Privacy Policy

Effective date: August 19, 2026

1. What we collect

  • Account data: your email address, managed through Supabase Auth.
  • Project content: the scripts, prompts, images, audio and videos you create; stored in our database and object storage (Cloudflare R2).
  • Provider API keys (BYOK): see section 2 — this is the most sensitive data we hold for you.
  • Billing: subscriptions are processed by Stripe. We never see or store your card number; we keep only your Stripe customer ID and subscription status.
  • Usage: basic logs (e.g. voiceover character counts) used for quota enforcement.

2. How we handle your API key

Your model-provider API key is encrypted at rest (Fernet symmetric encryption) before it is stored. The interface only ever shows its last four characters. It is decrypted solely in memory, solely to sign generation requests that you initiate, and it is never written to logs. You can delete a stored key at any time from Settings, which removes it permanently. Like any hosted tool that calls an API on your behalf, our server handles the decrypted key in memory at request time — we recommend setting a spending cap in your provider console.

3. What we do not do

  • We do not sell your data.
  • We do not use your projects or keys for advertising.
  • We do not train models on your content.

4. Third parties that process data for us

Supabase (database, authentication), Cloudflare R2 (media storage), Stripe (payments), Vercel (web hosting), and the AI model providers you choose to use (they receive the prompts and reference images needed to generate your content, under their own privacy terms).

5. Retention and deletion

Your projects stay as long as your account exists. You can delete projects and stored API keys at any time in the app. To delete your entire account and its data, contact us via videostar.keepreal.cc and we will remove it within 30 days, except records we must keep for legal or billing reasons.

6. Cookies

We use only the cookies/local storage required for sign-in sessions. No third-party advertising trackers.

7. Changes and contact

Material changes will be announced on this page with a new effective date. Questions or data requests: contact us via videostar.keepreal.cc. See also our Terms of Service.