Privacy Policy

1. Introduction

AutoVibe.video ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI-powered video content creation platform.

2. Information We Collect

2.1 Personal Information

• Account Information: Name, email address, and secure password
• Payment Information: Billing details processed securely by our payment processor (we do not store payment card details)
• Profile Data: Any additional information you provide in your user profile

2.2 Social Media Integration

• Connected Accounts: Authentication credentials for connected social media platforms
• Account Details: Basic profile information from connected accounts
• Platform Data: Information necessary to post content to your authorized accounts

2.3 Usage and Technical Data

• Service Usage: Content preferences and settings you configure
• Generated Content: Videos and related content created through our service
• Technical Data: Standard web analytics and usage information

3. How We Use Your Information

• Service Provision: To create, generate, and automatically post AI videos to your connected social media accounts
• Account Management: To manage your account, process payments, and provide customer support
• Content Generation: To create personalized video content based on your preferences and content types
• Platform Integration: To connect with and post content to your authorized social media accounts
• Analytics: To improve our service and understand usage patterns (aggregated and anonymized)
• Communications: To send service-related notifications, updates, and support messages

4. Data Security and Protection Mechanisms

4.1 Encryption and Data Protection

• Password Security: All user passwords are hashed using industry-standard cryptographic algorithms with secure salt generation before storage
• Data in Transit: All data transmission uses modern TLS encryption protocols with HTTPS enforcement across all communications
• Data at Rest: Sensitive data is encrypted using advanced encryption standards before database storage
• OAuth Token Security: Social media access tokens are encrypted using industry-standard encryption before storage and are automatically refreshed or revoked upon disconnection
• Session Management: User sessions use cryptographically secure authentication tokens with appropriate expiration policies

4.2 Infrastructure Security

• Database Security: Secure databases with row-level security policies and connection pooling with encrypted connections
• Cloud Storage: Video and media files stored in secure cloud infrastructure with server-side encryption and access controls
• Access Controls: Role-based access control (RBAC) with multi-factor authentication for administrative access
• Network Security: Firewall protection, intrusion detection, and regular security monitoring
• Secure Development: Code review processes, dependency scanning, and vulnerability assessments

4.3 Data Breach Response

• Incident Response Plan: Documented procedures for detecting, reporting, and responding to security incidents within 72 hours
• User Notification: Affected users will be notified within 72 hours of discovering any breach involving personal data
• Regulatory Compliance: Breach notifications to relevant authorities as required by applicable data protection laws
• Mitigation Measures: Immediate containment, investigation, and remediation procedures with security improvements

4.4 Ongoing Security Measures

• Regular Security Audits: Periodic security assessments and regular third-party penetration testing
• Software Updates: Regular security patches and updates to all systems and dependencies
• Employee Training: Ongoing security awareness training for all personnel with access to user data
• Monitoring and Logging: Continuous monitoring of system access with detailed audit logs and anomaly detection
• Data Minimization: Collection and retention of only necessary data with regular purging of outdated information

4.5 Payment and Financial Data Protection

• PCI DSS Compliance: Payment processing through certified payment processors that maintain PCI DSS Level 1 certification
• No Card Storage: We do not store credit card numbers, CVV codes, or other payment card data on our servers
• Tokenization: Payment methods are tokenized through secure payment processors
• Fraud Detection: Advanced fraud detection and prevention measures through payment processing partners

5. Third-Party Services

We integrate with the following types of third-party services:

• Social Media Platforms: Various social media platforms for content posting
• Payment Processing: Secure payment processors for billing
• Content Generation: AI and content generation services
• Email Services: Email delivery services for notifications
• Cloud Storage: Secure cloud storage for content and data

Each service has its own privacy policy, and we recommend reviewing them.

6. Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion
• Generated Content: Videos and content may be retained for service functionality
• OAuth Tokens: Automatically refreshed or deleted when you disconnect accounts
• Payment Data: Billing records retained as required by law (handled by Stripe)

7. Your Rights

You have the right to:

• Access: Request access to your personal data
• Correction: Update or correct your personal information through your profile settings
• Deletion: Request deletion of your account and associated data
• Portability: Request a copy of your data in a machine-readable format
• Withdrawal: Withdraw consent for data processing (may limit service functionality)

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

10. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.