Privacy Policy

1 Overview

Kreads ("we", "us", or "our") operates the kreads.app platform, an AI-powered video ad generator. This Privacy Policy explains what personal data we collect when you use our service, how we use it, who we share it with, and what rights you have over your data. By using Kreads you agree to the practices described in this policy.

2 Data We Collect

• Account data: When you sign up we collect your email address and, if you use Google OAuth, your name and Google profile picture. We store a hashed version of your password if you register with email and password.
• Brand and project data: URLs you submit for brand analysis, brand profiles generated by our AI, scene descriptions, uploaded images and video assets, voiceover scripts, and final rendered MP4 files.
• Payment data: Subscription and billing information is processed by Stripe. We do not store full card numbers. We receive and store your Stripe customer ID, subscription status, plan name, and credit balance.
• Usage and analytics data: We collect anonymous usage events (page views, feature interactions, error occurrences) via PostHog to understand how the product is used and improve it. These events do not contain the content of your ads or brand data.
• Technical data: IP address, browser type, device information, and log data generated by your interactions with our servers. This data is used solely for security, debugging, and infrastructure monitoring.

3 How We Use Your Data

• Service delivery: To create your account, process brand analyses, generate scenes and video clips, and render final ads.
• Billing: To manage your subscription, track credit consumption, and process payments via Stripe.
• Communications: To send transactional emails (account confirmation, password reset). We do not send marketing emails unless you explicitly opt in.
• Product improvement: Aggregated, anonymised usage data helps us identify friction points and prioritise features. We never use your brand content or ad data to train AI models.
• Security: To detect and prevent fraud, abuse, and unauthorised access to accounts.

4 Third-Party Services

We use the following third-party processors to deliver our service. Each processor handles your data only as necessary to perform the specific function described.

5 Data Retention

We retain your account data and project assets for as long as your account is active. If you delete your account we will permanently delete all associated data within 30 days, except where we are required to retain certain records for legal or tax compliance purposes (typically up to 7 years for billing records). Rendered video files in Supabase Storage are retained until you explicitly delete them or your account is closed.

6 Your Rights

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can correct inaccurate data from your account settings.
• Erasure: You can request deletion of your account and all associated data.
• Portability: You can export your brand profiles and project data in JSON format from the dashboard.
• Objection: You can opt out of analytics tracking by enabling Do Not Track in your browser or by contacting us.

7 Cookies & Local Storage

Kreads uses browser localStorage (not cookies) to store your authentication session. We do not use advertising cookies or cross-site tracking cookies. PostHog may set a first-party analytics cookie to distinguish unique visitors; this cookie contains no personally identifiable information. You can clear it at any time through your browser settings.

8 Security

All data is encrypted in transit via TLS 1.2+. Data at rest is encrypted by our hosting providers. Access to production databases is restricted to authorised personnel and protected by row-level security policies. We conduct periodic security reviews and respond promptly to vulnerability reports. Despite our efforts, no system is completely secure; use a strong, unique password for your Kreads account.

9 Children's Privacy

Kreads is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10 Changes to This Policy

We may update this policy as our service evolves. When we make material changes we will notify you via email or a prominent notice on the platform at least 14 days before the changes take effect. Continued use of Kreads after the effective date constitutes acceptance of the revised policy.

11 Contact

For any privacy-related questions or to exercise your rights, contact us at lorenzofenderico.dev@gmail.com. We aim to respond to all requests within 30 days.