Privacy Policy

Lovizo (“we”, “us”) turns long videos into short, ready to post clips. This page explains what personal data we collect when you use Lovizo, why we collect it, who we share it with, and the choices and rights you have over it.

This policy applies to lovizo.com and the Lovizo application. It's written to be accurate to how the product actually works today, not a generic template. If we add a feature that changes what we collect, we'll update this page and its date.

Lovizo is operated by UmnistTech. For everything on this page, we act as the controller of your personal data: we decide why and how it's processed.

Questions about this policy or your data go to support@lovizo.app. A person reads every message.

We collect only what the product needs to work:

• Account data. Your email address, and a hashed password if you sign up that way. If you sign in with Google instead, we receive your name and profile picture from Google as part of authentication. We store them but don't currently display or use them anywhere in the product.
• Content you submit. The video links or files you give us to clip, the transcript generated from them, and the clips we produce.
• Billing data. Your plan, credit balance, and a ledger of credits earned and spent. Card numbers never touch our servers; our payment processor handles and stores those directly (see below).
• Technical and usage data. Your IP address, browser and device type, and how you use the product (pages visited, features used). Some of this comes from our own server logs, and some from analytics tools we use to understand and improve the product.
• Support messages. Whatever you send us at support@lovizo.app, and your conversations with the support assistant inside the product. We keep both sides of those conversations so we can see what people ask and where the answers fall short.

Under the GDPR, every use below needs a legal basis. Here's ours:

• Running the service. Turning your links into clips, keeping your account and credit balance accurate, processing payments. Basis: necessary to perform our contract with you.
• Security and abuse prevention. Rate limiting, spotting suspicious activity, keeping the platform available. Basis: our legitimate interest in running a working, un abused service.
• Understanding and improving the product. Seeing which features get used and where people get stuck. Basis: our legitimate interest in improving Lovizo, or your consent where cookies require it.
• Responding to you. Support requests, account or billing questions. Basis: contract, or our legitimate interest in answering you when you write to us.
• Legal and accounting obligations. Keeping billing records for as long as the law requires. Basis: legal obligation.

We don't use your data for advertising, and we don't sell it. If that ever changes, it'll be a deliberate, disclosed change to this policy, not something that happens quietly inside a feature update.

We use two kinds of cookies today:

• Essential. A session cookie that keeps you signed in, plus two small cookies that remember your cookie choice so we don't ask again on every page. These are required for the site to work, so they're always set.
• Analytics. Only set if you accept them. They tell us which pages get visited and which features get used, so we can see what to improve. We use Google Analytics for this.

The first time you visit, a banner asks what you want. You can accept everything, allow only the essential cookies, or reject the optional ones. Rejecting analytics doesn't limit the product in any way. We record your choice, the date, and the version of this section you saw, so both of us have a record of what you agreed to. To change your mind later, clear the Lovizo cookies in your browser settings and the banner will ask again.

We don't run advertising or cross site tracking cookies, and we don't sell the data analytics tools collect.

We don't sell your data, and we don't have advertising or marketing partners. We do use a small number of providers to run the service, each limited to what it needs to do its job:

• Cloud infrastructure and hosting. Runs our servers, database, and file storage, and delivers the website to your browser.
• Payment processing. Handles your card details and billing directly; we never see or store your full card number.
• AI processing providers. Transcribe the audio of your source video and analyze the transcript to select and title the clips we generate.
• Email delivery. Sends account emails like sign up confirmation and password resets.
• Analytics. Google Analytics, as described above.

To turn a link into clips, our servers fetch the video from the platform you linked to (for example YouTube), the same way your browser would if you opened it. We don't send your identity to that platform.

We may also disclose data if required by law, or as part of a merger, acquisition, or sale of the business. In that case we'd expect the new owner to honor this policy for data collected under it.

Some of the providers above are based outside the EEA, mainly in the United States. Where that's the case, we rely on Standard Contractual Clauses and each provider's own security commitments to keep your data protected to a comparable standard. Our core infrastructure runs in an EU data center by default.

• Your source video is deleted automatically right after your clips are generated. If you upload a file and never start a job with it, it's deleted within 30 days.
• Your clips are kept until you delete your account, or ask us to remove them.
• Your account is kept while it's active. Deleting it (from Account settings) removes your clips and your email address immediately.
• Support conversations are deleted with your account, along with everything else in it.
• Billing history is the one exception: we keep a record of credits and charges after account deletion, with your email removed, because accounting law requires it.

We use industry standard technical and organizational measures to protect your data, including encryption in transit and access controls that limit your data to your own account. That said, no method of transmitting or storing data online is 100% secure, and we can't guarantee absolute security.

If data protection law applies to you (including the GDPR, if you're in the EU, EEA, or UK), you have the right to:

• Access the personal data we hold about you.
• Correct it, if it's inaccurate.
• Delete it. You can do this yourself from Account settings, or ask us to.
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority, if you think we've got something wrong.

To exercise any of these, email support@lovizo.app. We'll need to verify it's really you asking before acting on account data.

If you're a California resident, the CCPA gives you similar rights: to know what we collect, to delete it, and to opt out of the “sale” or “sharing” of your personal information. We don't sell or share your data with anyone for advertising, so there's nothing to opt out of, but you can still reach us at support@lovizo.app to access or delete your data.

Lovizo isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us at support@lovizo.app and we'll delete it.

If we change how we handle your data in a meaningful way, we'll update this page and change the effective date at the top. We won't backdate changes or apply them retroactively without telling you.

Questions, requests, or concerns about this policy: email support@lovizo.app.