Privacy Policy

Velvet Media, Inc. ("Velvet," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video editing platform and services.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and password when you create an account
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Project Data: Videos, images, audio files, scripts, and other content you create
• User Communications: Messages sent through our customer support or feature request systems
• AI Assistant Interactions: Questions and requests made to Viola, our AI assistant

1.2 Information Automatically Collected

• Usage Data: Pages viewed and feature usage (without third-party advertising cookies)
• Device/Technical Data: Browser type, OS, and basic device info from your user agent

2. How We Use Your Information

• To provide and maintain our video editing services
• To process payments and manage subscriptions
• To communicate with you about your account and services
• To improve our platform and develop new features
• To provide customer support and respond to inquiries
• To detect and prevent fraud or abuse
• To comply with legal obligations
• To perform product analytics (self-managed configuration and/or EU-hosted options where applicable)

3. Data Storage and Security

We use industry-standard security measures to protect your information:

• All data is encrypted in transit using HTTPS/TLS
• Authentication tokens are stored in browser, local storage for session persistence; server tokens are not persisted
• Row-level security ensures only you can access your own data
• Regular security audits and updates

4. Third-Party Services

We integrate with trusted third-party services to provide our features:

• Stripe: Payment processing (PCI-compliant)
• Supabase: Database, authentication, and realtime updates with row-level security
• Vercel: Hosting and deployment
• PostHog: Product analytics and error tracking (no third-party ad tracking)
• AI Providers: Various AI services for content generation (OpenAI, ElevenLabs, Google Veo3, Runway, etc.)

Each third-party service has its own privacy policy. We only share the minimum necessary information required to provide the requested services.

5. Your Content

• You retain all rights to content you upload or create
• Your projects and files are private and only accessible to you
• You can delete your content at any time
• Content is automatically removed when you delete your account

6. Data Sharing

We do not sell, trade, or rent your personal information. We may share information only in these circumstances:

• With your explicit consent
• To comply with legal obligations or valid legal requests
• To protect our rights, property, or safety
• In connection with a merger, acquisition, or sale of assets (with notice to users)

7. Your Rights and Choices

You have the following rights regarding your information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Export your projects and content
• Opt-out: Unsubscribe from marketing communications

8. Cookies and Tracking

We use essential cookies and local storage for:

• Authentication and session management
• Remembering your preferences
• Saving editor UI state and history locally on your device

We do not use third-party advertising cookies or cross-site tracking. Analytics are limited to product usage within Velvet.

8.1 Analytics Preferences

You can opt out of analytics within the app settings where available. If you sign out, your analytics identifier is reset.

9. Children's Privacy

Our services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Until account deletion
• Project data: Until manually deleted or account closed. Local editor state stored in your browser can be cleared at any time.
• Payment records: As required by financial regulations

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (which we do not do).

15. European Privacy Rights

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.