← Back to home

Privacy Policy

Last updated: May 26, 2026 · Effective: June 1, 2026

1. Overview

VideoAI Automation Platform (“we”, “us”, “our”) is operated by Elvis Ekoigiawe. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our video automation services.

2. Information We Collect

Account data: name, email address, country, IP address at registration. Payment data: processed by third-party gateways (Paystack, Flutterwave, Stripe, NowPayments, BitPay) — we do not store full card numbers. Usage data: campaigns created, videos rendered, engine preferences, credits consumed. Device data: browser type, OS, screen resolution. Social tokens: OAuth tokens for connected social accounts (encrypted at rest). Content data: scripts, video topics, and uploaded Excel files you provide.

3. How We Use Your Information

Provide and maintain the service. Process payments and manage credit balances. Generate personalized AI scripts, images, narration, and video renders based on your content briefs. Schedule and publish content to connected social media platforms. Send transactional emails (payment receipts, render completions, account alerts). Analyze aggregated usage to improve features and engine recommendations. Detect fraud, abuse, and security threats.

4. Legal Basis for Processing (GDPR)

We process personal data on the following legal bases: Contract performance — providing the video automation service you subscribe to. Legitimate interest — fraud prevention, service improvement, analytics. Consent — for optional cookies and non-essential analytics. Legal obligation — tax reporting, law enforcement requests.

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with: Payment gateways (encrypted transaction data). Cloud providers (AWS, Contabo VPS) for hosting and MinIO/Garage for storage. AI API providers (OpenRouter/fal.ai/ElevenLabs) for content generation — your scripts and prompts are sent to these services. Upload-Post API for social media publishing. We require all subprocessors to maintain GDPR-compliant data processing agreements.

6. Data Retention

Account data: retained for the lifetime of your account plus 90 days after deletion. Video files: retained for 48 hours after all platforms have posted, then auto-deleted (configurable). Render logs and job history: retained for 12 months for debugging. Payment records: retained for 7 years per tax regulations. You can request early deletion under Section 9.

7. Data Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Social media tokens are encrypted with application-level AES-256 before storage. Sessions use cryptographically secure random tokens hashed with SHA-256. Rate limiting and HMAC-SHA256 signed URLs protect API endpoints. Infrastructure runs on hardened VPS with network isolation, regular patches, and automated backups.

8. International Data Transfers

Our primary servers are located in Germany (Contabo). Some AI processing occurs via US-based providers (OpenRouter, fal.ai, ElevenLabs). We rely on Standard Contractual Clauses (SCCs) for transfers outside the EEA and ensure all providers maintain adequate protection levels.

9. Your Rights (GDPR/DSAR)

You have the right to: access, rectify, erase, restrict processing, object to processing, data portability, and withdraw consent. To exercise these rights, email us at legal@va.elvisekoigiawe.com. We respond within 30 days. You may also lodge a complaint with your local data protection authority.

10. Children’s Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, contact us immediately and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a prominent notice on the platform. The effective date at the top of this page indicates the latest revision.

12. Contact Us

Elvis Ekoigiawe — Data Controller Email: legal@va.elvisekoigiawe.com Address: Available upon request via email For GDPR matters, our EU representative contact is the same email address above.

🔗 Related Policies

Terms of ServiceCookie PolicyGDPR RightsAI Disclosure