This Privacy Policy describes how Nereus Technology LLC ("we", "us") collects, uses, and shares information when you use MagicMovie.AI (the "Service"). By using the Service you agree to the practices described here.

1. Information We Collect

Account information

• Email address (from Google OAuth or direct signup)
• Display name and profile picture (if provided)
• Subscription plan and billing identifiers (managed by Stripe)

Generation inputs and outputs

• Text prompts you submit
• Reference images you upload
• Story drafts, visual plans, and per-scene prompts
• Generated images, audio, and videos

Connected publishing accounts

• When you connect social accounts for automated posting (through our publishing provider, PostBridge), we store the connection and the platform account identifiers needed to schedule and publish your videos.
• When you connect your YouTube channel for custom thumbnails, we use Google OAuth to obtain a token limited to managing your videos' thumbnails (theyoutube.upload scope). We store that token in encrypted form, along with your YouTube channel ID and name. We never receive your Google password, and we request no broader access. See Section 10.

Usage and diagnostics

• Server logs (IP address, browser, timestamps, paths accessed)
• Pipeline performance metrics (stage durations, error counts)
• Cookies and similar technologies (see Section 6)

2. How We Use Information

• To run the Service: generate videos, store your library, deliver downloads
• To publish and schedule your videos to the social accounts you connect, and to set the custom thumbnails you generate on your own YouTube videos
• To bill you (via Stripe) and apply Render Credit balances, plan access, and rate limits
• To detect abuse, enforce our Acceptable Use Policy, and comply with legal obligations
• To respond to your support requests
• To improve reliability and product quality using aggregated metrics. We do not use your User Content to train our own AI models.

3. How We Share Information

We share information only with the following service providers, and only as needed to operate the Service:

• Stripe — payment processing. Stripe receives your billing details directly; we never see your full payment-card number.
• Cloudflare R2 — hosting your generated videos for the user library.
• Generation and media providers — Replicate, ElevenLabs, OpenAI, and Pexels receive the text, image, audio, or media-search inputs needed to fulfill the specific request. They do not receive your billing information from us.
• PostBridge — our social-publishing provider. To post on your behalf, we send your generated video and its caption to PostBridge, which publishes them to the social accounts you connected there.
• Google and YouTube — if you sign in with Google, basic profile info (email, name, image) is exchanged at sign-in. If you connect your YouTube channel, we use the YouTube Data API solely to set thumbnails on your videos (see Section 10).

We do not sell your personal information. We may disclose information to comply with valid legal process (e.g. subpoenas), to protect our rights, or to investigate fraud or abuse.

4. Data Retention

• Account records: kept while your account is active, plus up to 90 days after deletion.
• Generated videos: kept in R2 storage subject to per-plan retention limits (Free: last 5; Starter: last 50; Creator: last 200; Studio: unlimited).
• Draft projects: deleted automatically 48 hours after creation if not rendered.
• Billing records: retained as required by tax and accounting laws (typically 7 years).
• Server logs: rotated periodically and not retained beyond 90 days.

5. Your Rights

Depending on your jurisdiction (e.g. EU/UK GDPR, California CCPA/CPRA), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Data portability (export your videos and metadata)
• Opt out of marketing communications (we currently do not send marketing email)

To exercise any of these rights, email [email protected] from the address associated with your account. We will respond within 30 days.

6. Cookies

We use a small number of cookies and similar technologies for essential Service operation (authentication, session state, theme preference). We do not use third-party advertising cookies. We use Stripe and Google OAuth which set their own cookies subject to their respective policies.

7. Security

We use industry-standard practices: HTTPS everywhere, JWT-based authentication with rotating refresh tokens, server-side provider credentials, restricted production access, and access logging. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

9. International Transfers

We are based in the United States. If you access the Service from outside theUnited States, your information may be transferred to and processed in theUnited States and by the third-party providers listed above.

10. YouTube API Services

Our optional custom-thumbnail feature uses YouTube API Services. By connecting your YouTube channel, you also agree to the YouTube Terms of Service. Google's handling of your data is governed by the Google Privacy Policy.

We request only the access needed to set thumbnails on videos published from your channel, and we use that access for that single purpose. We do not read, download, modify, or share your YouTube content, analytics, comments, or subscriber data, and we do not use any YouTube data to train AI models.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke our access at any time from the Google Account permissions page, or by disconnecting YouTube in your channel settings. Revoking access stops future thumbnail updates; thumbnails already applied remain on your videos. When you disconnect or delete your account, we delete the stored YouTube token.

11. Changes to This Policy

Material changes will be communicated by email or by a notice on the Service. The "Last updated" date at the top reflects the latest revision.

12. Contact

Privacy questions or data requests: [email protected].