Privacy Policy

Docs2Video.com ("Docs2Video," "we," "us," or "our") operates the website docs2video.com and the Docs2Video platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using Docs2Video, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Name and email address
• Password (stored securely via Supabase Auth with industry-standard hashing)
• Profile information you choose to provide (company name, brand settings, logo)

1.2 Uploaded Documents and Content

When you use our service, we collect and process:

• Documents you upload (PDFs, text files, and other supported formats)
• Text, ideas, or other content you submit for video generation
• Generated content including slides, narration scripts, and videos
• Brand assets you upload (logos, color schemes, fonts)

1.3 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not store your full credit card number, CVV, or bank account details on our servers. We receive and store only:

• Last four digits of your card number (for display purposes)
• Card brand and expiration date
• Billing address
• Subscription plan and payment history
• Stripe customer ID

1.4 Usage Data

We automatically collect certain information when you use our platform:

• IP address and approximate location
• Browser type, device type, and operating system
• Pages visited and features used
• Date and time of access
• Referring URL
• Video generation history and credit usage

1.5 Demo Submissions

If you submit a website URL for a free demo video, we will access and temporarily cache the publicly available content at that URL to generate your demo. This content is processed in the same manner as uploaded documents (see Section 3).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Docs2Video platform
• Process your documents and generate video explainers
• Process payments and manage your subscription
• Send transactional emails (account confirmations, password resets, billing receipts, video completion notifications)
• Improve and optimize our service
• Respond to customer support requests
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

3. AI Data Processing Disclosure

Docs2Video uses artificial intelligence to transform your documents into video content. It is important that you understand how your data is processed by our AI partners:

3.1 Google Gemini (Document Analysis & Image Generation)

When you upload a document or submit content for video creation, the text and relevant data from your document is sent to Google's Gemini AI service for analysis. Gemini processes your content to extract key information, generate structured slide content, create narration scripts, and generate presentation imagery. Google processes this data pursuant to their Cloud Data Processing terms. We use Gemini's API, and Google does not use your data submitted via the API to train their models.

3.2 OpenAI (Text-to-Speech)

The narration scripts generated for your videos are sent to OpenAI's text-to-speech (TTS) service to produce voiceover audio. OpenAI processes this text solely to generate the audio output. Per OpenAI's API data usage policy, data submitted through the API is not used to train their models.

3.3 Your Rights Regarding AI Processing

You retain ownership of all content you upload. Our use of AI services is solely to provide you with the video generation functionality you have requested. If you do not wish for your content to be processed by these AI services, please do not upload documents or use the video generation features of the platform.

4. Data Sharing and Third-Party Service Providers

We do not sell your personal information. We share your data only with the following service providers, and only to the extent necessary to operate the Docs2Video platform:

• Supabase — Authentication, database storage, and file storage (uploaded documents, generated videos). Hosted in the United States.
• Google (Gemini AI) — Document analysis, content extraction, slide generation, and image generation.
• OpenAI — Text-to-speech audio generation for video narration.
• Stripe — Payment processing for subscriptions and credit pack purchases.
• Resend — Transactional email delivery (account notifications, receipts).
• Vercel — Web application hosting and content delivery.

We may also disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal proceedings, a court order, or legal process; protect and defend our rights or property; or act in urgent circumstances to protect the personal safety of users or the public.

5. Data Retention

• Uploaded documents: Your original uploaded documents are processed for video generation and are not permanently stored after processing is complete. Processed content may be temporarily cached to allow you to regenerate or edit your videos.
• Generated videos: Videos you create are stored in Supabase storage and remain available in your account until you delete them or close your account.
• Account data: Your account information is retained for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it.
• Payment records: Transaction records are retained as required for tax, accounting, and legal compliance purposes.
• Demo content: Website content scraped for free demo video generation is cached temporarily and deleted after demo delivery.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of any inaccurate personal data.
• Deletion: Request deletion of your personal data and account.
• Export: Request a portable copy of your data in a machine-readable format.
• Restriction: Request that we restrict processing of your personal data.
• Objection: Object to certain types of data processing.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@docs2video.com. We will respond to your request within 30 days.

7. Children's Privacy

Docs2Video is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly. If you believe a child under 18 has provided us with personal information, please contact us at support@docs2video.com.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication via Supabase Auth with password hashing
• Row-level security policies on database tables to prevent unauthorized access
• Regular security reviews of our infrastructure and code
• Access controls limiting employee access to personal data
• Secure API key management for third-party service integrations

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Docs2Video is based in the United States, and our primary data infrastructure (Supabase, Vercel) is hosted in the United States. If you access Docs2Video from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

By using Docs2Video, you consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy. Where required by applicable law, we ensure appropriate safeguards are in place for international data transfers, such as Standard Contractual Clauses approved by the European Commission.

10. Notice to California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, please contact us at support@docs2video.com. We will verify your identity before processing your request.

11. Notice to European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:

Legal Bases for Processing

We process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide you with the Docs2Video service (account management, video generation, billing).
• Legitimate interests: Processing for fraud prevention, security, service improvement, and customer support.
• Consent: Where you have given explicit consent (e.g., marketing communications).
• Legal obligation: Processing required to comply with applicable laws.

Data Protection Officer

For GDPR-related inquiries, please contact us at support@docs2video.com.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.

12. Publicly Shared Videos

Docs2Video allows you to share generated videos via public links. Please be aware of the following:

• When you create a share link for a video, that video becomes accessible to anyone who has the link.
• Shared videos may be viewed without requiring authentication or a Docs2Video account.
• You are responsible for controlling the distribution of your share links. If you share a link publicly, the video content will be publicly accessible.
• You can revoke a share link at any time from your dashboard, which will immediately prevent further access.
• We do not index shared videos in search engines. However, we cannot control whether recipients of your link further distribute it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we may also send you a notification via email. Your continued use of Docs2Video after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: