Privacy Policy
At Kinogaze ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we process and store it, the third-party subprocessors we engage, how we handle sensitive biometric-like voice data, and your rights regarding your personal information.
1. Information We Collect
We collect only the information necessary to provide and operate the Kinogaze video generation service:
- Account Information: Your email address and unique account identifier created upon registration or login.
- Payment Data: All payments are processed directly by our third-party payment processor, Stripe. We never receive, store, or have access to your full credit or debit card numbers. We only store Stripe transaction identifiers, subscription status, and Stripe payment card fingerprints (used strictly for fraud prevention and enforcing the one-trial-per-card limit on our $5 Single Project).
- User Inputs & Scripts: Topics, prompts, custom scripts, and factual source notes that you provide to generate videos.
- Generated Media: Rendered MP4 video files, preview frames, and subtitle caption files (.srt) produced by the pipeline.
- Voice Recordings: Audio samples recorded directly in your browser or uploaded to create a personalized voice clone.
- Usage & Telemetry Data: Browser user-agent, operating system, timestamped feature interactions, render error logs, and aggregate performance telemetry collected through PostHog.
2. Third-Party Subprocessors & Service Providers
To run our cloud video production pipeline, we partner with specialized, industry-leading infrastructure and service providers:
| Subprocessor | Role & Processing Activity | Data Processed |
|---|---|---|
| Supabase | Database, user authentication, and Postgres-backed asynchronous job queue | Account email, user ID, job status, encrypted tokens |
| Cloudflare R2 | Secure, zero-egress cloud object storage | Rendered MP4 videos, previews, captions, and stored voice audio samples |
| Vercel | Web application hosting, serverless functions, and static content delivery | Web requests, IP address, frontend logs |
| Stripe | Payment processing, recurring subscription billing, and fraud prevention | Billing address, card token, card fingerprint (raw card data stored solely by Stripe) |
| PostHog | Product usage analytics and diagnostic telemetry | Pseudonymized usage events, browser type, interaction telemetry |
| Resend | Transactional email delivery | Email address, job completion/failure notifications, login links |
| DeepSeek | LLM inference for script writing, visual research planning, and QA checks | Prompts, topics, and script text (no personal audio or payment data) |
| ElevenLabs | Third-party voice synthesis and instant voice clone generation | Script narration text and temporary voice sample for rendering |
| Self-hosted CosyVoice (Fun-CosyVoice3-0.5B) | Open-source neural voice synthesis on rented dedicated GPU compute | Script narration text and temporary audio sample during rendering |
| Microsoft Edge TTS (edge-tts) | Standard stock narration voices | Public narration text only (no personal user data) |
3. Voice Recordings as Biometric-Like Personal Data
When you use Kinogaze's voice cloning feature, the following strict safeguards apply:
- We Control the Storage: Your consented voice sample is stored directly in our own encrypted Cloudflare R2 cloud storage. It is never permanently stored exclusively inside a third-party vendor's platform. This guarantees we maintain complete custody and control over your audio data.
- Strict Purpose Limitation: Your voice sample is used solely to synthesize narration for videos created by you within your Kinogaze account. We never use your voice for any other purpose or account.
- Ephemeral Vendor Clones: When you generate a film using your cloned voice, our pipeline temporarily provisions an instant clone at the speech synthesis engine (such as ElevenLabs or our self-hosted CosyVoice instance) for that specific render job. As soon as the film rendering finishes, that temporary vendor clone is immediately and systematically deleted. We do not leave permanent voice clone profiles sitting inside external vendors.
- No Sale & No Foundation Training: We will never sell, lease, or monetize your voice recordings or voice clone profiles. We do not use your voice samples to train, pre-train, or fine-tune general public foundation AI models.
- Withdrawal & Deletion Anytime: You maintain absolute ownership and control. You can delete your voice profile at any time directly from your account dashboard. Deleting a profile immediately and permanently purges your audio sample from our Cloudflare R2 storage and terminates any associated active vendor sessions.
4. Data Retention Periods
- Rendered Videos & Media: Completed MP4 video files, preview frames, and caption files are retained in Cloudflare R2 for 30 days (Creator plan) or 90 days (Pro and Studio plans). After this retention period, files are permanently deleted by automated lifecycle rules.
- Voice Samples: Stored securely until you delete your voice profile from your account or request account deletion.
- Account & Billing Records: Stored for as long as your account remains active. If you request account closure, we delete your personal data within thirty (30) days, retaining only records required by statutory tax, accounting, and anti-fraud regulations.
- Operational Logs: Job execution logs and failure telemetry are retained for system diagnostics and capacity planning for up to ninety (90) days, then rotated and deleted.
5. User Rights (GDPR, CCPA/CPRA & Global Privacy)
Depending on your location, you possess statutory privacy rights under regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). These include:
- Right to Access & Portability: You may request a copy of the personal information we hold about you, delivered in a structured, portable electronic format.
- Right to Rectification: You may correct or update inaccurate personal data in your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your account, media files, and voice profiles.
- Right to Withdraw Consent: You may withdraw your consent for voice processing at any time by deleting your voice sample or contacting us.
- Right to Non-Discrimination: We will never discriminate against you, alter your pricing, or degrade your service level for exercising your statutory privacy rights.
- No Sale or Sharing: Kinogaze does not sell your personal data or share it with third parties for cross-context behavioral advertising.
To exercise any of these rights, please contact us at https://x.com/leontang___. We respond to all verified requests within thirty (30) days.
6. Cookies & Tracking Technologies
We use only essential session cookies and privacy-friendly analytics:
- Essential Cookies: Used to maintain your authentication state and secure your session.
- First-Party Analytics: We use PostHog to analyze platform performance, page load times, and error rates. PostHog does not track you across unrelated third-party websites.
- No Advertising Trackers: We do not use third-party advertising cookies, retargeting pixels, or data-broker trackers.
7. Children's Privacy
Kinogaze is strictly intended for adult creators, professionals, and businesses and is not for under 13/16. We do not knowingly solicit, collect, or process personal data or voice recordings from children under 13 (or under 16 where applicable under local European Union law). If we become aware that personal data of a minor has been collected without parental consent, we will take immediate steps to delete that information.
8. International Data Transfers
Kinogaze operates globally. Your personal information, scripts, and audio recordings may be transferred to and processed on cloud servers located in the United States or other countries where our subprocessors operate. We ensure that international data transfers are protected by standard contractual clauses (SCCs) and robust technical safeguards compliant with international data protection frameworks.
9. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to our privacy team:
Company: Kinogaze
Support & Contact: https://x.com/leontang___