish or schedule content on your behalf, plus minimal account metadata returned by that platform.
• Billing information. Subscription tier, credit balance, transaction history, and tax/region data necessary to charge you. Card details are collected and stored by our payment processor; we receive only a token, brand, and last four digits.
• Usage and device data. Log data such as IP address, browser type, device identifiers, pages and features used, generation and API request metadata, error reports, and approximate location derived from IP.
• Cookies and similar technologies. See Section 5 below.
• Communications. Messages you send to our support address, feedback, and any survey or interview responses.

We use personal information to:

• provide, operate, secure, maintain, and improve the Service;
• authenticate users, prevent abuse and fraud, and enforce our Terms of Service;
• execute the workflows you request, including transmitting prompts and assets to third-party AI providers and infrastructure necessary to fulfill them;
• process payments, manage subscriptions, and apply credit and billing logic;
• communicate with you about your account, transactions, security, and product updates;
• analyze aggregated usage to understand performance and prioritize improvements;
• comply with legal obligations and respond to lawful requests.

No model training on your content. We do not use your User Content or generated Outputs to train our own machine-learning models. Third-party providers may have their own policies; see Section 3.

We do not sell personal information. We share information only as described below:

• Service providers. We use vendors to operate core infrastructure, including:
  • authentication, database, and file-storage providers;
  • a payment processor;
  • AI model providers, to generate outputs from your prompts and assets;
  • application hosting and serverless rendering providers;
  • privacy-respecting analytics providers for aggregate usage data.
  These vendors may process your data only on our instructions, except where they act as independent controllers (such as our payment processor for payment compliance). Contact us at the address below for a current list of sub-processors.
• Connected platforms. When you authorize publishing or scheduling on a third-party platform (e.g., TikTok, YouTube, Instagram), we share the content and metadata required to perform that action.
• Legal and safety. We may disclose information when we have a good-faith belief that disclosure is required by law, necessary to protect rights, property, or safety, or to investigate fraud or security incidents.
• Corporate transactions. In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred subject to standard confidentiality protections.
• With your consent. For any other purpose disclosed at the point of collection.

When you generate content, your prompts and required assets are transmitted to third-party AI providers to produce the requested output. Each provider operates under its own terms and privacy policy. We select providers that, at the time of integration, represent that customer inputs are not used to train their public models by default; however, we cannot guarantee provider behavior over time. Do not submit confidential information you would not be comfortable transmitting to those providers.

We use a small number of cookies and similar technologies that are strictly necessary to keep you signed in, remember preferences, and secure the Service against abuse. We also use privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings, but disabling essential cookies may break sign-in.

We retain personal information for as long as your account is active and as needed to provide the Service. After account deletion, we delete or anonymize personal information within a reasonable period, except where retention is required for legal, accounting, fraud-prevention, or backup purposes (typically up to 90 days for active backups, longer for billing records as required by law).

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, password hashing, row-level access controls in our database, and bcrypt-hashed API key secrets. No system is perfectly secure; you use the Service at your own risk and should use a strong, unique password and protect your credentials.

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, port, or restrict processing of your data, and to object to certain uses. You may also withdraw consent where processing is based on consent.

• Account. You can update most account data, delete generated content, revoke API keys, and disconnect third-party accounts from your settings.
• Deletion. You can request deletion of your account and associated personal data by contacting [email protected]. Some data may be retained as described in Section 6.
• EEA / UK users (GDPR). You have the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are: performance of a contract (delivering the Service), legitimate interests (security, fraud prevention, product improvement), consent (where requested), and legal obligation.
• California users (CCPA/CPRA). You have the right to know what we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell personal information.
• Marketing. You can opt out of non-essential marketing email at any time using the unsubscribe link or by emailing [email protected].

To exercise any of these rights, contact [email protected]. We will respond within the timeframes required by applicable law and may need to verify your identity before fulfilling the request.

Maxiv LLC and our service providers operate primarily in the United States. If you access the Service from another country, you understand that your information will be transferred to, stored, and processed in the United States and other jurisdictions where our providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

The Service is not intended for, and we do not knowingly collect personal information from, anyone under 18. If you believe a minor has provided us with personal information, please contact [email protected] and we will take steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes we will provide notice (for example, by email or in-product notice) before they take effect. The "Effective" date at the top reflects the most recent version.

For privacy questions or to exercise your rights, contact us at [email protected].