Privacy Policy
Last updated: August 23, 2026
This Privacy Policy explains how Filmera, Inc. (“Filmera,” “we,” “us”) collects, uses, discloses and protects personal information when you visit filmera.ai or use the Filmera application (together, the “Service”). It applies to visitors, waitlist registrants and account holders.
Filmera is an AI production workflow for creative teams. Using it means sending prompts and reference media to third-party AI model providers on your behalf — Section 4 explains exactly what that involves, because it is the part of this policy most specific to our Service.
1. Information we collect
Information you give us
- Account information. Your email address. If you sign in with Google, we receive your email address, name and profile picture from Google — we never receive your Google password.
- Waitlist and onboarding answers. Optional responses about your occupation and your experience with AI film tools, plus your marketing-email preference.
- Your content. Prompts, project and scene descriptions, uploaded images, video and audio, timelines, and the media generated from them.
- Support communications. Messages and attachments you send through in-app support or by email.
- Payment information. Payments are processed by Stripe. We receive a transaction record, the plan or credit pack purchased, and limited card metadata (such as brand and last four digits). We never receive or store full card numbers.
Information collected automatically
- Usage and device data. Pages viewed, features used, IP address, browser and device type, approximate location derived from IP, and timestamps.
- Session recordings. Our product analytics provider records user-interface sessions to help us diagnose usability problems. Text entered into input fields is masked before it leaves your browser, and prompt and chat surfaces are additionally masked.
- Diagnostics. Error reports containing the failing operation, your account identifier and technical context. Prompt text is excluded from error reports.
- Cookies and similar technologies. See Section 7.
2. How we use information
- Provide, operate and secure the Service, including authentication.
- Generate media you request by transmitting your prompts and reference files to AI model providers (Section 4).
- Process payments, track credit balances and prevent billing abuse.
- Respond to support requests.
- Analyze usage to fix defects and improve features, and to measure whether marketing campaigns are effective.
- Send transactional email (sign-in codes, receipts, credit and account notices) and, where you have opted in, product announcements. You can opt out of marketing email at any time; transactional email is required to operate your account.
- Detect, investigate and prevent fraud, abuse and violations of our Terms.
- Comply with legal obligations and enforce our agreements.
We do not use your prompts, uploads or generated media to train our own AI models. We do not control whether third-party model providers train on data submitted to them; see Section 4.
3. Legal bases
Where a legal basis is required, we rely on: performance of our contract with you (providing the Service); our legitimate interests (security, product improvement, fraud prevention); your consent (marketing email, non-essential cookies); and compliance with legal obligations.
4. AI model providers — what leaves our systems
When you generate media, we transmit your prompt text and links to any reference images, video or audio you attached to the model provider that runs the model you selected. Reference media is shared as a time-limited public link to our storage so the provider can fetch it.
The vendor that receives your submission depends on the model you select; the model name is shown in the interface before you generate. Model vendors we currently work with include ByteDance (Seedance), Google (Veo, Gemini image models), Kuaishou (Kling), MiniMax, xAI (Grok) and OpenAI. For some models the request is routed through an intermediary AI infrastructure provider acting on our behalf.
These providers process your submissions under their own terms and privacy policies, and their retention and model-training practices are outside our control and may change. If your prompts or reference media contain confidential material, treat submitting them the same way you would treat sending them to any external vendor.
5. How we share information
We do not sell personal information. We share it only as described here:
| Recipient | Purpose |
|---|---|
| Supabase | Database, authentication and account records |
| Cloudflare (R2) | Storage and delivery of your uploaded and generated media |
| Vercel, Railway | Application hosting and background media processing |
| Stripe | Payment processing and subscription billing |
| PostHog | Product analytics and session recordings |
| Sentry | Error monitoring and diagnostics |
| Resend | Transactional and marketing email delivery |
| Slack | Routing your support messages to our team |
| Google (Tag Manager, Analytics) | Website measurement on our marketing pages |
| AI model providers | Generating the media you request (Section 4) |
We also disclose information when required by law or valid legal process; to protect the rights, safety or property of Filmera, our users or the public; and in connection with a merger, acquisition or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.
6. Retention
- Account data is retained while your account is active.
- Your content is retained until you delete it or delete your account. Deleting media in the app removes it from your library and from our object storage; short-lived backups and provider-side copies may persist for a limited period.
- Operational records — generation job history, credit ledger entries, invoices — are retained as needed for support, accounting and legal obligations. Completed job records are pruned on a rolling basis.
- Analytics and diagnostics are retained according to our providers’ configured retention windows.
7. Cookies and tracking
We use cookies and similar technologies that are strictly necessary to keep you signed in and to secure the Service; analytics cookies to understand product usage; and, on our marketing pages, measurement tags that may set advertising cookies. You can block or delete cookies in your browser, but strictly necessary cookies are required for sign-in to work.
We honor Global Privacy Control (GPC) signals where required by law as a request to opt out of sale or sharing for cross-context behavioral advertising.
8. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your personal information; to opt out of the sale or sharing of personal information and of targeted advertising; to limit the use of sensitive personal information; and to appeal a denied request. We will not discriminate against you for exercising these rights.
California residents (CCPA/CPRA). In the preceding 12 months we collected the categories described in Section 1 (identifiers, commercial information, internet activity, approximate geolocation, and user-generated content) for the purposes in Section 2, and disclosed them to the service providers listed in Section 5. We do not sell personal information and do not knowingly share it for cross-context behavioral advertising beyond the marketing-page measurement described in Section 7, which you can opt out of by blocking those cookies or sending a GPC signal.
Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana) have substantially similar rights and may exercise them the same way.
EEA, UK and Switzerland (GDPR). If you are in these regions, we process your personal information on the legal bases of performing our contract with you, our legitimate interests in operating, securing and supporting the Service, and your consent where required. You also have the rights to object to or restrict processing, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority. If you ask us to erase your account (“right to be forgotten”), we will delete your account, content and personal information; records we are legally required to keep (such as billing and accounting records) are retained only as long as the law requires.
To exercise any right, email yongjun [at] filmera.ai from the address associated with your account, or use in-app support. We will verify your request and respond within the period required by applicable law. You may use an authorized agent where the law permits.
9. Security
We protect data in transit with TLS, isolate each account’s data with row-level database security, restrict administrative access to a small number of personnel, and store media in access-controlled object storage. No system is perfectly secure; we cannot guarantee absolute security.
10. International users
Filmera is operated from the United States and our providers process data in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in and processed in the United States, where privacy laws may differ from those in your country.
11. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Account holders must meet the age requirement in our Terms of Service. If you believe a child has provided us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the Service evolves. We will revise the “Last updated” date above and, for material changes, provide additional notice by email or in the app before the change takes effect.
13. Contact
Filmera, Inc.
131 Continental Dr, Suite 305, Newark, DE 19713, USA
yongjun [at] filmera.ai
