Privacy Policy

1. Data Controller

1.1. Identification and Contact. AI Video Check is operated by AI Video Check (Individual Entrepreneur registered in Ukraine). The Controller determines the purposes and means of processing your personal data. For any questions or requests relating to your personal data, you may contact us at: support@aivideocheck.net

1.2. Responsibilities. As Data Controller, we are responsible for:

• Implementing appropriate technical and organizational measures to safeguard your data;
• Processing data only on valid legal grounds and in strict accordance with this Privacy Policy;
• Responding to your rights requests (access, correction, deletion, portability, objection) within 30 calendar days.

2. Personal Data Collected

2.1. Registration Data. When you register for an account (free or paid), we collect your email address, store a hashed password (using industry-standard hashing algorithms such as bcrypt), and (optionally) your chosen display name or avatar. This information is used solely to identify you within the Service and to secure your access.

2.2. OAuth Data (Google Sign-In). If you sign in via Google, we receive from Google only the minimal profile information you expressly consent to share: your Google-registered email address, full name, and profile picture URL. We do not store additional Google account data (contacts, calendar, etc.).

2.3. Video-Related Data. Metadata: when you submit a video (file upload or URL), we record the original file name or URL, file size, media type, and the date/time of submission. Technical Fingerprint: the submitted video file itself is never stored beyond the moment of analysis. To speed up repeated checks and reduce load, for checks performed via a public link we may retain, for up to twenty-one (21) days, a compact technical fingerprint consisting of a cryptographic checksum (hash) of the media and a numeric feature vector (embedding) derived from it. This fingerprint cannot be used to reconstruct or view the original video and does not by itself identify you. Preview Images:

• Free users: a temporary Base64-encoded thumbnail is generated on-the-fly for immediate display and is not persisted on our servers.
• Paid users: a single frozen frame (JPEG/PNG) is stored securely on S3/MinIO for up to 30 days to allow viewing in your history.

Analysis Results: for paid accounts, full history of probability scores, feature metrics is persisted until you delete your account or request data removal.

3. Purpose of Processing

3.1. Service Delivery. We process your registration, authentication data, and video submissions to perform the core functionality of the Service: uploading your video, running AI-based analysis, generating thumbnails, and returning results accurately and promptly.

3.2. Account Management & Security. Your email, password hash, OAuth tokens, and session cookies enable secure login, session continuity, and protection against unauthorized access. We also maintain a mapping of Fingerprint ID to user ID to detect and deter multi-account abuse, ensuring fair use of free-tier resources.

3.3. Fraud Prevention & Quality Assurance. We leverage technical identifiers (User-Agent, cookie, Fingerprint ID) and internal logs to identify suspicious patterns—such as repeated anonymous checks from the same device—and to investigate and prevent misuse, thereby safeguarding both the Service's integrity and user experience.

4. Legal Basis for Processing

4.1. Performance of a Contract. We process your registration details (email, password hash), video submissions, and history of checks in order to fulfil our Terms of Service and provide the core video-analysis functionality you have requested.

4.2. Essential Cookies & Session Technologies.

• Strictly Necessary Cookies (session cookie for Fingerprint ID; authentication cookies) are required for the Service to function and enforce fair-use limits. These are processed on the basis of contract performance and our legitimate interests, and do not require separate opt-in consent.
• Analytics & Advertising Cookies (Google Analytics; advertising networks, where advertising is enabled) are activated only after you have given explicit consent; you may withdraw such consent at any time via your browser settings or by contacting us.

4.3. Legitimate Interests. We process technical identifiers (Fingerprint ID, User-Agent, browser attributes) and internal logs on the basis of our legitimate interest in preventing fraud and multi-accounting, ensuring fair access to free-tier resources, and maintaining the security and integrity of the Service.

5. Data Retention & Deletion

5.1. Ephemeral Files & Previews.

• Video files: automatically deleted immediately after analysis completion. For checks performed via a public link, a compact technical fingerprint (a checksum and a numeric feature vector, from which the video cannot be reconstructed) may be retained for up to twenty-one (21) days to accelerate repeated checks, after which it is deleted.
• Free-user previews: generated on-the-fly as Base64 and never stored.

5.2. Paid-User Data.

• Single-frame previews: securely stored for up to 30 days to enable viewing in your history.
• Analysis history (VideoCheck, Event): retained until you delete your account or explicitly request removal via dashboard or email.

5.3. Account Data & Fingerprint ID.

• Account details (email, password hash, OAuth tokens) are retained until you delete your account.
• You may delete by yourself in the dashboard section or request full deletion of your personal data and history; such requests are completed within 7 business days.

5.4. Data Retention After Downgrade.

• When downgrading from a paid plan to the free tier, your analysis history is retained but is not accessible on the free tier.
• Access to the history is restored when a subscription is purchased again.
• You may delete your history at any time by deleting your account or by contacting support.

6. Data Sharing

6.1. Google Services.

• OAuth: only your Google-registered email, name and profile picture URL are shared with us during sign-in.
• Analytics & Ads: aggregate usage data is shared with Google Analytics under its terms; ad-performance metrics are shared with advertising networks only where advertising is enabled.

6.2. Google Advertising Integration.

• The Service may display third-party advertisements to Free-tier users; advertising is currently disabled.
• Google may use cookies and web beacons to personalize ads and measure performance.
• Where personalized advertising is enabled, you may opt out via your browser settings or the opt-out tools of the relevant advertising network.
• Advertisements and links to third-party sites are provided as a convenience. We do not endorse or control these third parties and are not responsible for their content or privacy practices.

6.3. Payment Processing.

• Payments are processed by our payment partners depending on your location — Monobank for customers in Ukraine, and Paddle.com Market Ltd (acting as Merchant of Record) for customers outside Ukraine. When you make a purchase, the data required to process the payment (e-mail address, amount, invoice identifiers) is handled by the applicable payment partner under its own terms and privacy policy. We never receive or store your full card details. Beyond this, we do not sell, rent or otherwise disclose your personal data to any other external parties.
• All processing happens within our own infrastructure (PostgreSQL, Redis, MinIO/S3, Celery workers).

6.4. Legal Requirements. We may disclose personal data if required by law or valid governmental request (e.g., court order), but only to the minimum extent necessary.

6.5. Public Sharing (optional).

• When you choose to share a result, we create a public page and preview image containing the analyzed video's thumbnail frame and the verdict. This page is accessible to anyone who has the link.
• Sharing is entirely optional and happens only when you click "Share" — no result is made public automatically.
• Shared content is automatically removed after 90 days, or when a registered user deletes their account, whichever comes first.

7. Cookies & Similar Technologies

7.1. Strictly Necessary Cookies.

• Session cookie for Fingerprint ID: required to identify anonymous users and enforce fair-use policies. Cannot be disabled without breaking core functionality.
• Authentication cookies: required for logged-in sessions and account security.

7.2. Analytical & Advertising Cookies.

• Google Analytics: collects anonymous usage metrics (page views, session duration) to help us improve the Service.
• Advertising cookies: used only where advertising is enabled, to serve and measure ads shown to free-tier users. Advertising is currently disabled.

7.3. Managing Cookies.

• You may clear or block non-essential cookies (analytics/advertising) via your browser settings or the opt-out tools provided by the relevant provider.
• Blocking strictly necessary cookies will prevent key Service features (anonymous checks, account sessions) from working correctly.

8. User Rights

8.1. Access & Portability. You may request a copy of all personal data we hold about you, in a structured, commonly used format.

8.2. Rectification & Erasure. You have the right to correct any inaccurate or incomplete personal data. You may request deletion of your personal data and analysis history; we will comply within 7 business days, except to the extent retention is required by law.

8.3. Withdrawal & Objection. You can withdraw consent for analytics/advertising cookies at any time. You may object to processing based on legitimate interests; we will review and, if appropriate, cease processing.

9. Data Security

9.1. Encryption & Transport Security. All data in transit is protected via TLS (HTTPS). Sensitive data (passwords) are stored hashed (bcrypt or equivalent).

9.2. Access Controls & Monitoring. Database and storage access is restricted by role and credentials. Audit logs record administrative access and changes to production systems.

9.3. Regular Audits & Updates. Dependencies and infrastructure components are patched promptly. Periodic security reviews ensure compliance with best practices.

10. Children's Privacy

10.1. Age Restriction. The Service is intended for users aged 18 and older.

10.2. No Minor Data Collection. We do not knowingly collect or process personal data of minors under 18.

10.3. Deletion of Inadvertent Data. If we become aware of any minor's data, we will delete it immediately upon discovery.

11. Account & Data Deletion

11.1. Self-Service Deletion. You may delete your account and all associated data directly in your dashboard.

11.2. Email Requests. Alternatively, send a deletion request to support@aivideocheck.net; we will confirm and complete deletion within 7 business days.

11.3. Post-Deletion. Upon deletion, all personal data (account details, history, previews) will be irreversibly removed from active storage; backups will be purged in accordance with our backup retention schedule.

12. Changes to This Policy

12.1. Amendments. We may update this Privacy Policy at any time to reflect changes in practices or legal requirements.

12.2. Notice of Changes. The "Effective Date" at the top will be revised, and significant amendments will be announced via email or website notice.

12.3. Continued Use. Your continued use of the Service after any update constitutes acceptance of the revised Policy.

13. Governing Law & Jurisdiction

13.1. Applicable Law. This Privacy Policy is governed by the laws of Ukraine, without regard to conflict-of-law principles.

13.2. Jurisdiction. Any disputes arising under or relating to this Privacy Policy shall be brought exclusively in the courts of Ukraine.

13.3. Severability. If any provision is held invalid or unenforceable, the remaining provisions will remain in full force and effect.

14. Contact Information

14.1. Email. For all data-related inquiries or requests, email: support@aivideocheck.net

14.2. Response Time. We aim to respond to all privacy-related requests within 30 calendar days.

14.3. Data Protection Officer. Currently, there is no separate DPO; privacy questions are handled directly by the Service operator.