Privacy Policy

We collect only what we need to run the Service:

• Account data: your email address, your sign-in method (email link, password or Google) and an internal account ID.
• What you create with: the ideas, scripts and prompts you type, the settings you choose (length, engine, language, voice, format), and any file you upload, such as product photos, a reference face, a logo or brand details.
• What we create for you: the videos, images, narration audio, captions and thumbnails generated from your input.
• Billing data: your plan, credit balance and payment history. Card details are entered on Stripe and never reach our servers; we keep only the Stripe customer ID and payment status.
• Usage and device data: product events (pages visited, generations started, finished or failed), a one-way hash of your IP address, your browser user agent and approximate country, used for security, abuse prevention and fixing errors.
• Connected accounts: only if you choose to connect YouTube, we store the access tokens Google issues so we can upload the videos you pick and show their view counts.
• Messages to us: emails you send to support and our replies.

The Kineo plugin and connector only see the fields the assistant fills in when it calls a Kineo tool:

• Inputs: an idea or a script, the length, format (such as film), aspect ratio, engine, narration language, script mode and an optional title. Status tools receive only a job ID.
• Outputs: a Kineo link to review the script, or, if you signed in to your Kineo account through the connector, a job ID, the render status, the credits used and links to your finished videos. Fact tools return public information about Kineo, such as plans and engines.
• Account access: signing in through the connector lets the assistant read your credit balance and recent videos and start a video that spends your credits. You can revoke this access at any time in the assistant's connector settings.
• What we never receive: your chat history, assistant memory, other files or anything outside those fields.

We use your data only for these purposes:

• To sign you in and keep your account secure.
• To write, render and deliver the videos, images and audio you ask for, and to keep them in your library.
• To charge your plan, apply credits and send receipts.
• To send service emails, such as account confirmation and “your video is ready”, and, if you have not opted out, occasional product news. Every marketing email has an unsubscribe link.
• To prevent abuse and fraud, enforce limits and fix errors.
• To measure and improve the product with aggregated usage numbers.

We don't sell your personal data, and we don't use your content to train our own AI models.

We share data only with the providers that run the Service, and only what each one needs:

• Supabase (database, sign-in, file storage) and Vercel (hosting): all account data and media.
• Stripe: billing and payment data.
• Resend: your email address and the content of service emails.
• OpenAI: your idea or script, to write and check scripts, plan scenes, create narration and transcribe captions.
• fal.ai and the AI models it hosts (such as Seedance, Kling, Veo, MiniMax and FLUX): scene descriptions, narration text and any photos you upload for that video, to generate images, video clips, voice and music.
• ElevenLabs: narration text, when that voice is used.
• Creatomate: the clips, audio and captions, to assemble the final video.
• Pixabay and Pexels: only short search terms, to find stock footage. No personal data.
• Google (YouTube): the video and title you choose to publish, only if you connect YouTube.
• Advertising, analytics and affiliate tools (Google Ads, TikTok, Microsoft Clarity, Rewardful): as described under “Cookies and tracking” below.

We may also disclose data when the law requires it or to protect users and the Service. Most of these providers are in the United States, so your data may be processed outside your country under their standard data-protection terms.

• Account data, creations and media: while your account exists. When you delete an item in the app, or ask us to delete an item or close your account, we remove it from our systems within 30 days, including backups.
• Scripts sent from AI assistants: as described above, until deleted on request.
• Usage events: while your account exists, then deleted or kept only in anonymized, aggregated form.
• YouTube tokens: until you disconnect YouTube or close your account.
• Payment records: as long as tax and accounting law requires.
• Support emails: up to 3 years, to handle follow-ups.

You stay in control of your data:

• Delete your saved characters, brands, logos and uploaded footage in the app at any time, and ask us to delete any video, image or audio we generated for you.
• Disconnect YouTube from your account settings, or revoke Kineo in your Google account.
• Revoke the ChatGPT plugin or Claude connector in that assistant's settings.
• Turn marketing cookies on or off with “Your privacy choices”, and unsubscribe from product emails with one click.
• Ask for a copy of your data, a correction, or the deletion of your account and everything we store about you. Under the LGPD, the GDPR and US state privacy laws you may also object to or restrict some processing.

Email support@usekineo.com from your account address and we will answer within 30 days. You can also complain to your local data-protection authority.

We group the cookies and tags on usekineo.com in three kinds:

• Essential (always on): your sign-in session (Supabase), checkout and payment (Stripe), your interface language and appearance, the record of your cookie choice, and Vercel Analytics, which counts page views without cookies.
• Marketing and analytics (only with your permission where the law requires it): Google Ads (conversion measurement), Microsoft Advertising (conversion measurement, only while we run Bing ads), TikTok Pixel (ad measurement) and Microsoft Clarity (session recordings and heatmaps; never on sign-in, password or billing pages, and email and password fields are masked).
• Affiliate: Rewardful and our own partner links. They set a referral cookie only when you arrive through a partner's link, so the partner gets credit if you subscribe. Visitors who did not come from a partner link get no Rewardful cookie and send no Rewardful request.

In the European Economic Area, the United Kingdom, Switzerland and Brazil, the marketing and analytics tags stay off until you click “Accept” on the banner. Everywhere else they load by default, and you can turn them off. We honor the Global Privacy Control signal: if your browser sends it, these tags do not load. We keep your choice in a first-party cookie for 12 months.

To accept or refuse at any time, use Your privacy choices (also in the footer of every page). You can also clear cookies in your browser, or email support@usekineo.com.