Privacy Policy

Last updated: February 2026

1. Information We Collect

We collect information you provide directly:

• Account information: Email address, workspace name, and password (stored as a bcrypt hash).
• Content: Text prompts, uploaded images, logos, and brand assets you submit for video generation.
• Payment information: Processed securely by Stripe. We do not store credit card numbers.

We automatically collect:

• Usage data: Pages visited, features used, video generation history.
• Device information: Browser type, IP address (for security and rate limiting).
• Session data: Authentication tokens for maintaining your login state.

2. How We Use Your Information

• To provide and improve the video generation service
• To manage your account and workspace
• To send transactional emails (account verification, password reset, concept notifications)
• To prevent abuse and enforce rate limits
• To respond to support requests

3. Third-Party Services

We use third-party services to provide the video generation functionality. Your data may be processed by these services for content generation, storage, and email delivery. We do not sell your data to third parties.

4. Data Retention

• Account data is retained while your account is active.
• Generated videos are stored for 90 days after creation, then automatically deleted.
• You can request deletion of your account and all associated data at any time.

5. Data Security

We protect your data using:

• Passwords hashed with bcrypt
• HTTPS encryption for all connections
• Multi-tenant isolation (your data is inaccessible to other users)
• Session tokens with automatic expiration
• Rate limiting on authentication endpoints

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your generated content

7. Cookies

We use a single httpOnly session cookie for authentication. We do not use tracking cookies or third-party analytics cookies.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the Service.

10. Contact

For privacy-related questions, contact us at support@espergrid.com.