1. Controller and scope
AI Video Marketing is operated by RADUDOTCOM LIMITED (company number 16125458), a private limited company with registered office at 59 Union Street, Dunstable, England, LU6 1EX. Companies House records the company status as Active.
RADUDOTCOM LIMITED is the controller for personal data described in this notice when it decides why and how that data is processed. A monitored privacy contact email is to be completed by the owner before live paid processing begins. This notice is written for UK GDPR transparency and should be read with the Terms and Cookie Notice.
2. Data we collect
- Account and contact data, such as email address, account identifier and information you provide for profile or support purposes.
- Billing and subscription data, such as Stripe customer and subscription identifiers, plan, invoice status and payment outcome. Stripe processes payment-card information; we do not intend to store full card numbers or card security codes.
- Creative-service data, such as prompts, scripts, uploaded references, generated media, project and asset metadata, and your requests for image, video, audio or text features.
- Technical and security data, such as service events, device/browser information, IP-derived security signals, error records and abuse-prevention information, minimised where practicable.
- Browser storage needed for sign-in, language preference, drafts and interface preferences, as explained in the Cookie Notice.
3. Purposes and lawful bases
We use account, creative and billing data to provide the Service, authenticate users, deliver requested outputs, administer subscriptions, provide support and perform our contract with you. The principal lawful basis is performance of a contract.
We use limited technical and security data to secure the platform, prevent fraud or abuse, troubleshoot incidents, control cost and protect users. The lawful basis is our legitimate interests in running a secure, reliable service; we balance those interests against your rights.
We process information where necessary to comply with legal obligations, establish or defend claims, and where applicable obtain consent for an optional activity. You may withdraw consent at any time, but this does not affect prior lawful processing.
4. Processors and disclosures
We use service providers only as needed to run the platform. The planned processor categories include Supabase for authentication, database and private storage; Stripe for payments and subscriptions; Replicate for AI media generation routing; ElevenLabs for voice generation; LLM provider(s) for requested text/assistant features; and hosting/operational providers for application availability, logging and incident response.
We may disclose data where required by law, to enforce rights, investigate security or fraud, or in connection with a genuine corporate transaction. We do not sell personal data. The owner must verify the current processor list, data-processing terms and feature-specific data flows before each live provider is enabled.
5. International transfers
Some providers may process data in the UK, EEA, United States or other countries. Before transferring personal data outside the UK where UK GDPR safeguards are required, we will use the transfer mechanism appropriate to the actual flow, such as an adequacy regulation or contractual safeguards, and will provide available information on request. The owner must complete the transfer register and processor review before live launch; this page does not assert an unverified safeguard for a specific provider.
6. Retention and deletion
We keep personal data no longer than necessary for the stated purpose, account administration, dispute handling, legal duties and security. The intended live schedule is: account and project data while the account is active; deletion or anonymisation after a verified deletion request subject to a short operational window; and only the minimum billing/ledger record necessary for legal, tax, fraud and audit duties.
The exact retention periods for projects, media, chat history, backups and financial records are to be completed and technically tested by the owner before paid launch. Until that work is complete, do not treat a deletion request as proof that every provider or backup copy has been erased. The runbook defines the operational deletion and restore controls to implement.
7. Your rights and complaints
Subject to the UK GDPR and any applicable exceptions, you may request access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. You may also withdraw consent where consent is used. To make a request, use the published privacy contact once the owner completes it; we may need to verify identity before acting.
You may complain to the UK Information Commissioner's Office (ICO). ICO guidance explains the right to be informed and the information a privacy notice must provide.
8. AI features and updates
Creative prompts and references can contain personal data. Do not submit information about another person unless you have a lawful basis and the necessary notice or consent. We do not use AI output to make solely automated decisions with legal or similarly significant effects about you through this Service.
We will update this notice before using data for a materially new purpose or adding a materially different processor. Material changes will be notified through the Service or account email where appropriate.