Privacy Policy

• Account data: your email address and sign-in method (Google or magic-link), via our auth provider (Supabase).
• Videos you upload: the original video file, which may contain faces and voices.
• Derived analysis: per-second perceptual signals, predicted cortical-network activity, an affect/emotion timeline, and a craft score computed from your video.
• Usage + diagnostics: credits used, timestamps, and technical logs needed to run and debug the service.

Our pipeline detects faces in your video and estimates expression probabilities (e.g. happy, surprised). This is a sensitive form of processing. We only do it after you give a separate, specific consent at upload — it is never bundled into general terms — and only to produce your analysis. We do not use it to identify individuals, and we do not sell or share it.

Solely to deliver the analysis you requested and to operate, secure, and improve the service. We do not use your videos for advertising. If we ever wanted to use consented data to improve our models, we would ask you separately first.

Videos and derived artifacts are stored in Google Cloud Storage in the asia-southeast1 (Singapore) region. Account data is held by Supabase. Both are reputable processors with encryption in transit and at rest.

Uploaded videos and their analysis are retained while your account is active. Stored objects automatically move to cooler storage tiers over time and are eligible for deletion under our lifecycle policy. You can delete your data at any time (see below).

When you delete your account we remove your videos and their derived analysis, your consent record, your credit balance, and your sign-in identity — so the email address is free to be used again. Deletion is immediate, not a scheduled job.

Two things deliberately outlive it, and it is worth being precise about what they contain:

• Payment and credit records — what was bought, what a run cost, what was refunded, and when. Indian tax law requires us to keep these, and both the DPDP Act and the GDPR allow retention where another law compels it. They are moved to a separate archive that survives the account, and your email is stored there only as a one-way cryptographic hash — enough for us to match a support query or a chargeback, not enough to contact you or to recover the address. They contain no video and no analysis.
• Operational logs — the records our servers write to run and secure the service. These reference your account by its internal id and are automatically deleted after 30 days.

We keep encrypted backups of those financial records so they survive an infrastructure failure. Backups contain no videos, no analysis and no email addresses.

Depending on where you live (e.g. India's DPDP Act, the EU/UK GDPR), you may have the right to access, correct, or delete your data, to withdraw consent, and to complain to a regulator. You can:

• Delete your account yourself from Settings — this purges your videos, analysis and sign-in identity (see retention above for the billing records we must keep).
• Withdraw consent — after which we stop processing and you can delete your data.
• Email us (below) for any other request.

We do not sell your data. We share it only with the infrastructure providers needed to run the service (Google Cloud, Supabase, Vercel, and our AI model provider for generating written insights), each acting on our instructions.

NeuroVidz is not intended for anyone under 18. Do not use the service or upload videos if you are under 18.

Questions or requests: privacy@neurovidz.com. We'll respond as promptly as we can.