Privacy Policy
Last updated: February 28, 2026
1. Information We Collect
Account Information
When you create an account, we collect your email address, name, and profile information from your chosen authentication provider (Google, GitHub, or Discord) or from the email you enter for email-based login.
Project Data
We store the video projects you create, including prompts, generated scenes, scene source code, and project metadata.
Community Data
When a project is made public in the community showcase, the following becomes visible to other users: project title, description, tags, scene source code, engagement metrics (likes and duplicates), and any exported video previews.
Payment Information
We use Stripe to process payments. We do not store your credit card number or full payment details. We retain transaction history, subscription status, and balance information for billing purposes.
Media Uploads
Images, audio files, and video files you upload are stored on our cloud storage infrastructure (Cloudflare R2) and associated with your account.
Usage Analytics
We collect anonymous usage data to improve our service, including page views, feature usage, and performance metrics.
API Usage
If you use API keys to access the Service programmatically, we log API requests for security monitoring and billing purposes.
2. How We Use Your Information
- To provide and maintain our video generation service
- To authenticate your account and ensure security
- To store and manage your video projects
- To process payments and manage subscriptions
- To display public projects in the community showcase
- To operate team features, including shared balances and member management
- To improve our service through analytics
- To communicate with you about service updates
3. Data Storage and Security
Your data is stored securely using industry-standard encryption. We use:
- Encrypted database connections (PostgreSQL on Neon)
- Secure cloud storage for generated videos and media (Cloudflare R2)
- Regular security audits and updates
- Access controls and authentication
4. Third-Party Services
Authentication
We use Google OAuth, GitHub OAuth, Discord OAuth, and email-based sign-in links (via NextAuth) for secure authentication. These services may collect additional data according to their own privacy policies.
Analytics
We use Google Analytics and Vercel Analytics to understand how our service is used. This data is anonymized and aggregated.
AI Services
We use multiple AI providers to power different features of the Service. Your prompts and project data may be processed by these services according to their respective privacy policies:
- Anthropic (Claude) — text generation and scene creation
- OpenAI (GPT) — text generation and scene creation
- Google (Gemini, Veo) — text generation and AI video generation
- Replicate (Seedance / ByteDance) — AI video generation
- HeyGen — AI avatar generation
- MiniMax — AI voice synthesis
Payments
We use Stripe to process payments and manage subscriptions. Stripe may collect and process your payment information according to their privacy policy.
Storage
We use Cloudflare R2 for media and video storage, and Neon for database hosting.
5. Community and Public Data
When a project is made public (either by you or automatically for free-plan users as described in our Terms of Service), certain project data becomes visible to all users, including:
- Project title, description, and tags
- Scene source code and preview videos
- Engagement metrics (likes and duplicate counts)
Your email address and personal account details are not displayed publicly through the community showcase. Bazaar.it may display your username alongside public projects but is not obligated to.
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your project data
- Opt out of analytics tracking
- Set your projects to private (available on paid plans)
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where required by law. Public projects that have been duplicated by other users may persist in those users' accounts as independent copies.
8. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at jack@bazaar.it