Scope and controller
This Privacy Policy explains how RedVideo (“RedVideo”, “we”, “us”, or “our”) collects, uses, discloses, and retains personal information when you use redvideo.ai, beta.redvideo.ai, and the RedVideo websites, account features, creation tools, public share pages, support, and cryptocurrency purchase flows (together, the “Service”). A2E LIMITED is the data controller for RedVideo unless a separate notice states otherwise.
This Policy does not govern a third-party wallet, exchange, blockchain, identity provider, payment provider, or website operating under its own privacy notice. By using the Service, you also agree to the Terms of Use.
Privacy questions and requests can be sent to contact@redvideo.ai.
Information and sources
We collect information you provide, information generated by your use of the Service, information from service providers, and information derived from technical signals. The categories below describe the data we process; a particular feature may not use every category.
Account and profile information includes email address, display name, internal user ID, password hash where email/password sign-in is used, account role, credit balance, access status, notification settings, account-creation time, consent records, and account changes.
Creation and task information includes prompts, negative prompts, source and reference files, filenames, generated results, media URLs, model and workflow choices, output settings, task and upstream-provider identifiers, status, errors, credit charges, download or preview state, and support or troubleshooting details.
Technical and activity information includes IP address, approximate country, region, and city inferred from network information, browser and device type, operating system, user agent, host, referring page where available, request URL, timestamps, trace identifiers, API request and response data, sign-in and security events, feature interactions, and share-preview or download state.
Purchase and support information includes package and price, credits or access delivered, internal and provider order identifiers, supported asset and network, payment address, memo or tag, quoted and actual amount, transaction hash and status where provided, refund or exception status, country or region, device details, support messages, and related records.
Google sign-in
If you use Sign in with Google or Google One Tap, Google sends us an ID token. We verify its audience, issuer, subject identifier, email address, and email-verification status. Google may also provide a display name and profile-image URL.
We store the Google issuer and subject identifier, verified email, account-link method, and applicable consent time and version to connect the identity to your RedVideo account. We may use the display name as your RedVideo name. We do not retain the Google profile-image URL and do not request access to your Google Drive, Gmail, contacts, or other Google service content.
Google independently processes information when its sign-in library is loaded or used. Its processing is governed by Google's own privacy terms and account controls.
Prompts, media, and AI processing
We process prompts, uploads, references, and selected settings to perform the creation or editing task you request. We transmit the data needed for a selected task to relevant AI model, inference, prompt-processing, storage, and delivery providers. Different models can use different providers and processing locations.
Uploads and outputs may contain faces, voices, bodies, intimate material, location clues, or other personal or sensitive information. Some jurisdictions may treat face or voice characteristics, sexual information, or similar content as sensitive data. Submit another person's information only when you have the required rights, notice, consent, and lawful basis.
Task records can retain prompts, settings, media URLs, provider references, status, billing, safety, and error metadata after the underlying media object expires. Model and infrastructure providers may retain limited task data under their agreements with us and legal obligations.
Safety and automated checks
RedVideo uses automated and manual signals to protect minors, detect abuse, prevent fraud, enforce access and payment rules, and secure the Service. These checks can analyze submitted media, prompts, account and network signals, inferred age ranges, transaction status, and prior activity.
A check may block or delay a generation, request confirmation, place a payment in review, restrict a share, or suspend access. Model providers may also apply their own controls. Safety-review records can include user ID, a masked IP address, approximate location, host and path, matched rule, decision, and outcome.
If you believe a safety or automated decision is incorrect, contact contact@redvideo.ai with the task or order ID and enough context to review it. Do not send illegal material. Use Report a safety concern for suspected exploitation, minor-related material, non-consensual intimate imagery, trafficking, or other illegal content.
Cryptocurrency and NOWPayments
RedVideo uses NOWPayments to create and monitor supported cryptocurrency orders. We send it the USD price, selected provider currency, internal order ID, package description, and payment-status callback address. We receive payment identifiers, address, memo or tag, exact amount, asset, provider status, transaction and exception information, and webhook or status responses.
RedVideo stores the order, package, price, asset, network, payment address, amount, status, device and regional information, provider references, and delivery or refund-review records. We do not request or store your wallet private key or recovery phrase.
Blockchain transactions are public by design. Wallet addresses, transaction hashes, assets, amounts, timestamps, and related activity may remain visible permanently on a public ledger independently of RedVideo and cannot be deleted by us. NOWPayments, a wallet, an exchange, or a compliance provider may conduct independent fraud, sanctions, or identity checks under its own notice and legal obligations.
Public share links
A completed task may receive an opaque share identifier. A RedVideo share page is available without sign-in to anyone who has the full link and can display the shared title, description, result or cover media, media type, status, and expiration time. The page can allow the visitor to preview or download the media.
We record at the task level whether a share page was previewed or downloaded to operate the feature. The share interaction endpoint does not require the visitor to have a RedVideo account, but normal technical logs may still contain network and request information.
Only distribute a share link when you intend the content to be accessible to its recipients. Anyone with the link may copy or redistribute it, and we cannot remove copies another person has downloaded. Shared media becomes unavailable when it expires or is removed, but a link itself is not private access control.
How and why we use data
We use information to create and manage accounts; authenticate users; deliver generation, editing, history, sharing, support, and account features; quote, verify, reconcile, and fulfill purchases; allocate credits and access; communicate about transactions and security; troubleshoot and improve reliability; measure feature operation; protect users; detect abuse and fraud; enforce our Terms; establish or defend legal claims; and comply with law.
Where laws such as the GDPR or UK GDPR apply, our legal bases are: performance of a contract for account, creation, sharing, and purchase functions you request; legitimate interests in securing, supporting, debugging, and improving the Service, preventing abuse, and protecting legal rights; compliance with legal obligations; and consent where a law requires it for a particular communication, storage technology, or sensitive-data use.
When we rely on legitimate interests, we consider the necessity and impact of processing and the rights of affected people. You may object where the law provides that right. When we rely on consent, you may withdraw it for future processing without affecting processing already performed.
Providers and disclosures
We disclose the minimum information reasonably needed to providers that support the Service. These include Google for identity; Cloudflare for Turnstile bot protection and infrastructure or object storage; Alibaba Cloud DirectMail for account, verification, support, and purchase email; NOWPayments for cryptocurrency processing; AI model, prompt-processing, and inference providers for creation tasks; and hosting, storage, content-delivery, logging, monitoring, security, and support providers.
Verification and account emails are used to complete requested actions. Purchase or service emails may include delivery and link-click diagnostics. You can control optional product notifications in Account settings; we may still send essential account, security, legal, and transaction messages.
We may disclose information to authorities or other parties when reasonably necessary to comply with law or legal process; respond to emergencies; report apparent child exploitation or other illegal material; protect rights, safety, and security; investigate fraud or abuse; enforce agreements; or establish, exercise, or defend claims.
We may transfer information in a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or service transition, subject to appropriate confidentiality and notice where required. We may share aggregated or de-identified information that cannot reasonably identify a person.
International transfers
RedVideo and its providers may process information in the United States and other countries that may not provide the same privacy protections as your home country. The location can depend on the model, storage route, payment network, support function, and provider selected for a task.
Where law requires a transfer mechanism, we use an applicable adequacy decision, contractual protections such as the European Commission's Standard Contractual Clauses, or another lawful safeguard. You may contact contact@redvideo.ai for information about safeguards relevant to your data.
Cookies and browser storage
RedVideo keeps the signed session token in a first-party HttpOnly cookie that browser scripts cannot read. A separate non-secret browser marker lets the interface reflect whether a session exists. These records can remain until you log out, clear browser data, delete the account, or the configured session period ends, which is currently up to 30 days. Do not use remembered sign-in on an untrusted or shared device.
Session storage can hold a creation draft, prompt, task settings, media descriptors, and result handoff data for the current browser session; stale creation drafts are rejected after 24 hours. Local storage can hold up to 30 recent upload descriptors for one day and can also store sample, display, mode, and reminder preferences until they expire, are replaced, or you clear browser data.
Google Identity and Cloudflare Turnstile may use their own storage and technical signals when their scripts load. We use these technologies for sign-in, security, preferences, and Service operation, not to sell personal information or serve cross-context behavioral advertising. Browser controls can clear storage, but disabling essential storage can prevent sign-in or other features from working.
Retention
Source and generated media stored in RedVideo-controlled active product storage is subject to an automatic three-day lifecycle. Storage-provider deletion may complete shortly after the lifecycle threshold. Download media you wish to keep before it expires.
Browser upload descriptors are kept for up to one day and creation drafts for up to 24 hours as described above. Safety-review hit records are normally scheduled to expire after 30 days. A safety override, suspected-minor, fraud, or legal record may be kept longer when needed to protect people, investigate abuse, demonstrate compliance, or establish or defend claims.
Task records—including prompts, parameters, status, provider references, media URLs, billing, download, sharing, safety, error, and audit metadata—may be retained longer than the media itself for account history, Service operation, support, security, dispute resolution, and legal compliance. We retain them only while those purposes reasonably require, taking account of account status, record sensitivity, operational need, limitation periods, and legal obligations.
Account and identity records are kept while the account is active and then handled as described below. Payment, blockchain, tax, accounting, fraud-prevention, security, support, and legal records may be retained for the period required by law or reasonably needed for reconciliation, audits, disputes, and enforcement. Backups are removed or overwritten on their ordinary rotation schedule.
Account deletion
You can request deletion through Account settings or by emailing contact@redvideo.ai. The in-product flow checks for active access, requires confirmation, deactivates the account, ends access, marks applicable account and business records deleted, and starts applicable stored-media cleanup. The action is not reversible.
Account deletion does not remove a public blockchain transaction or copies another person downloaded from a share link. RedVideo-controlled media remains subject to the three-day lifecycle and may be removed sooner when cleanup succeeds.
We may retain limited identity, payment, transaction, safety, fraud-prevention, support, audit, and legal records when required by law or reasonably necessary to protect users, prevent repeat abuse, reconcile purchases, enforce agreements, or resolve disputes. Retained records are restricted to those purposes and removed or de-identified when the applicable need ends.
Your rights and choices
Depending on where you live, you may have rights to know whether we process your information; access or receive a copy; correct inaccurate data; delete data; restrict or object to processing; withdraw consent; obtain portable data; and complain to a data-protection authority. You may also have a right to human review or to contest certain automated decisions.
Submit a request to contact@redvideo.ai from your account email and describe the right you want to exercise. You can update some account information, notification choices, and deletion settings directly in Account. We may request information reasonably necessary to verify identity, authority, and the account involved.
An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification. Rights can be subject to exceptions, including other people's rights, security, fraud prevention, legal privilege, transaction records, and legal obligations. If we deny a request, you may appeal by replying to the decision and stating why it should be reconsidered.
You may lodge a complaint with the privacy or data-protection regulator in your country, state, or region. If you are in the EEA or United Kingdom, you may complain to the supervisory authority where you live or work.
United States privacy disclosures
In the preceding 12 months, we have collected the categories described in this Policy: identifiers and account information; internet, network, and device activity; commercial and cryptocurrency transaction information; user-provided media and inferences needed for safety or Service operation; approximate geolocation; and potentially sensitive information contained in content you choose to submit. We collect them from you, your device, identity and payment providers, public blockchains, and Service activity.
We use and disclose those categories for the business purposes described in “How and why we use data” and to the provider and disclosure categories described above. We do not sell personal information for money, share it for cross-context behavioral advertising, or provide financial incentives in exchange for personal information. We use sensitive information only to provide and secure requested features, process transactions, protect people, and comply with law.
If an applicable U.S. state law gives you rights to know, access, correct, delete, obtain a portable copy, opt out, limit sensitive-data use, appeal, or receive equal service, you can exercise them using the contact method above. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or advertising share to opt out of. We will not discriminate against you for exercising an applicable privacy right.
People under 18
The Service is for adults and is not directed to anyone under 18. We do not knowingly permit a minor to create an account, purchase access, submit content, or use a share feature.
If we learn that an under-18 person provided personal information, we may disable the account, remove the information where required and practicable, preserve evidence needed to protect a child, and make reports required by law. A parent, guardian, or other person can notify us at contact@redvideo.ai without sending or redistributing suspected illegal material.
Security and third-party limits
We use technical and organizational measures designed to protect personal information, including access controls, transport security, scoped provider credentials, opaque share identifiers, payment verification, and abuse monitoring. No system, storage provider, transmission, blockchain, or account can be guaranteed completely secure.
Protect your credentials, wallet, recovery phrase, and devices. RedVideo will never ask for a wallet private key or recovery phrase. Notify us promptly if you believe your account or information has been compromised.
The Service may link to or interoperate with third-party services. We do not control their independent collection, security, retention, or privacy practices, and this Policy does not replace their notices.
Changes and contact
We may update this Policy as the Service, providers, or law changes. The effective date identifies the current version. We will provide additional notice of a material change when required by law.
For access, deletion, correction, objection, appeal, or other privacy requests, email contact@redvideo.ai. Include the account email and enough detail to understand the request, but do not email passwords, private keys, recovery phrases, or illegal media.