Privacy Policy

1. Introduction

This Privacy Policy explains what personal data Canvane ("we", "us", "our") collects when you use our AI video generation service, why we collect it, who we share it with, and what rights you have.

We follow a minimal-collection approach: we process what is needed to run the Service, bill for it, keep it secure, and improve it.

2. Data we collect

Account data. Your email address, name, and profile image as provided by Google or GitHub when you sign in; your role; and session records. We never receive your Google or GitHub password.

Generation data. The prompts you submit, the model and settings you choose, the videos generated for you, generation history, and the outcome of automated content screening (including whether a prompt was blocked). Prompts are the core of what this Service processes — please read section 4 on how they are shared.

Billing data. Plan and subscription status, credit balance and credit transaction history, order and payment records, and invoice identifiers. We do not receive or store your full payment card number — see section 4.

Technical and security data. IP address, device and browser information, request logs, error reports, and anti-abuse signals.

Communications. Messages you send us via support or contact forms, and your newsletter subscription status.

Cookies. Used for authentication, session management, security, language preference, and analytics. See our Cookie Policy.

3. How we use data

We use the data above to:

• Provide video generation, history, workspace, and account features
• Authenticate you, maintain sessions, and support account recovery
• Screen prompts against our Acceptable Use Policy before generation
• Process orders, subscriptions, and credits, and provide customer support
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Debug, monitor, and improve performance and product quality
• Send service messages (billing, security, and account notices), and — if you have not opted out — occasional product updates
• Comply with legal, tax, and accounting obligations

We do not sell your personal data, and we do not use your prompts or generated videos to train our own models.

4. Who we share data with

We share limited data with the service providers needed to operate Canvane:

• AI model providers. To generate a video, your prompt and generation settings are transmitted to our model routing partner Evolink and, through it, to the model provider you selected (such as Seedance, Kling, or Veo). Their own terms and privacy practices govern what they do with that data. Do not put personal, confidential, or sensitive information in a prompt.
• Content screening. Each prompt is sent to Creem's moderation service before generation, together with a pseudonymous account reference.
• Payments. Creem acts as merchant of record and processes payments. Creem receives the data needed for the transaction and for tax compliance, and handles your card details directly — we never see the full card number.
• Infrastructure. Database, storage, and hosting providers.
• Email and analytics. Providers used for transactional email, newsletters, and product analytics.

We may also disclose data where legally required, to enforce our Terms, or to protect the rights, safety, and property of Canvane, our users, or the public. If we are ever involved in a merger, acquisition, or asset sale, data may transfer as part of that transaction; we will notify you if that happens.

5. Newsletter

We do not subscribe you to marketing email when you create an account. The product newsletter is opt-in: you can subscribe from your notification settings, and unsubscribe at any time from there or via the link in any newsletter email.

Unsubscribing does not affect service, billing, or security emails, which are necessary to operate your account and are sent regardless of your newsletter preference.

6. International transfers

Our providers operate in a number of countries, so your data may be processed outside the country where you live, including in jurisdictions with different data-protection laws. Where required, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — for those transfers.

7. How long we keep data

• Account data — for as long as your account is open, then deleted or anonymised within a reasonable period after closure.
• Prompts, generation history, and videos — while your account is open, so the history feature works. Deleting an item removes it from your account; backup copies age out on our normal backup cycle.
• Billing and order records — retained as long as tax and accounting law requires, typically several years, even after account closure.
• Security, abuse, and moderation logs — retained as needed for security and abuse prevention, and for legal compliance.

8. Security

We use encrypted connections (HTTPS/TLS) throughout, restrict internal access to personal data, delegate authentication to Google and GitHub, and never handle raw payment card data. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and any relevant regulator as required if a breach affects your personal data.

9. Your rights

Subject to applicable law, you may:

• Access the personal data we hold about you, or receive a copy
• Correct inaccurate account information
• Delete your account and eligible personal data
• Export account-related information in a portable form
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent, including unsubscribing from the newsletter

You can do much of this directly in your account settings. For anything else, email support@canvane.com — we aim to respond within 3 business days and, in any event, within the period the law requires.

Some data must be retained despite a deletion request, for tax, accounting, fraud-prevention, dispute-resolution, or other legal-compliance reasons.

If you are in the EEA or UK, you have the right to complain to your local data protection authority.

10. Legal bases (EEA/UK)

Where the GDPR applies, we rely on:

• Contract — to provide the Service, your account, generations, and billing
• Legitimate interests — security, abuse prevention, debugging, analytics, and product improvement, balanced against your rights
• Legal obligation — tax, accounting, and lawful requests
• Consent — where we ask for it, such as certain cookies; you can withdraw it at any time

11. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, contact support@canvane.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy. Material changes will be posted here with a revised date and, where the change significantly affects your rights, we will make a reasonable effort to notify you.

13. Contact

Questions, requests, or complaints about privacy: support@canvane.com.