Privacy policy

What we collect

• Account data, your email address and password hash, held by our authentication provider. We never see your password.
• Content you submit, prompts, uploaded images and the videos generated from them.
• Usage records, generations, credit transactions and the model and provider used, so billing is accurate and auditable.
• Invoice details, the name or company, address, tax or VAT number and billing email you enter, used solely to issue invoices. Card details are handled by Stripe and never reach our servers.
• Technical data, IP address and request metadata, used for security and rate limiting.
• Optional analytics, only if you consent. See the cookie policy.

Why we use it

• To provide the service you asked for, performance of a contract.
• To bill correctly and prevent abuse, legitimate interests.
• To keep the platform secure, legitimate interests.
• To measure and advertise, only on your consent.

Your content and AI providers

To generate a video we send your prompt, and your image when you upload one, to the specialist AI inference provider that renders it. We work with more than one and the routing engine chooses between them per request, so the provider that handles a given generation can differ. We send only what the generation needs; your email and account details are never included. The current list of inference providers is available on request at the address below.

We do not use your prompts, images or videos to train models, and we do not publish your content. A clip only ever appears publicly if the rights holder explicitly chooses to feature it.

Who processes data for us

• Supabase, accounts, authentication and application database
• Cloudflare, DNS, security, delivery, and R2 storage of your files
• Specialist AI inference providers, video generation
• Hetzner, the servers in Germany that run the application
• SiteGround, the mail service that sends and receives our email
• Stripe, payment processing
• Google, tag management and analytics, only with your consent

Some of these operate outside the EEA. Those transfers rely on the safeguards each provider offers under its data processing agreement, which for all of them is the European Commission's standard contractual clauses.

How long we keep it

• Account data, while your account exists.
• Generated videos and uploads, until you delete them or close your account. Deleting a video in your generations removes its video file, and the photo, voice or reference images it was made from unless another of your videos or avatars still uses them, and the prompt you wrote for it. We keep the record of the generation itself, for our accounts: when it was made, its settings, and the credits charged for it. A video you have agreed to let us feature on the site is not taken off it by deleting it here; write to us for that. You can close your account yourself in settings, and everything listed here goes with it immediately.
• Credit and billing records, retained after account closure where accounting law requires it.

Your rights

You can request access, correction, deletion, restriction, portability of your data, and object to processing based on legitimate interests. Where processing rests on consent, you can withdraw it at any time without affecting what happened before.

Write to privacy@musevate.com, or use the contact form and choose “A privacy or data request” — that reaches the same people and gives you a reference to quote. You also have the right to complain to your local data protection authority.

Security

Traffic is encrypted in transit. Access to your generations, uploads and transactions is restricted to your own account at the database level, and stored files are private and served through short-lived signed links.

Children

Musevate is for adults aged 18 and over, and everyone confirms their age when they create an account. We do not knowingly collect data from anyone younger. If we learn that we have, we close the account and delete its data, except what the law requires us to keep.

Changes

If this policy changes materially we will update the date above and, where the change affects consent, ask you again.