Privacy Policy
Summary
We collect what we need to run MMFV — your account info, the prompts and videos you create, and basic usage data. We don't sell your data, we don't train AI on it, and we delete it when you ask us to.
What we collect
Account data: email, name, password hash, billing details (handled by Razorpay — we never see card numbers).
Content data: prompts, scripts, voiceovers, visuals, and final videos you generate. Voice samples if you opt into voice cloning.
Usage data: page views, render counts, error logs, IP address, browser, and device info.
Communications: emails you send to support, NPS survey responses, in-app feedback.
How we use it
To deliver the service: render videos, run AI generation, sync to publish destinations, charge for subscriptions.
To improve the service: aggregate analytics, debug crashes, prioritize feature work.
To keep you informed: product updates (you can unsubscribe), security alerts, billing notices (mandatory).
AI providers & subprocessors
We pass prompts and inputs to AI vendors (Anthropic, ElevenLabs, Pexels, Pollinations) only as needed to fulfill your request. None of them train on your data — we have written agreements confirming this.
- Anthropic · script generation, chat editor
- ElevenLabs · voice synthesis & cloning
- Pexels · stock visuals
- Pollinations.ai · AI image generation
- Cloudflare R2 · storage, CDN
- Razorpay · payment processing
- Resend · transactional email
Cookies & tracking
We use first-party cookies for auth and preferences. We use Plausible (privacy-friendly, no tracking) for analytics. We don't use Google Analytics, Meta Pixel, or any cross-site trackers.
Data retention
Active account: data retained as long as your account exists.
Closed account: deleted within 30 days. Backups purged within 90 days.
Voice clones: deleted immediately when you delete the voice from your library.
Logs: retained 90 days, then anonymized.
Your rights
Wherever you are, you can:
- Export all your data (Settings → Privacy → Export)
- Delete your account and all associated data
- Correct any account info that's wrong
- Object to specific uses of your data (email privacy@mmfv.com)
EU & UK users (GDPR)
Our legal bases: contract (delivering the service you signed up for), legitimate interest (security, fraud prevention), and consent (marketing emails, voice cloning).
You have the right to lodge a complaint with your local data protection authority. Our EU representative is listed in the Contact page.
California users (CCPA)
We don't sell your personal information. We don't share it for cross-context behavioral advertising. You can request a categorized list of data we hold about you and have it deleted by emailing privacy@mmfv.com.
Children
MMFV is not intended for users under 13 (or 16 in the EU/UK). We don't knowingly collect data from children. If you believe a child has signed up, email privacy@mmfv.com and we'll delete the account.
Security
All traffic is encrypted in transit (TLS 1.3). Content at rest is encrypted with AES-256. We're SOC2 Type II certified. We post incidents at status.mmfv.com within 24 hours of detection.
Contact
Privacy questions: privacy@mmfv.com. Data Protection Officer: dpo@mmfv.com. Response time: 30 days max, usually under 5.