Privacy Policy

1. Introduction

Risk Averse Technology Company ("we," "us," or "our") operates Aegyo Studio. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and handling your data responsibly, especially given the sensitive nature of facial imagery used in our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and password when you create an account
• Photos: Images you upload for video generation
• Payment Information: Processed securely by Stripe; we do not store card details

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, generation history
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, error logs

2.3 Cookies and Tracking

We use essential cookies for authentication and session management. We use Vercel Analytics for anonymous usage statistics. We do not use advertising cookies or sell your data to advertisers.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your photos to generate videos
• Process payments and manage your account
• Send you service-related communications
• Improve and optimize the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Photo and Facial Data Handling

This section is particularly important given the sensitive nature of facial imagery.

4.1 Processing

• Photos are transmitted securely (encrypted) to our AI processing partners
• Photos are used solely to generate your requested video
• We do not use your photos to train AI models
• We do not use facial recognition technology to identify individuals

4.2 Third-Party Processing

Video generation is performed by fal.ai. According to their policies, uploaded content is processed and stored temporarily, with generated files guaranteed available for at least 7 days before potential deletion.

4.3 Storage and Retention

• Free tier: Videos are hosted by fal.ai for approximately 7 days, then may be deleted
• Premium tier: Videos are downloaded and stored permanently in Supabase Storage (encrypted at rest)
• Original uploaded photos are not permanently stored by us

4.4 Deletion

You may request deletion of your account and associated data at any time by contacting us. We will delete your data within 30 days of receiving your request.

5. Information Sharing

We may share your information with:

• Service Providers: fal.ai (AI processing), Supabase (database/storage), Stripe (payments), Vercel (hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for stored data
• Secure authentication practices
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request transfer of your data
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing

To exercise these rights, contact us at privacy@riskaversetechnology.company.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. By using the Service, you consent to such transfers.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will delete it immediately.

You must not upload photos of minors to the Service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. The "Last updated" date at the top indicates when changes were made.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Risk Averse Technology Company
Email: privacy@riskaversetechnology.company