Privacy Policy

This Privacy Policy explains how Flenly ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use the Flenly platform, website, and services (the "Service"). By using the Service, you consent to the practices described in this policy.

Information We Collect

Information You Provide

When you create an account or use the Service, we collect information you provide directly, including:

• Account information: Your name, email address, and profile image
• Authentication data: We support third-party OAuth sign-in (e.g., Google). We do not store your third-party account passwords
• Project content: Text prompts, scene configurations, character profiles, style presets, and project settings you create
• Uploaded assets: Images, audio files, and other media you upload to your asset library
• Payment information: Billing details processed through our payment providers. We do not store your full credit card numbers — these are handled directly by the payment processors
• Communications: Messages you send to us via email or support channels

Information Collected Automatically

When you access or use the Service, we automatically collect:

• Usage data: Pages visited, features used, render history, credit transactions, and interaction patterns
• Device information: Browser type, operating system, screen resolution, and device identifiers
• Log data: IP address, access times, referring URLs, and error logs
• Cookies and similar technologies: See our Cookie Policy for details

Information from Third-Party Services

We may receive information from third-party services you connect to your account, such as OAuth providers (e.g., Google) used for authentication.

How We Use Your Information

We use the information we collect to:

• Provide the Service: Process your prompts, generate videos, manage projects, and deliver your content
• Process payments: Handle credit purchases, subscription billing, and automatic refunds for failed renders
• Improve the Service: Analyze usage patterns to improve features, performance, and reliability
• Communicate with you: Send transactional emails (account verification, password resets, render notifications), service updates, and respond to your inquiries
• Content moderation: Screen prompts and generated content against our Acceptable Use Policy to prevent the creation of prohibited material, including NSFW, violent, or otherwise harmful content
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations: Meet regulatory requirements and respond to lawful requests

We do not sell your personal information to third parties.

How We Store Your Data

Data Infrastructure

• Database: Your account data, project data, and credit history are stored in PostgreSQL databases hosted by Neon (serverless PostgreSQL)
• File storage: Generated videos, thumbnails, extracted frames, and uploaded assets are stored in Amazon Web Services (AWS) S3
• Temporary storage: AI-generated videos are initially hosted by Replicate with URLs that expire after 24 hours. We automatically transfer these to permanent storage (S3)

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account
• Generated videos and assets: Retained in S3 storage until you delete them or your account is terminated
• Credit transaction history: Retained for accounting and audit purposes
• Log data: Retained for a limited period for security and debugging purposes

Data Location

Your data may be processed and stored in various locations depending on our service providers, including the United States (AWS, Replicate, Neon) and other regions where our third-party providers operate.

Third-Party Services

We share information with third-party services as necessary to operate the Service:

Provider	Purpose	Data Shared
Replicate	AI video generation (Google Veo 3.1)	Text prompts, reference images, scene parameters
AWS (S3, SES)	File storage and email delivery	Videos, images, email addresses
Neon	Database hosting	All account and project data
Payment processors	Payment processing	Billing information, transaction details
Inngest	Background job processing	Render job metadata (IDs and status)
Vercel	Application hosting	Request logs, IP addresses

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

Data Security

We implement technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via OAuth providers
• Access controls limiting who can access your data
• Regular security monitoring and incident response procedures

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Data portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of data processing
• Restriction: Request that we limit how we process your data

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Account Deletion

You may delete your account through the application settings. Upon deletion, we will remove your personal data, projects, and generated content. Some data may be retained for a limited period for legal or operational reasons (e.g., transaction records for accounting purposes).

Children's Privacy

Flenly is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

International Data Transfers

If you access the Service from outside the regions where our servers are located, your information may be transferred across international borders. By using the Service, you consent to such transfers. We take steps to ensure your data receives adequate protection regardless of where it is processed.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and may notify you via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at [email protected].