Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how HelloVideo (accessible at https://hellovideo.com), operated by LIU SONGSONG ("we", "us", or "our"), collects, uses, discloses, and protects your personal information when you use our AI image and video generation platform and related services (the "Service"). By accessing or using HelloVideo, you consent to the data practices described in this Policy.

We take your privacy seriously and are committed to protecting your personal data in accordance with applicable data protection laws. If you do not agree with the terms of this Policy, please do not use our Service.

Information We Collect

We collect several types of information to provide and improve the HelloVideo Service:

Personal Information

When you register for an account, we collect:

• Name: The display name you provide during registration
• Email address: Used for account verification, authentication, and communication
• Password: Stored in encrypted form using industry-standard hashing via Better Auth; we cannot view your plaintext password
• Profile information: Optional details such as avatar and preferences

Usage Data

When you use our AI image and video generation features, we collect:

• Text prompts: The text descriptions you submit to generate images or videos
• Reference images: Images you upload for image-to-image generation or style reference
• Generated content: AI-generated images and videos produced by the Nano Banana and Seedance series of models based on your prompts
• Generation parameters: Settings such as image dimensions, style options, video duration, and batch size
• Credit consumption records: Logs of when and how credits are used, including transaction type and timestamp

Device and Browser Information

When you access HelloVideo, we automatically collect:

• IP address: Used for security, fraud prevention, and approximate geolocation
• Browser type and version: For compatibility and optimization purposes
• Operating system: To ensure cross-platform functionality
• Device identifiers: For session management and security
• Referring URL: How you arrived at our website
• Pages visited and time spent: To understand usage patterns and improve user experience

Cookies and Tracking Technologies

We use cookies and similar technologies as described in detail in our Cookie Policy. These include session cookies for authentication, preference cookies for language and theme settings, and analytics cookies for understanding usage patterns.

How We Use Your Information

We use the information we collect for the following purposes:

Providing and Operating the Service

• Creating and managing your HelloVideo account
• Authenticating your identity via Better Auth session management
• Processing your text prompts and reference images through the Nano Banana series AI models
• Storing and serving your generated images and videos from Cloudflare R2 storage
• Managing your credit balance and subscription status
• Tracking credit consumption using FIFO (First In, First Out) ordering

Processing Payments

• Creating and managing customer accounts with our payment processor (Creem)
• Processing subscription payments (monthly and annual)
• Processing one-time credit package purchases
• Managing billing, refunds (in accordance with our Refund Policy), and payment disputes

Communication

• Sending email verification messages via Resend
• Delivering password reset instructions
• Sending subscription renewal notifications and billing receipts
• Responding to your support inquiries and feedback
• Sending service announcements and policy change notifications (where required)

Improving Our Service

• Analyzing usage patterns to optimize AI model performance
• Identifying and resolving technical issues and bugs
• Understanding feature adoption and user preferences
• Improving our user interface and overall experience

Security and Policy Enforcement

• Detecting and preventing fraud, abuse, and unauthorized access
• Enforcing our Terms of Service and acceptable use policies
• Monitoring for prohibited content generation as defined in our Terms of Service
• Maintaining the security of our platform and user accounts

AI-Generated Content

This section explains how we handle data related to our core AI image and video generation functionality:

HelloVideo is an independent product that provides a custom interface for AI image and video generation using the Nano Banana and Seedance series of models. We do not own or develop the underlying AI models.

How Your Prompts Are Processed

When you submit a text prompt or reference image to HelloVideo:

1. Your prompt is transmitted to our third-party AI model providers for processing by the Nano Banana and Seedance series models
2. The model generates images or videos based on your prompt
3. Generated images and videos are transmitted back to HelloVideo and stored in Cloudflare R2 object storage
4. You can access, download, and manage your generated images and videos through your account dashboard

Data Practices for AI Content

• Prompt storage: We store your text prompts in our database (PostgreSQL via Cloudflare Hyperdrive) to provide you with a generation history and for dispute resolution purposes
• Reference images: When you upload reference images for image-to-image generation or style transfer, these images are processed temporarily by our AI models and are not permanently stored by our AI model providers
• Generated images and videos: Your AI-generated images and videos are stored in Cloudflare R2 and are accessible only through your authenticated account unless you choose to share them
• Ownership: You retain full ownership and rights to the AI-generated images and videos you create using HelloVideo, subject to applicable intellectual property laws
• No model training: We do not use your prompts, reference images, generated images, or videos to train, improve, or fine-tune any of the Nano Banana or Seedance series models or any other AI model. Your creative work remains private

Content Moderation

We reserve the right to review prompts and generated images or videos to enforce our Terms of Service and applicable laws. In addition to model-level safety filters, HelloVideo uses the Creem Moderation API to screen all user-submitted text prompts before they are sent to AI models for image or video generation. This pre-generation screening evaluates prompts against content policies and blocks (deny or flag) any prompts that request prohibited content, including NSFW, sexually explicit, or illegal material. This ensures that prohibited content requests are stopped before any AI processing begins. Human review may occur only when necessary for policy enforcement.

NSFW and Content Safety

HelloVideo uses the Nano Banana series of AI models (including Nano Banana, Nano Banana 2, and Nano Banana Pro) for image generation, and the Seedance series for video generation. These models have built-in content safety filters and are designed to automatically refuse generating:

• Sexually explicit or NSFW (Not Safe For Work) content
• Nudity or semi-nudity
• Sexually suggestive imagery
• Content depicting sexual exploitation
• Child Sexual Abuse Material (CSAM)
• Deepfakes or non-consensual intimate imagery

When a user submits a prompt that requests or would result in prohibited content, the AI model will refuse to process the request. Users will be notified that the prompt was rejected due to content policy violations.

The Nano Banana series models are powered by Google Gemini, which employs a multi-layer safety protection system:

• Model-level refusal: The underlying Gemini model automatically refuses to process prompts that request prohibited content
• Safety filter blocking: Google's safety filters analyze both input prompts and generated images, blocking content that violates safety policies across categories including sexual content, violence, hate speech, dangerous content, and non-consensual intimate imagery
• Child safety: Protections against child safety violations are always enabled and cannot be disabled
• Dual-stage filtering: Safety checks operate at both the input (prompt) and output (generated image) stages, providing comprehensive content moderation

For more details, see Google's Gemini Image Generation Responsible AI documentation.

Payment Information

HelloVideo uses third-party payment processors to handle all financial transactions:

• Creem: Acts as a Merchant of Record (MoR), processing payments for subscriptions and credit packages while handling global tax compliance

What We Do and Do Not Store

• We do not collect, store, or have access to your full credit card number, CVV, or bank account details
• We do store: transaction records, subscription status, billing history, and payment method identifiers (last four digits, card brand) provided by our payment processors
• Payment processors handle all sensitive financial data in compliance with PCI-DSS standards

Billing Records

We retain billing and transaction records for the duration necessary to fulfill legal obligations, resolve disputes, and provide customer support. These records include purchase timestamps, amounts, credit allocations, and refund status.

Data Storage and Security

Infrastructure

HelloVideo is built on modern, secure infrastructure:

Security Measures

We implement the following security measures to protect your data:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS 1.2 or higher
• Encryption at rest: Data stored in PostgreSQL and Cloudflare R2 is encrypted at rest using industry-standard encryption
• Authentication security: Passwords are hashed using industry-standard algorithms via Better Auth; we support two-factor authentication
• Session management: Secure, time-limited sessions managed by Better Auth with automatic expiration
• Access control: Role-based access control ensures that only authorized personnel can access user data
• Infrastructure security: Cloudflare provides DDoS protection, Web Application Firewall (WAF), and bot management

Data Breach Response

In the event of a data breach that affects your personal information, we will:

1. Promptly investigate and contain the breach
2. Notify affected users via email within 72 hours of discovery
3. Report the breach to relevant supervisory authorities as required by applicable law
4. Take steps to prevent similar incidents in the future

Third-Party Services

HelloVideo relies on the following third-party services to operate. Each service has its own privacy policy governing how it handles data:

Third-Party Data Practices

• We do not sell, rent, or trade your personal information to third parties
• Third-party service providers are contractually obligated to process data only as directed by us
• We encourage you to review the privacy policies of these third-party services

Cookies

HelloVideo uses cookies and similar tracking technologies. For a detailed explanation of the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

Summary of Cookie Categories

• Essential cookies: Better Auth session cookies, CSRF protection tokens (required for site functionality)
• Preference cookies: NEXT_LOCALE for language selection via next-intl, theme preference (light/dark mode) via next-themes
• Analytics cookies: Anonymized page views and feature usage data
• Third-party cookies: Cloudflare infrastructure cookies (__cf_bm), Creem payment session cookies

Data Retention

We retain your personal data for different periods based on the type of data and legal requirements:

Account Deletion

When you request account deletion:

1. Your personal information (name, email) will be deleted within 30 days
2. Your AI-generated images and videos will be permanently deleted from Cloudflare R2 within 30 days
3. Your text prompts and generation history will be deleted within 30 days
4. Anonymized usage statistics may be retained for analytics purposes
5. Transaction and billing records required by law will be retained for the mandatory period
6. Your credit balance will be forfeited upon deletion

Your Rights

Depending on your location and applicable data protection laws (such as GDPR, CCPA, or other regulations), you may have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. You can access much of this information directly through your account settings, including your profile, generation history, and billing records.

Right to Correction

You have the right to request correction of inaccurate or incomplete personal data. You can update most of your information directly through your account settings.

Right to Deletion

You have the right to request deletion of your personal data, subject to certain legal exceptions (such as retaining billing records for tax purposes). To request account deletion, please contact us at support@hellovideo.com.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can download your generated images and videos and generation history through your account dashboard.

Right to Object

You have the right to object to certain types of data processing, including processing based on legitimate interests or direct marketing purposes.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Exercising Your Rights

To exercise any of these rights, please contact us at support@hellovideo.com. We will respond to your request within 30 days. We may ask for verification of your identity before processing your request.

Children's Privacy

HelloVideo is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete that information as soon as possible.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us at support@hellovideo.com so that we can take appropriate action.

Users between the ages of 13 and 18 should use HelloVideo only with the involvement and consent of a parent or guardian.

International Data Transfers

HelloVideo operates on Cloudflare's global infrastructure. Your data may be processed and stored in data centers located outside your country of residence. By using our Service, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.

We ensure that appropriate safeguards are in place for international data transfers, including the use of Cloudflare's infrastructure, which complies with applicable data transfer frameworks.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "date" field at the top of this Policy
• For material changes, we will notify you via email or a prominent notice on our website at least 30 days before the changes take effect
• Your continued use of HelloVideo after changes become effective constitutes your acceptance of the revised Policy
• We encourage you to review this Policy periodically to stay informed about how we protect your information

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Operator: LIU SONGSONG
• Email: support@hellovideo.com
• Address: 10 Xiyuan Road, Sandun Town, Xihu District, Hangzhou, Zhejiang 310030, China
• Website: https://hellovideo.com

We will make our best effort to respond to your inquiry within 5 business days.