Privacy Policy

Erosia Love Labs LLC operates gVideo AI at gvideo.ai. This Privacy Policy explains how we collect, use, and protect your personal information when you use the Service. Contact us at support@gvideo.ai with any questions.

Account information: When you register, we collect your email address and password hash (via Supabase Auth). If you sign in with Google OAuth, we receive your email and name from Google.

Usage data: We log prompts you submit, models selected, generation status, credits consumed, and timestamps. This is required to operate the credit system and maintain your generation history.

Payment data: Subscription and payment processing is handled by Stripe. We do not store credit card numbers. We receive billing metadata such as plan name, status, and renewal dates.

Technical data: We may collect browser type, IP address, and basic usage analytics to improve the Service and ensure security.

Abuse-prevention signals: When you sign up, we compute a salted SHA-256 hash of your IP address and a salted SHA-256 hash of a small device-characteristics fingerprint (combining browser type, screen resolution, timezone, language settings, and a canvas rendering hash). We never store your raw IP or any identifying device data — only the salted hashes, which are not reversible. These hashes are used solely to detect duplicate signups created to abuse the free-credit grant. They are retained for 12 months.

• To create and manage your account
• To process video generation requests and manage your credit balance
• To send transactional emails (account confirmation, low-credit alerts, billing receipts)
• To detect fraud, abuse, and security threats
• To improve the Service through aggregated, anonymized analytics
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your prompts or generated videos for advertising.

We work with the following sub-processors:

• Supabase — database, authentication, and file storage
• fal.ai — AI video generation processing; your prompts are transmitted to fal.ai to generate videos
• Stripe — payment processing and subscription management
• Cloudflare — hosting, CDN, and DDoS protection

Each sub-processor operates under their own privacy policy and data protection agreements.

Videos generated by the Service are stored in Supabase Storage. Public videos (where you opt in to "Share to Gallery") are accessible to other users. Private videos are accessible only to you and to Company personnel for debugging and support purposes.

fal.ai CDN URLs for generated videos expire. We re-upload your videos to our own storage to ensure permanent availability.

We retain your account data for as long as your account is active. Generation history and videos are retained indefinitely unless you delete them. If you delete your account, we delete your personal data within 30 days, except where retention is required by law or for fraud prevention.

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing
• Data portability (receive a copy of your data)
• Withdraw consent where processing is consent-based

To exercise these rights, email support@gvideo.ai. We will respond within 30 days.

We use session cookies for authentication (managed by Supabase Auth) and Google Analytics cookies (_ga, _ga_*) to measure aggregated, anonymized usage. We do not use third-party advertising cookies or remarketing cookies. You can disable cookies in your browser, but this will prevent you from logging in.

We use Google Analytics 4 to understand how visitors discover and use gVideo (page views, conversion funnels, generation completion rates). Google Analytics processes IP addresses to derive coarse geo-location and aggregates user behavior into anonymous reports. We do not send personally identifying information (email, name) to Google Analytics.

Server-side events for billing actions (subscription purchases, renewals, video generation completion) are sent via Google's Measurement Protocol so revenue and conversion data remain accurate even with browser ad-blockers active. These events include the Stripe transaction ID, plan name, and credit amounts — never card data, billing address, or personal contact details.

To opt out: install the Google Analytics Opt-out Browser Add-on, or enable Do-Not-Track (DNT) in your browser. We respect both signals.

The Service is not directed to children under 18. We do not knowingly collect personal information from minors. If we learn that a minor has provided personal information, we will delete it promptly.

We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and row-level security on our database. However, no system is completely secure; use the Service at your own risk.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. The date at the top of this page indicates when it was last updated.

Erosia Love Labs LLC
support@gvideo.ai