Privacy policy

We only collect what we need to run the product:

• Account data. Email, name, and avatar from Google OAuth, plus the OAuth refresh tokens we need to keep your session alive.
• Channel persona. The brief you give Aana during onboarding — narrator voice, visual style, target language and register, example channels you cited as references.
• Generated content. The script, prompts, images, video clips, voiceover, captions, and final 4K master for every video you queue. These remain in your account until you delete them.
• Payment metadata. A Stripe customer ID, subscription status, invoice numbers, and the credits ledger. We never see or store your card details — Stripe handles all of that.
• Usage signals. Page views, generation requests, stage approvals and rejections, debits and refunds. We use these to debug the pipeline and bill credits accurately.
• BYO API keys. If you paste your own OpenAI / Gemini / Grok / ElevenLabs key to skip credit cost, we encrypt it at rest using an envelope (AES-256-GCM) scheme. The data-encryption key is held by our key-management service and never written to disk in plaintext.
• Operational logs. Request IDs, timings, and stack traces for failures, retained for 90 days.

The pipeline calls third-party providers to do the actual AI work. Each is invoked only for the stage that needs it, and only with the inputs that stage requires:

• OpenAI / Azure OpenAI — script generation and Whisper caption transcription.
• Google Gemini — image generation for storyboard frames and thumbnails.
• xAI Grok — video clip generation.
• ElevenLabs — text-to-speech narration in your chosen voice.
• Anthropic — the onboarding agent Aana that captures your persona.
• Stripe — payment processing and the customer portal.
• Google — sign-in via OAuth.
• Amazon Web Services — application hosting, the Postgres database, and S3 object storage for your generated assets.
• Telegram — only if you opt in, to send you a completion ping when a video finishes rendering.

When you pick "BYO" for a provider, calls are billed against your own account at that provider and our role is purely to relay the request. Each provider has its own privacy policy that applies to the data you route through them.

We do not train machine-learning models — ours or anyone else's — on the scripts, images, clips, voiceovers, or final videos you produce here. We do not sell your personal data. We do not show advertising. We do not share your generated content with any party other than the providers listed above, and only for the narrow purpose of producing the next stage.

Generated assets (scripts, images, clips, masters, thumbnails) stay in your gallery for as long as your account is active. Deleting a video purges its assets from our object storage within 30 days. Deleting your account removes account data within 30 days, with the following carve-outs required by law:

• The credits ledger and billing records are retained for 7 years to meet Indian tax and accounting obligations.
• Operational logs are retained for 90 days regardless of account state.
• If we are responding to a legal request, we may keep the data for as long as the request requires.

You can, at any time:

• Access — request a copy of the data we hold about you.
• Correct — fix anything inaccurate from your account page.
• Export — download every script, image, clip and master from your gallery; we provide a one-click ZIP export from the Account page.
• Delete — wipe your account and all assets (subject to the legal retention carve-outs in §4).
• Withdraw consent — turn off optional features (Telegram pings, BYO key storage, model-improvement opt-ins) at any time.

These rights are grounded in India's Digital Personal Data Protection Act, 2023 for our Indian users and in the GDPR for users in the European Economic Area. We extend the same rights to every user regardless of where you live.

Transport is HTTPS-only. Secrets in our infrastructure are stored in AWS Secrets Manager and BYO API keys are envelope-encrypted (AES-256-GCM) with the data-encryption key referenced as local-kms-v1. Database backups are encrypted at rest. Access to production systems is restricted and audited. We will notify affected users of a personal-data breach as soon as we confirm one — and within the 72-hour window the GDPR requires.

Our infrastructure runs in AWS's ap-south-1 (Mumbai) region. AI providers (OpenAI, Google, xAI, ElevenLabs, Anthropic) process requests in their own regions, which may include the United States. By using LongformHQ, you consent to your data being sent to those providers for the stage that needs them.

LongformHQ is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

Per the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the following officer is designated to handle grievances raised by users of LongformHQ.

• Name: [Founder Name — to be filled before launch]
• Email: [email protected]
• Address: Bengaluru, Karnataka, India
• Response SLA: we acknowledge every grievance within 48 hours of receipt and resolve it within 30 days.

For general account or support questions that are not grievances, please continue to write to [email protected].

We'll announce material changes by email and via a banner in the app. The "last updated" date at the top of this page always reflects the most recent revision. Continued use after a change means you accept the updated policy.