Privacy Policy

Effective Date: February 8, 2026

1. Introduction

HelioVideo ("we" or "us") values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

2. Information We Collect

We collect the following types of information:

  • Account Information: When you register, we collect your email address, username, and profile picture.
  • Usage Data: We collect information about how you interact with our service, such as the types of videos you generate, frequency of use, and access times.
  • Input Content: Images, text, or other inputs you upload to generate videos.
  • Generated Content: Video content you generate using our service.

3. How We Use Your Information

We use the collected information for the following purposes:

  • To provide, maintain, and improve our services.
  • To process your transactions and manage your credits.
  • To send you relevant notifications, including service updates and security alerts.
  • To monitor and analyze trends, usage, and activities to improve user experience.
  • To detect, investigate, and prevent fraud and other illegal activities.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and analyze usage. Categories:

  • Essential cookies: Session authentication (Better Auth), CSRF protection, and load balancing. Disabling these prevents sign-in.
  • Preference cookies: Remember language, theme, and similar user preferences.
  • Analytics cookies: Anonymous usage statistics (PostHog) to help us improve the Service.

You can manage or disable cookies through your browser settings. Disabling analytics cookies does not affect functionality.

5. Third-Party Service Providers

To operate the Service, we share the minimum necessary data with the following processors, each governed by its own privacy policy:

  • Google OAuth: Third-party sign-in (email, name, profile picture).
  • Creem: Payment processing, subscription management, invoicing.
  • Cloudflare R2: Storage of generated videos and uploaded images.
  • Resend: Transactional email delivery (Magic Link, notifications).
  • PostHog: Anonymous product analytics to understand feature usage.
  • AI providers (Evolink, Kie, etc.): Processing of video-generation requests, including your prompts and any reference images/videos you provide.

We do not sell or rent your personal information. We may also disclose information when required to comply with legal obligations, court orders, or to protect the rights, property, or safety of us, our users, or the public.

6. Data Security

We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

  • Account data: Retained while your account is active; deleted from production within 30 days after account deletion, and from backups within 90 days.
  • Generated videos: Stored in your account indefinitely until you delete them.
  • Payment and credit transaction records: Retained for 7 years to comply with tax and accounting regulations.
  • Logs and analytics data: Retained for up to 12 months.

8. Your Rights

Depending on applicable law, you may have the right to access, correct, or delete your personal data; object to or restrict processing; request data portability; and withdraw consent. You may exercise these rights via account settings or by emailing [email protected]. We will respond within 30 days.

8.1 GDPR (EU / UK Users)

Our legal bases for processing include: performance of contract (providing the Service), legitimate interests (security and fraud prevention), your consent (marketing emails and optional analytics), and legal obligations. You have the right to lodge a complaint with your local data protection authority.

8.2 CCPA / CPRA (California Residents)

California residents have the right to: know the categories of personal information we collect, use, and share; request deletion of personal information; opt out of "sale" or "sharing" of personal information (we do not sell personal information); and not be discriminated against for exercising these rights. Submit requests to [email protected].

9. Children's Privacy

Our services are not intended for children under 13 (or other age as required by local law). If we discover we have collected personal information from children, we will take steps to delete it as soon as possible.

10. Changes to Policy

We reserve the right to update this Privacy Policy at any time. If we make material changes, we will notify you through the service or by email.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: [email protected]