1. Acceptance

By using PeakMV, you accept this Privacy Policy. We may update this policy at any time without prior notice. Continued use constitutes acceptance of changes.

2. Data Collection

We collect the following categories of information:

Account Information: Email address, name, profile data from authentication providers
Uploaded Content: Audio files, project titles, custom prompts, video concepts
Payment Information: Billing data (processed by third-party payment processors; we do not store full card numbers)
Usage Data: Features used, video generation history, session duration
Technical Data: IP address, browser type, device information, operating system
Cookies: Session cookies for authentication and preferences

3. Data Use & Legal Basis

We process your data for the following purposes and legal bases:

Service Provision (Contract Performance): To provide AI video generation services and deduct credits when videos are generated
Payment Processing (Contract Performance): To process credit purchases via third-party payment processors (credits are purchased in advance and deducted when generating videos)
Account Management (Contract Performance): To create and manage user accounts, track credit balances, and maintain project history
Service Improvement (Legitimate Interest): To analyze usage and improve functionality
Security (Legitimate Interest): To detect fraud and prevent abuse
Legal Compliance (Legal Obligation): To comply with applicable laws and regulations

4. Third-Party Data Processing

We share your data with the following categories of third-party processors:

Authentication & Database Providers: Store user accounts and project data
AI Processing Services: Process audio for transcription and generate video content
Payment Processors: Handle payment transactions securely
Cloud Infrastructure Providers: Host application and store files

These processors operate under their own privacy policies. We use processors that provide adequate data protection. We are not responsible for third-party data practices beyond our contractual agreements.

5. Security & Retention

Security: We use industry-standard security measures including encryption (HTTPS/TLS), access controls, and secure authentication. However, no method of transmission or storage is 100% secure. You use the Service at your own risk.

🔐 Payment Security (PCI Compliance)

We do not store your credit card details. All payment processing is handled by Stripe, a PCI-DSS Service Provider Level 1 certified processor.

Your credit card information is never sent to our servers.
We only store a secure "Reference ID" (token) that allows us to communicate with Stripe for your specific account.
Even in the event of a database breach, your financial information remains safe in Stripe's secure vault.

Retention Periods:

Account data: Until account deletion or 2 years of inactivity
Project data: Until deletion by user or 1 year of inactivity
Payment records: 7 years (tax/legal compliance)
Usage analytics: 2 years

We may delete inactive projects earlier to manage storage capacity.

6. Your Privacy Rights

Subject to applicable law, you have the following rights:

Access: Request a copy of your personal data
Correction: Update inaccurate or incomplete data
Deletion: Request deletion of your data (subject to legal retention requirements)
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Restriction: Request limitation of processing in certain circumstances
Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact support@peakmv.com. We will respond within 30 days (or as required by law). Some data may be retained for legal compliance.

7. Data Sharing

We do not sell your data. We may share information with service providers, for legal compliance, business transfers, or to protect our rights and safety.

8. International Transfers

Your data may be processed in countries with different data protection laws. By using our Service, you consent to such transfers.

9. Regional Privacy Rights

European Economic Area (GDPR)

If you are in the EEA, you have rights under GDPR including:

Right to access, rectification, erasure, restriction, portability, and objection (as detailed in Section 6)
Right to withdraw consent at any time
Right to lodge a complaint with your local supervisory authority

Data Controller: PeakMV
Contact: support@peakmv.com

California (CCPA/CPRA)

California residents have rights including:

Right to know what personal information is collected, used, and shared
Right to delete personal information
Right to opt-out of sale/sharing (we do not sell or share personal information)
Right to correct inaccurate information
Right to limit use of sensitive personal information
Right to non-discrimination for exercising these rights

To exercise CCPA rights, email support@peakmv.com with "CCPA REQUEST" in the subject line.

10. Children's Privacy

Our Services are not for users under 18. We do not knowingly collect data from children. If discovered, we delete it immediately.

11. Contact

For privacy inquiries, contact: support@peakmv.com