Privacy Policy & Data Practices
This notice explains how Vid Boss AI handles information when you create an account, buy credits or a subscription, generate media, contact support, or otherwise use the service. It describes intended product practices and does not waive rights that cannot legally be waived.
Information we process
We may process account/profile information; authentication and security records; subscription, transaction and credit-ledger information; prompts, uploads and generated media; projects, drafts and characters; support messages, feedback and ratings; device, request, error, usage and security logs; and consent records. Payment card details are handled by Stripe rather than stored by Vid Boss AI where Stripe Checkout is used.
Purposes
We use information to provide and secure the service, authenticate users, prevent fraud and abuse, process payments and credits, generate requested media, save projects, provide support, send transactional notices, diagnose failures, enforce terms, comply with law, and maintain business and security records.
Service providers and disclosures
Information may be disclosed as needed to providers powering the product, including Supabase for authentication/database/storage, Stripe for payments, FAL for AI media generation, Resend for transactional email, and Google or Apple when you choose their sign-in services. Information may also be disclosed when required by law, to protect users or the service, investigate fraud/security incidents, or in a lawful business transfer.
Website analytics
We use Google Analytics 4 to understand how visitors find and use the website (for example which pages are viewed, the approximate region and the type of device). Analytics receives page addresses without their query strings, so prompts and checkout details in links are not sent, and advertising features, Google signals and ad personalization are turned off. Google Analytics sets first-party cookies to count visits. You can opt out with your browser's cookie settings or Google's opt-out add-on at tools.google.com/dlpage/gaoptout. Separately, the site counts anonymous clicks on templates, models and guides without cookies or identifiers, and skips visitors who send Global Privacy Control or Do Not Track.
Prompt tips sign-up and visit sources
If you enter your email in the optional “AI video ideas & prompt tips” form, we keep that email address, when you signed up, the page you signed up on, your consent to receive these emails, and the site or campaign that brought you to VidBoss AI. We use it only to send those emails, and every email has an unsubscribe link. To understand which websites and campaigns bring visitors and customers, VidBoss AI also stores where a visit came from (for example a search engine, a social network or a campaign tag) and the landing page in two first-party cookies for up to 90 days, and records it with page views and purchases. This contains no name, email, prompt or device fingerprint, and it isn't set when your browser sends Do Not Track or Global Privacy Control.
Free demo and marketing emails
If you create an account or sign in on the free demo page, we keep your email address, your account ID, when you signed up, the prompt you type, the free video made for you, your IP address at the time, and whether you chose to receive marketing emails. To make the free video, the prompt you type is sent to our AI video provider (fal.ai). We use this to run the demo, prevent abuse and understand who is trying VidBoss AI. Your password is handled by our authentication provider (Supabase) and is never stored by us in readable form. Marketing emails (product news, new AI models, new templates and offers) are only sent if you tick the separate, optional box; signing up for the demo alone never subscribes you. You can change this choice at any time in Settings or by using the unsubscribe link in any marketing email. Deleting your account deletes this demo record.
AI media and uploads
Prompts and media submitted for generation may be transmitted to the AI generation provider to perform the request. Do not upload confidential, illegal, infringing, or highly sensitive material unless you have the right and authority to do so. Users are responsible for rights and permissions in submitted content.
Retention and deletion
Information is retained only as reasonably necessary for account operation, fraud prevention, dispute resolution, legal obligations, security, backups, and transaction records. Different categories may have different retention periods. A deletion request does not require deletion of records that must or may lawfully be retained.
Your choices and privacy rights
Depending on applicable law, users may have rights to request access, correction, deletion, portability, or information about certain disclosures or processing. Submit requests through Customer Service while signed in. Identity verification may be required. Where applicable, appeal a denied request through Customer Service and state that you are appealing the privacy decision.
Security
Vid Boss AI uses safeguards intended to reduce risk, including server-side authorization, HttpOnly authentication cookies where applicable, access controls, payment-provider separation, and restricted server secrets. No internet service can guarantee absolute security. Suspected compromises should be reported promptly through Customer Service.
Children
The service is not intended for children under 13. Do not knowingly submit a child’s personal information without legally required authorization. Additional age restrictions may apply to paid or AI services.
International processing
Service providers may process information in the United States and other locations where they operate, subject to their legal and contractual obligations.
Changes
This notice may be updated as the service or law changes. Material changes should be reflected by an updated effective date and, when legally required, additional notice or consent.
Contact
For privacy, security, account, or legal requests, use the Customer Service page in Vid Boss AI. Before public launch, add the operating company’s exact legal name, mailing address, and dedicated privacy contact if required by applicable law.
Launch note: Have qualified counsel review this policy, Terms of Service, refund/subscription disclosures, intellectual-property rules, and your actual vendor/data practices before launch. A policy cannot eliminate legal liability and should never promise practices the business does not actually follow.
