Privacy Policy

1. Information We Collect

When you use Vibe Video (“the Service”), we collect and store the following information:

• Account information: email address, login provider (Google, Discord, Email magic link), account creation date, and any profile data you provide (avatar).
• Usage data: image-to-video generation history (input images, prompts, output videos), conversation messages in our chat interface, billing and credit transactions, and payment records.
• Device and diagnostic data: IP address, browser type, operating system, device identifiers (localStorage-based device key), cookies, referring URLs, and pages visited.
• Marketing attribution: UTM parameters (source, medium, campaign, term, content), ad click IDs (gclid, wbraid, gbraid), landing page, referring domain, and attribution time captured via cookies when you arrive from paid advertising.
• Conversion measurement data: transaction or order ID, purchase time, purchase value, currency, payment status, and the advertising attribution associated with an eligible purchase.

2. How We Use Your Information

• To provide the image-to-video generation, chat, and other core features of the Service.
• To manage your account, credits, subscriptions, and payment processing.
• To enforce anti-abuse policies, detect fraud, verify identity, and prevent unauthorized access.
• To improve the Service, analyze usage patterns, and perform quality assurance.
• To send transactional emails (login links, payment receipts, security alerts).
• To comply with legal obligations and enforce our Terms of Service.

3. Data Sharing and Third-Party Services

We do not sell your personal data. We share information with trusted service providers only to operate the Service:

• AI/LLM providers: Anthropic, OpenAI, OpenRouter, xAI, Volcengine — for chat responses and media generation. Your prompts and uploaded images are sent to their APIs during processing.
• Payment processors: Stripe, Airwallex, NowPayments — to handle transactions. Payment details are processed directly by these providers in accordance with their own privacy policies.
• Cloud storage: AWS S3, Aliyun OSS, Google Cloud Storage, or other S3-compatible services — to store uploaded images and generated videos.
• Analytics: PostHog — to understand how the Service is used. Analytics data may include IP addresses and device identifiers.
• Google Ads conversion measurement: for eligible completed purchases, we may provide Google Ads with an ad click ID, transaction or order ID, purchase time, value, currency, and conversion action. For enhanced conversion matching, eligible first-party contact information, such as email address and optional name, may be normalized and SHA-256 hashed before it is used for measurement. We do not include card numbers, CVV, bank credentials, uploaded images, generated videos, or creative prompts in Google advertising conversion measurement payloads.
• Email delivery: Resend or SendGrid — to send transactional emails.
• Communication platforms: Lark/Feishu webhooks — used internally for operational notifications.

4. Data Storage and Security

Your data is stored on secure servers operated by cloud providers (primarily AWS). We implement industry-standard security measures including encryption in transit (TLS) and access controls. Uploaded images and generated videos are stored in cloud storage buckets with restricted access.

We retain your generation history, chat conversations, and account data for as long as your account remains active. When you delete your account, we will delete or anonymize your personal data, subject to legal obligations.

5. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Authentication: session cookies to maintain your logged-in state.
• Device identification: a persistent device key (stored in localStorage and cookie) to detect multi-account abuse.
• Marketing attribution: UTM and ad click ID cookies to track the source of your visit and associate an eligible purchase with advertising. These attribution cookies may be retained for up to 30 days.
• Analytics: PostHog cookies to understand how users interact with the Service.

For visitors in the EEA, the United Kingdom, Switzerland, or when location cannot be determined, optional analytics and advertising cookies remain disabled unless you select “Accept All.” Selecting “Necessary Only” keeps optional tracking disabled even if your location later changes.

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

6. Google Ads API Tool

Our Google Ads API integration is an internal, server-side tool used only for Vibe Video's own Google Ads accounts. The code supports eligible web enhanced conversion measurement, while production Google Ads API requests remain subject to Basic Access approval. Read-only internal reporting and advisory Keyword Planning Services are planned. Generated ideas, metrics, forecasts, and ad-group themes remain internal and are not applied automatically. Any future offline purchase ingestion will use the separate Data Manager API rather than the Google Ads Developer Token. Website users cannot access advertising credentials or invoke either API directly. Learn more on our Google Ads API Tool page.

7. User-Generated Content

Images you upload and prompts you enter are processed by third-party AI providers to generate videos. We do not review or monitor your content unless required by law or for safety enforcement.

By submitting content, you represent that you own or have the right to use the material and that it does not violate any applicable laws or third-party rights. We reserve the right to remove content that violates our policies.

8. Children’s Privacy

The Service is not intended for users under the age of 18 (or the age of digital consent in your jurisdiction, whichever is higher). We do not knowingly collect personal data from children. If you believe a child has provided personal data through the Service, please contact us and we will take appropriate action.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of your personal data we hold.
• Correction: request correction of inaccurate personal data.
• Deletion: request deletion of your account and associated data (available via Account Settings).
• Data portability: request export of your data in a machine-readable format.
• Objection: object to processing of your data for analytics or marketing purposes.

To exercise any of these rights, contact us at support@vibevideo.vip. We will respond within 30 days.

10. Data Retention

We retain your account data, generation history, and chat logs as long as your account is active. Upon account deletion, data is removed within 30 days, except where retention is required for legal, billing, or security purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notice. The “Last Updated” date at the top of this page indicates the most recent revision.

12. Contact

For privacy-related inquiries, contact us at support@vibevideo.vip.