Privacy Policy

VideoVenture Software Inc. operates VideoVenture from Alberta, Canada. This policy covers our website, Studio, review pages and supported MCP connections. Our Privacy Officer handles questions and requests at the contact details below.

Account and billing: Your name, email, profile image, account settings and sign-in records. Password sign-in stores a hash, not your plaintext password. Google sign-in provides account information such as your name, email and profile image. Stripe processes payments; we store customer and subscription identifiers, plan status, credit transactions and records needed to reconcile payments. We do not store your full payment-card number.

Projects and media: Prompts, conversations, assistant responses, tool activity, compositions, versions, uploads, generated media, brand profiles and character profiles. Voice features can process recordings, transcripts and reusable voice profiles. These materials may contain personal information about you or people you depict.

Collaboration: Workspace membership, roles, invitations, team messages, reviewer names, comments and timestamps. We also keep connection permissions, selected account details and usage records for assistants you authorize through MCP.

Websites you ask us to read: URLs and the business information, text, logos and colours retrieved to carry out your request. An assistant can save the resulting brand information when instructed.

Technical and support information: IP addresses, browser and device information, session records, request timestamps, errors, usage events and messages you send to support. These help us operate accounts, measure use, investigate failures and prevent abuse. A sign-in session expires after seven days without use.

We use this information to authenticate users, create and revise videos, store projects, provide collaboration and review tools, fulfil assistant requests, bill for usage, answer support questions and protect the Service. We use operational records and usage statistics to diagnose problems and improve the product.

Automated screening: Images and video you upload are checked by an automated moderation service for sexually explicit material before the Service uses them. An upload that fails the check is rejected and deleted. This protects the Service and other people; it is not used to identify you or the people in your media, and it does not build a profile of you.

We send account, billing, security and service messages as needed. Promotional email requires your consent or another lawful basis under applicable anti-spam rules and includes an unsubscribe method. You may also ask support to stop promotional messages. Necessary account messages are separate from marketing.

We do not sell your personal information. We do not use your private uploads or conversations to train our own general-purpose AI models. Creating a voice or character profile at your request is part of providing that feature. The provider processing described below still applies.

We seek consent where required and limit use to the purposes described here or separately explained to you. You can withdraw consent, subject to legal or contractual restrictions. We will explain if that means we cannot provide a requested feature. Uploading another person's information requires appropriate authority and consent, especially for voice cloning or the use of their likeness.

Personal projects are not automatically published. Workspace projects, team messages and shared brands are available to authorized members according to their roles. Owners control membership and can revoke access. Leaving a workspace does not necessarily remove contributions that belong to that organization.

An enabled share or review link lets anyone holding it view the material available through that link without signing in. Reviewer names, comments and timestamps may be visible to other people using the review link and the project team. The private team channel is not shown on that review page.

Finished exports use private storage and temporary signed playback links issued after an account, workspace or enabled-share access check. Disabling sharing stops new links; links already issued can remain usable until they expire, currently up to four hours. We cannot recall downloaded copies.

Uploaded files and generated source assets, such as images and audio, can be served from unlisted public URLs. Those URLs are not an account-level access control: anyone who obtains the address may retrieve the asset. Do not treat source-asset links as confidential storage or assume that disabling a video review link revokes them.

We use access controls, encrypted web connections and provider security measures to protect information. Authorized personnel may access records when needed for support, operations or abuse investigations. No storage or transmission system is risk-free. We assess suspected breaches and notify regulators and affected people when required by applicable law.

We send information to providers as needed to carry out your requests and operate the Service. The provider depends on the feature and model used. Our integrations include:

• Cloudflare for delivery, security and media storage; Hostinger for application hosting; PlanetScale for database hosting and its backups; and Amazon Web Services for video rendering and the automated screening of uploads described above.
• OpenRouter and the model providers it routes to for planning, conversation, composition and media analysis.
• fal and the model services used through it for image, video, voice, music and sound generation.
• Deepgram, which transcribes generated narration to produce the word timings that captions and edits are synchronized to.
• Pexels for stock searches, which receive the relevant search terms.
• Stripe for payments, Google when you choose Google sign-in, and Resend for transactional email delivery.
• Google Fonts, which serves typefaces used inside Studio previews and receives your IP address and browser details when they load.
• Twilio, which carries calls and voicemail to our business phone line. If you call it, Twilio handles your phone number and any message you leave.

Our support desk and analytics software run on our own server rather than with an outside helpdesk or analytics vendor, so support conversations and page statistics stay with us.

Model requests can include your prompts, relevant conversation history, project details and media or URLs needed to process it. Our OpenRouter requests exclude endpoints that permit data collection for training. This is not a promise of zero retention across every provider: retention for processing, security and legal obligations depends on the provider, model and applicable service agreement. Ask our Privacy Officer about the providers for a particular workflow before submitting sensitive data.

When you connect an external assistant through MCP, it can request project information, media and outputs within the permissions and account you authorize. The assistant provider handles the information it receives under its own terms and privacy policy. Disconnecting it prevents future authorized calls but does not delete copies it has already received or necessarily cancel work already running.

We may also disclose information when required by law, to respond to a valid legal request, or when reasonably necessary to address fraud, protect safety or establish or defend legal rights. That includes reporting apparent child sexual abuse material to the authorities and preserving the related records, as the law requires of us. A business transfer may involve personal information only under applicable legal safeguards and notice requirements.

VideoVenture is based in Canada, but its infrastructure includes database, application and rendering services in the United States. Information sent to our cloud, AI, payment and communication providers can be stored or processed outside Canada. Provider networks and support operations may involve additional countries; the Service does not offer a Canada-only storage or processing commitment.

Overseas providers process information for the purposes described above. Information in another country may be accessible to that country's courts, law enforcement or other authorities under its laws. We remain responsible for our obligations concerning information entrusted to our service providers.

To request our policies and practices about service providers outside Canada, including processing locations and the purpose of a transfer, contact our Privacy Officer at [email protected].

We keep account and project information to provide the Service and preserve work you can reopen. Retention also depends on billing and tax requirements, unresolved disputes, fraud prevention and backup systems. Information no longer needed for those purposes should be deleted or de-identified; an active account does not justify keeping unrelated information indefinitely.

Specific periods: A sign-in session expires after seven days without use. Application logs are capped in size, overwritten as they fill and discarded whenever a service is redeployed, which in practice means days to weeks; operating-system logs are kept for seven days. Voice and character profiles are kept until you delete them or your account is closed. Support conversations are kept for up to 24 months after the last message. Records of payments and credit transactions are kept for as long as tax and accounting law requires, generally six years after the end of the tax year in Canada; card details are held by Stripe, not by us. When we verify a request to delete an account we complete it within 30 days, and deletion from Settings takes effect immediately, apart from the backup copies and legally required records described here.

Deleting your account:You can delete your account yourself under Settings, General. It removes your videos, exports, uploads, characters, brands and sign-in details from our database and media storage, cancels any subscription and disconnects assistants. Videos you made inside someone else's team workspace stay with that team. What remains is an anonymous record with no name or email: your payment and credit history, the cost records tied to it, and the IP address the account was created from, which we keep to prevent abuse of free credits. If you own a team workspace, contact support and we will close the workspace and the account together.

You can also contact support to request account closure or deletion of personal information. We verify the request, identify the affected records and explain any required retention or practical limits. Deleting a project, revoking a link and closing an account are different actions. A deletion request may require removal from database records, media storage and relevant providers, not just hiding a project from view.

Backup copies may remain until the applicable backup expires or is securely removed. We cannot promise immediate erasure of every backup or of copies downloaded by collaborators, reviewers or external assistants. Contact us for the retention periods that apply to your request. Records retained for a legal obligation or dispute are limited to that purpose.

We use cookies and browser storage for sign-in, session security and preferences. You can block or delete them in your browser, but sign-in and other features may stop working.

When you first visit, a cookie remembers how you arrived: the page you landed on, the site that sent you (its name only, such as google.com) and any campaign tags in the link. If you create an account, we save that with it so we can tell which pages, articles and campaigns bring people to VideoVenture. We do not share it with advertisers or use it to follow you across other sites. If you do not sign up, it expires after 90 days.

We use self-hosted Umami analytics when enabled to measure page visits and events such as starting a project or completing an export. Event data can include the plan, feature or outcome involved. We do not use advertising tracking cookies in our application. Providers you visit separately, such as Google or Stripe, describe their own cookies and data handling in their policies.

You can ask our Privacy Officer what personal information we hold, how it has been used or disclosed, and request access or correction. You can also request deletion or withdraw consent, subject to applicable legal limits. Additional rights, such as portability, objection or restriction, may apply depending on where you live and the law that applies.

We may need to verify your identity without collecting more information than necessary. We respond within the period required by applicable law, generally 45 days for Alberta PIPA access requests and 30 days for access requests under PIPEDA, subject to permitted extensions. If we cannot fulfil a request, we will explain the reason and available complaint options as required by law.

Where an organization manages your workspace, we may need to work with it to address records it controls. That does not remove your statutory rights. You may complain to our Privacy Officer and to the appropriate regulator, including the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

The Service is for adults. You must be at least 18, or the age of majority where you live if that is higher, to create an account, and we do not knowingly collect personal information from anyone younger. If you believe a minor has created an account or submitted personal information, contact us so we can investigate and remove it.

We update this policy as our practices change and show the revision date above. We provide additional notice for material changes and seek fresh consent when required, including for new uses that need consent. Posting a revised policy does not by itself authorize an unrelated new use of information we already hold.

For privacy questions, access requests, corrections, deletion requests or complaints, contact the Privacy Officer at VideoVenture Software Inc.:

[email protected]

2410 10 Ave SW, Calgary, AB T3C 0K6, Canada