Privacy Policy

Last updated: June 2026

This Privacy Policy describes how CampaignBlaze ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our AI-powered video generation platform ("the Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, and authentication credentials (including third-party OAuth data from Google)
• Profile information: Display name, avatar, and account preferences
• Brand assets: Logos, brand colors, font selections, and other brand kit data you upload
• Content inputs: Text prompts, video descriptions, and configuration choices you provide when creating videos
• Payment information: Billing details processed through our payment provider (Polar.sh). We do not store credit card numbers directly
• Communications: Support requests, feedback, and other correspondence with us

1.2 Information Collected Automatically

• Usage data: Video creation history, feature usage, template selections, and interaction patterns
• Device information: Browser type, operating system, screen resolution, and device identifiers
• Log data: IP addresses, access timestamps, pages viewed, and referring URLs
• Performance data: Page load times, errors, and rendering metrics

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your video generation requests through AI models
• Manage your account, subscriptions, and credit balance
• Process payments and prevent fraud
• Send transactional communications (account confirmations, credit alerts, billing receipts)
• Provide customer support
• Analyze usage patterns to improve features and performance
• Enforce our Terms of Service and protect against misuse
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your content to train AI models.

3. AI Processing and Third-Party Providers

3.1 AI Model Providers

Your text prompts and configuration data are processed by third-party AI providers to generate scripts, scenes, images, speech, and music. These providers may include, but are not limited to:

• OpenAI — Script generation, image generation, text-to-speech
• Anthropic — Script and scene generation
• Google — Script and scene generation
• ElevenLabs — Text-to-speech (when configured)
• Other providers — Music generation, video generation, and additional AI capabilities

AI providers and models may change over time as technology evolves. Each provider processes data according to their own privacy policies and data processing agreements. We select providers that offer appropriate data protection commitments.

3.2 What We Share with AI Providers

We share only the minimum data necessary for processing: your text prompts, selected configurations, and relevant brand context. We do not share your email address, payment information, or account details with AI providers.

4. Data Storage and Security

4.1 Infrastructure

Your data is stored using industry-standard cloud infrastructure:

• Database: Supabase (PostgreSQL) with row-level security policies ensuring users can only access their own data
• File storage: Supabase Storage (S3-compatible) with encryption at rest for videos, images, and brand assets
• Authentication: Supabase Auth with secure session management

4.2 Security Measures

• Encryption in transit (TLS/HTTPS) for all communications
• Encryption at rest for stored data and files
• Row-level security policies at the database level
• Rate limiting to prevent abuse
• Secure webhook verification for payment processing
• Regular security reviews of dependencies and infrastructure

5. Cookies and Tracking

We use the following types of cookies and similar technologies:

• Essential cookies: Required for authentication, session management, and core functionality. These cannot be disabled
• Analytics: We use Vercel Analytics to collect anonymized performance and usage metrics. No personal data is tracked for advertising purposes

We do not use third-party advertising cookies. We do not participate in cross-site tracking or behavioral advertising networks.

6. Data Retention

• Account data: Retained for as long as your account is active, plus 30 days after deletion to allow recovery
• Videos and assets: Retained until you delete them or close your account
• Usage logs: Retained for up to 90 days for debugging and analytics purposes
• Payment records: Retained as required by applicable tax and financial regulations
• AI processing inputs: Prompts sent to AI providers are subject to each provider's data retention policies. CampaignBlaze stores prompts as part of your video history until you delete the video

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Export: Download your videos, brand assets, and account data
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@campaignblaze.com. We will respond within 30 days.

8. International Data Transfers

Your data may be processed and stored in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions. We ensure that appropriate safeguards are in place for international transfers, including standard contractual clauses where applicable.

9. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through CampaignBlaze.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users via email and through the Service within 72 hours of becoming aware of the breach, as required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries, data requests, or concerns, contact us at:

• Email: privacy@campaignblaze.com
• General support: support@campaignblaze.com