Privacy Policy

What we collect

• Account details from your AICines sign-in: your name, email address and profile picture. We request no more than that — no additional permissions from Google or Apple beyond your name and verified email.
• Billing details: your plan, billing history and billing address. Card and UPI details are collected and stored by Stripe, never by us.
• Content you give us: website addresses, brand information and the text and images collected from your website to create your content.
• Technical data: server logs with your IP address and browser details, kept for security, and your approximate country (worked out from your IP address) so we can show prices in the right currency.
• Communications: messages you send us through support requests or contact forms.
• If you connect a YouTube channel (YouTube API Services): the channel name, channel ID, channel thumbnail image and subscriber count, and permission to upload videos to that channel and read its view, like, comment and watch-time counts on your behalf. We only ever access the channel you explicitly connect, never your personal Google account beyond that. The access token Google issues us is stored encrypted and is never visible to us in plain text; disconnecting the channel deletes it.

How we use it

• to sign you in and provide the plan you bought
• to research your market and create your marketing content
• to bill you, send receipts and handle payment problems
• to keep the service secure and fix problems
• to answer your questions and send important service messages
• to comply with the law and respond to valid legal requests

Who processes it for us

We share personal data only with providers that help us run the service:

• Stripe — payments, invoices and the billing portal
• Amazon Web Services — hosting, storage and security
• OpenAI — generating text and images from the brand information you provide
• Calendly — booking calls, if you choose to book one
• Google / YouTube — only if you connect a YouTube channel, to upload videos to it and read its performance data, governed by the Google Privacy Policy

• Google Privacy Policy

YouTube API Services and Limited Use

AICinesLabs’ use and transfer of information received from Google APIs, including YouTube API Services, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, that means: we use YouTube data only to provide the features you see in AICinesLabs — publishing your video and showing you its performance — and for nothing else. We never sell it. We never use it for advertising, including retargeting or interest-based ads, our own or anyone else’s. We never use it to train AI models, including the generative features elsewhere in AICinesLabs. No one at AICines reads it, except where necessary for security, to comply with the law, with your consent, or in an aggregated, de-identified form we use to see how AICinesLabs itself is performing.

• Google API Services User Data Policy

Legal requests and business transfers

We may disclose personal data where required to comply with the law, a court order or a valid regulatory request. We review every request for legal validity first, disclose only the minimum required, and tell you first wherever we are legally permitted to.

If AICines merges with or is acquired by another company, your data may transfer as part of that deal. We will tell you at least 30 days beforehand and give you the chance to delete your account first.

Cookies

We use essential cookies to keep you signed in, and your browser’s session storage briefly during sign-in. Both are required for the service to work. We do not use analytics or advertising cookies.

International transfers

Our providers may process data in the United States and other countries. Transfers of personal data out of India are made in line with the Digital Personal Data Protection Act 2023’s cross-border transfer provisions and any Rules notified by the Government of India. Where required elsewhere, we rely on appropriate safeguards for these transfers.

How long we keep it

• Account data: kept while your account is active. After 24 months of inactivity we email you; if we do not hear back within 30 days, the account is scheduled for deletion within 60 days.
• Content and generated files: kept while your account is active, or until you delete them.
• Billing records: kept for as long as tax and accounting law requires.
• Backup data: purged within 90 days of the end of the retention period that applies to it above.
• Aggregated, de-identified data: may be kept indefinitely — it cannot be used to identify you.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, or object to how we use it. Email info@aicines.com and we will respond within 30 days.

• India (Digital Personal Data Protection Act 2023): right to access, correction, erasure, grievance redressal and nominee designation.
• USA (CCPA/CPRA and equivalent state laws): right to know, delete, correct, opt out of sale, and non-discrimination. We do not sell personal data and do not use it for cross-context behavioural advertising, in any jurisdiction.

India — Grievance Officer

In compliance with the Digital Personal Data Protection Act 2023, AICines has designated a Grievance Officer for India-based users, reachable at grievance@aicines.com. We acknowledge grievances within 72 hours and resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India once it is operational.

Disconnecting a connected account

You can disconnect a connected YouTube or Instagram account at any time from Settings → Connections inside AICinesLabs. This immediately stops any further publishing or data access for that account, and we delete the stored access token.

For YouTube specifically, you can also revoke AICinesLabs’ access directly from your Google Account at any time, which works even if you cannot sign in to AICinesLabs.

• Manage Google Account permissions

Data security

We use industry-standard measures to protect your data: encryption in transit (TLS) for data moving between you and us, encryption at rest for sensitive stored data, role-based access controls internally, and regular security reviews.

If a data breach affects your personal data, we will notify the relevant authority within 72 hours where the law requires it, and tell affected users without undue delay. No system is completely secure — if you believe your account has been compromised, email us immediately.

Children

AICinesLabs is a business service and is not meant for anyone under 18. If you believe someone under 18 has created an account, email info@aicines.com and we will delete it promptly.

Changes to this policy

We will post any changes here and update the date above. If a change is significant, we will also tell you by email at least 30 days before it takes effect.

Questions? Email info@aicines.com.