Privacy Policy

We collect the following categories of information:

• Account information. Your email address and display name, and authentication metadata managed by our auth provider. We do not store your password in plaintext.
• Content you create. The scripts, prompts, project titles, style choices, character and scene descriptions, and other inputs you provide, together with the keyframes, animated clips, voice-over audio, and stitched videos generated from them.
• Usage & device data. Log data such as IP address, browser type, pages viewed, render and generation events, and timestamps, used to operate, secure, and improve the Service.
• Billing data. If you purchase a paid plan or credits, our payments processor (Stripe) collects and processes your payment details. We receive limited information such as the last four digits of your card, billing country, and subscription status; we do not store full card numbers.
• Connected accounts. If you connect a third-party distribution account (for example, to publish a finished film), we store the access tokens needed to act on your behalf until you disconnect.

We use the information we collect to:

• Provide, maintain, and operate the Service — including running the generation pipeline that produces your keyframes, motion, voice-over, and final film.
• Authenticate you, secure your account, and prevent fraud or abuse.
• Process payments, manage subscriptions, and meter credit usage.
• Communicate with you about your account, renders, security, and product updates.
• Monitor, debug, and improve the performance, reliability, and quality of the Service.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use the content of your private projects to train our own foundation models.

To deliver the Service we share the minimum data necessary with trusted third-party processors. Each processes data only on our instructions and under its own terms:

• Supabase — database, authentication, and file storage for your account, projects, and generated media.
• Higgsfield — AI image and image-to-video generation used to produce your keyframes and animated clips.
• ElevenLabs — AI text-to-speech used to generate the narrated voice-over for your film.
• Stripe — payment processing for plans and credit purchases.

Inputs you submit (such as a script or prompt) and outputs generated from them may be transmitted to these providers solely to render your requested result. We may add or change sub-processors as the Service evolves; material changes will be reflected on this page.

We retain your account information and content for as long as your account is active. Generated media and project data persist until you delete the relevant project or workspace, or close your account. After deletion we remove or de-identify the data within a commercially reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Backups may persist for a limited window before being overwritten.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update your display name and trigger a password reset from your account settings, and you may delete a workspace and its projects at any time. To exercise any other right, contact us at the address below. We will respond consistent with applicable law.

We use industry-standard administrative, technical, and organizational measures — including encryption in transit, scoped access controls, and row-level security on your data — to protect your information. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security.

We and our sub-processors may store and process your information in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Continued use of the Service after an update means you accept the revised policy.

Questions about this policy or your data? Email us at privacy@longflow.app.