Privacy Policy

This page explains what Aqiv collects when you use Aqiv, why, and what you can ask us to do with it. We keep it short on purpose.

1. What we collect

• Your email address, used to sign you in with a magic link and to contact you about your account and billing.
• Your product answers: what you type into the website and marketing builders (product name, details, who you're selling to, who the video is for, and so on). They are saved in your own browser so they are there when you come back, and they are sent to our server and our AI provider when you generate.
• Generation logs: one record per generation with the time, the kind of generation, the viral video idea involved, token counts, the cost to us, whether it succeeded, your account id if signed in and an anonymous session id otherwise. We need this to charge credits, limit abuse and understand what the service costs to run.
• Credits ledger: credits added and spent on your account, so your balance is correct.
• Technical data such as your IP address and browser type, kept briefly in server logs for security and rate limiting.

2. Cookies

• pl_sid: a random session id stored in an httpOnly cookie. It lets us apply fair-use limits and link your generations to one session. It does not identify you by name.
• Sign-in cookies set by Supabase Auth keep you signed in after you click a magic link.
• Your light/dark theme choice and your builder answers live in your browser's local storage, not on our servers.

We do not use advertising cookies.

3. Payments

Payments are handled by Stripe. Your card number goes to Stripe, never to us; we receive a confirmation of the payment, your plan and the last four digits of the card so we can show them to you. Stripe's own privacy policy applies to the data it holds.

4. Analytics

[Placeholder: if we add a privacy-friendly analytics tool, we will name it here and say what it collects. At the moment we only use our own generation logs.]

5. Who else sees your data

• Our AI provider receives your product answers to write the prompts. We do not allow it to use your data to train its models.
• Supabase hosts our database and sign-in.
• Stripe handles payments.
• Email delivery providers send the magic-link and account emails.

We do not sell your data and we do not share it with advertisers.

6. How we use anonymised data

We may combine usage data from all accounts into totals that no longer identify anyone (for example, which viral video ideas are opened most, or the average cost of a generation) to run and improve the service.

7. How long we keep it

• Account data (email, credits ledger): while your account exists and for up to 90 days after it closes, then deleted.
• Generation logs: up to 24 months, then deleted or fully anonymised. Payment records: as long as tax and accounting law requires.
• Server logs with IP addresses: up to 30 days.
• Builder answers stored in your browser: until you clear them or your browser does.

8. Your rights

Depending on where you live you may have the right to see the data we hold about you, correct it, receive a copy, have it deleted, or object to how we use it. To use any of these rights, email us from the address on your account. We answer within 30 days. If you are in the EU or UK you can also complain to your local data protection authority.

9. Security

Data is encrypted in transit, the database is only reachable with keys that are never sent to the browser, and only approved content is readable by members. No system is perfectly secure, so please tell us if you spot a problem.

10. Changes

If we change this policy in a way that matters, we email you before the change takes effect.

11. Contact

Privacy questions, access or deletion requests: hello@example.com. Operated by Aqiv.