Privacy Policy

Last updated: May 2026

Data Controller

STYLVS ("we," "us," "our") is the data controller responsible for your personal data. For all privacy inquiries, contact us at privacy@stylvs.app. We will respond within 30 days.

What we collect

Account data: email address and hashed password (scrypt). If you sign in with Google or Discord, we store your OAuth provider ID and email — no password is stored for OAuth accounts.
Two-factor authentication: if you enable authenticator-app 2FA (TOTP), we store an encrypted TOTP seed. It is deleted when you disable 2FA. We never store SMS-based codes.
Usage data: number of clips processed per day for quota enforcement.
Video content: files you upload, temporarily stored for processing and deleted within 24 hours.
Clip feedback: ratings, re-edit patterns, and notes you submit to improve future clips (opt-in only).
Behavioral signals (opt-in): anonymized signals such as clip score, duration edits, and caption style choices, used to improve the recommendation system. These are never linked to identifiable video content.
Payment data: we do not store card details. Stripe handles all payment data on our behalf.

Legal basis for processing (GDPR)

Contract performance (Art. 6(1)(b)): processing your email, usage data, and video content to provide the clipping service you signed up for.
Consent (Art. 6(1)(a)): AI training signals, marketing communications, and optional 2FA enrollment — you can withdraw consent at any time.
Legitimate interest (Art. 6(1)(f)): platform-wide quality monitoring and fraud prevention, using aggregated anonymized signals only.
Legal obligation (Art. 6(1)(c)): retaining records as required by applicable tax and consumer protection law.

How we use your data

To process your videos and generate clips
To enforce usage limits and billing
To verify your identity via email, Google OAuth, Discord OAuth, or authenticator app
To personalize clip selection based on your feedback (opt-in only)
To send transactional emails (email verification, password reset, clip notifications)
To run platform-wide AI quality monitoring and style learning that improve clip recommendations (aggregate signals only)

Automated AI agent system

STYLVS runs background agents that periodically analyze aggregated, anonymized platform signals — clip scores, edit patterns, caption style adoption — to improve AI scoring models and style recommendations. These agents never access identifiable user data and never make decisions about individual accounts. No video content is ever processed by these agents.

What we do not do

We do not sell your personal data to third parties
We do not use your video content to train AI models without your explicit opt-in consent
We do not collect data from children under 13 (see Age Restriction in our Terms of Service)
We do not use tracking cookies or advertising pixels

Third-party services

Stripe — payment processing. We share your email with Stripe for billing. Stripe Privacy Policy
Google — optional OAuth login and AI clip scoring via Gemini API (your video transcript is sent, not the video). Google Privacy Policy
Discord — optional OAuth login. We receive your Discord user ID and email when you choose to sign in with Discord. Discord Privacy Policy
OpenAI — content safety screening. Individual frames from your video are sent for moderation. OpenAI Privacy Policy
OpenRouter — optional AI scoring provider. Your video transcript may be routed through OpenRouter if configured. OpenRouter Privacy Policy
Resend — transactional email delivery. Your email address is passed to Resend to send verification and password reset emails. Resend Privacy Policy
Twilio — optional SMS alert system used only by the platform operator. No user data is sent via SMS. Twilio Privacy Policy

Data retention

Uploaded videos: deleted within 24 hours of processing completion
Generated clips: deleted within 24 hours
Account and usage data: retained until you delete your account
Email tokens (password reset, verification): expire after 1 hour and are deleted immediately after use
TOTP seed: deleted when you disable two-factor authentication
Anonymized behavioral signals (opt-in): retained in 90-day rolling windows

Your rights

Depending on where you live, you have the following rights regarding your personal data:

Access: request a copy of the data we hold about you
Rectification: correct inaccurate or incomplete data
Erasure: delete your account and all associated data via Settings → Delete Account. Data is permanently removed within 30 days.
Portability: export all your data in machine-readable format via Settings → Export Data
Objection: object to processing based on legitimate interest
Withdraw consent: opt out of AI training at any time from Account Settings without affecting your subscription

EU and UK residents have the right to lodge a complaint with your national data protection authority if you believe your data is being processed unlawfully. A list of EU supervisory authorities is available at edpb.europa.eu.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to: (1) know what personal information we collect and how it is used; (2) request deletion of your personal information; (3) opt out of the sale of your personal information. We do not sell your personal information. To exercise your rights, email privacy@stylvs.app. We will not discriminate against you for exercising any of these rights.

Data breach notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and, where required by law, the relevant supervisory authority within 72 hours of becoming aware of the breach.

Cookies and local storage

We store your API key in localStorage (not a cookie) so it persists across sessions without a server-side session. We use a short-lived cookie only during OAuth flows (Google/Discord login) — this cookie expires when you close the browser and contains no personal data. We do not use tracking cookies, advertising pixels, or analytics scripts.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by displaying a notice in the app. Continued use after notification constitutes acceptance.

Contact

For privacy questions or to exercise your rights: privacy@stylvs.app

← Back to app