1. Information We Collect

We collect information you provide directly to us when you create an account, such as your name, email address, and authentication credentials (handled securely via Clerk). We also collect the content you input into the Service, specifically your project titles, scripts, and visual instructions.

2. Third-Party API Keys

If you are an "Unleashed" tier user utilizing the Bring Your Own Keys (BYOK) feature, we securely store your API keys (e.g., ElevenLabs, Google Gemini) in our database. We only use these keys to authenticate requests made on your behalf to these specific third-party services. We never use your personal keys for system-wide operations or other users.

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve the AssetFlow platform. Most notably, the textual scripts you enter are transmitted to third-party Large Language Model providers (like Google Gemini) to generate scene segments and search metadata.

We do not use your scripts or generated projects to train our own AI models. We rely on commercial API agreements with providers like Google, who generally restrict using API data to train their foundation models, but we advise you to review their specific privacy policies as well.

4. Data Storage and Security

Your data, including scripts and project structures, is stored using Convex, our backend database provider. We implement reasonable security measures to protect your information from unauthorized access or disclosure. However, no internet transmission or electronic storage method is 100% secure.

5. Third-Party Services

Our Service acts as a conduit to various third-party services:

Authentication: We use Clerk.
AI Processing: We use Google Gemini for text analysis.
Voiceover Generation: We use ElevenLabs.
Media Scouting: We query Pexels and Pixabay APIs.
Analytics: We use PostHog to understand user behavior and improve the studio experience.

When you use AssetFlow, some of your data (like your script text or specific search queries) is sent to these services. Their use of this data is governed by their respective privacy policies.

6. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information, primarily for authentication and keeping you logged in securely.

7. Data Retention and Deletion

We retain your account information and project data for as long as your account is active. You may request the deletion of your account and all associated project data by contacting us. Upon request, we will permanently delete your database records.

8. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].