Privacy Policy

1. Information we collect

• Account information.Your email address and password (stored by our authentication provider in hashed form), or — if you sign in with Google — your name, email address, and profile picture as shared by Google. We also ask everyone for their date of birth, to confirm the Service's 18+ requirement.
• Content you provide. Video ideas, titles, scripts, uploaded voiceover audio, uploaded images, style preferences, and YouTube channel URLs you submit for analysis.
• Generated content. Scripts, voiceovers, images, animated clips, thumbnails, and videos the Service creates for you, which we store so you can access them.
• Payment information. When you purchase a subscription or credits, payment is handled by our third-party payment processor; we do not collect or store your full card details — only a billing reference (such as a customer or subscription ID) needed to manage your purchase.
• Usage and technical data. Technical information such as IP address, browser and device type, operating system, pages viewed, features used, request timestamps, and error events, collected through standard server logs and used to operate, secure, debug, and improve the Service.
• Cookies. We use essential cookies to keep you signed in and to operate the Service. If you arrive through an affiliate link, we also set a referral cookie from our affiliate provider (Rewardful) so the referring affiliate can be credited for your sign-up. If you arrive from one of our ads, we set an advertising-measurement cookie from Google Ads so we can tell which ads led to sign-ups and purchases; it records that a conversion happened and its value, not what you do inside the Service. Visitors in the EU, the UK and Switzerland are excluded from that cookie by default, so it is never set for them. We never sell your data to ad networks, and we do not use cookies to build advertising profiles or to show you ads elsewhere.

2. How we use your information

• To provide the Service: generating, storing, and displaying your videos and related assets.
• To operate, maintain, secure, and improve the Service.
• To communicate with you about your account, including service and security notices.
• To send you product news, offers, and other marketing emails. You can opt out at any time using the unsubscribe link in those emails; we will still send essential account and service messages.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

3. AI processing of your content

NimbleVid creates content using third-party AI providers. When you generate scripts, voiceovers, images, animations, or videos, the relevant content you provided (for example, your idea, script text, or scene image) is sent to one or more of the following providers solely to produce your output: Anthropic, OpenAI, Google’s Gemini models, ElevenLabs, and fal.ai. Each provider processes this data under its own terms. Per their published policies, Anthropic, OpenAI, Google, and ElevenLabs do not use content submitted through our API tiers to train their models; fal.ai may use anonymized or aggregated data derived from submissions to improve its services, and does not receive your name or account details. NimbleVid does not use your content, prompts, or generated outputs to train, fine-tune, or improve any AI model of our own.

Voice cloning. If you use voice cloning, we ask for your specific written consent at the moment you upload a voice sample. The sample is stored privately so we can generate the voiceovers you request: for each render it is sent to ElevenLabs to create a temporary voice model, which is deleted as soon as the render completes. We keep your uploaded sample while your account is active and the saved voice exists — it is permanently deleted when you delete that voice or your account, and in any event within 3 years of your last interaction with the Service. A voice sample may constitute biometric information under some laws (for example, the Illinois Biometric Information Privacy Act). We use it solely to produce the voice you requested; we never sell it and never use it to train AI models. Do not upload a voice you do not own or have written permission to use.

4. YouTube API Services

The Service uses YouTube API Services to analyze publicly available YouTube data (such as channel videos, titles, thumbnails, and view statistics) when you submit a channel URL for style or title analysis. By using these features you also agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.

We only access public YouTube data through these features — we do not access your private YouTube account data, and we do not use data obtained from the YouTube API to train any AI or machine-learning model. We store the analysis results (for example, a style profile derived from a channel’s public videos) as part of your account content. If you have ever granted NimbleVid access to data via your Google account, you can revoke that access at any time via the Google security settings page.

5. Sign in with Google

If you sign in with Google, we receive your basic profile information (name, email address, profile picture) solely to create and operate your account. NimbleVid’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

6. Service providers

We share data with service providers only as needed to run the Service: Supabase (database, authentication, and file storage), Vercel (website hosting), Google Cloud (video assembly processing), n8n (workflow processing), Tavily (web search), Stripe (payment processing), Rewardful (affiliate-referral tracking and commission payouts), and the AI providers listed in Section 3. Payments are handled by Stripe; we do not store your full card details. We may also disclose information if required by law, or to protect the rights, safety, and security of NimbleVid, our users, or the public. If NimbleVid is involved in a merger, acquisition, financing, or sale of all or part of its assets, your information may be transferred as part of that transaction; the recipient will be bound by this policy or will notify you of any material change.

7. Data retention and deletion

We retain each category of information only as long as reasonably necessary for the purposes described in this policy:

• Account and billing records — for the life of your account, then up to 7 years as required for tax and accounting purposes.
• Your content and generated content — for the life of your account, or until you delete them.
• Uploaded voice samples — until you delete the saved voice or your account, and in any event no longer than 3 years after your last interaction with the Service. Per-render voice models at ElevenLabs are deleted as soon as the render completes (see Section 3).
• Server logs and error records — up to 12 months.

If you delete your account, or ask us to, we will delete your personal information and stored content within 30 days, except where law requires longer retention (such as the tax records above) or where needed to prevent fraud or abuse. To request deletion, contact us at the address in Section 12.

8. Security

We use industry-standard safeguards, including encryption in transit, access controls, and row-level data isolation between accounts. If you join a team workspace, content and activity within that workspace are visible to the workspace owner and any administrators they designate. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If we learn of a breach of security affecting your unencrypted personal information, we will notify you and the relevant regulators as required by applicable law, without undue delay, by email or by a notice in the Service.

9. Your rights

Depending on where you live (for example, under the GDPR in Europe or the CCPA/CPRA in California), you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to non-discrimination for exercising those rights. To exercise any of these rights, contact us at the address in Section 12. We will respond within the timeframes required by applicable law. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we treat Global Privacy Control (GPC) browser signals as valid opt-out-of-sale/share requests — because we do not sell or share personal information, such a signal does not change how the Service works for you.

10. International users

The Service is operated from the United States and your information is processed and stored in the United States and other countries where our service providers operate, which may have different data protection laws than your country.

11. Children

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect information from children under 13. If you believe someone under 18 has provided us personal information, contact us and we will delete it.

12. Contact us

Questions about this policy or your data: support@nimblevid.ai.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new effective date and, for material changes, notify you through the Service or by email. Continued use of the Service after changes take effect means you accept the updated policy.