Privacy Policy

1. Who we are

CINOVIX is the home of Cino Pro, our cinematic AI video model. For questions about this policy, contact us at tim.tj.0112@gmail.com.

2. Data we collect

• Session data — an HTTP-only session cookie (cinovix_auth) to keep you logged in. It expires after 7 days.
• Prompts & job data — the video prompts, settings, and generated content you create, stored in our database to power your library.
• Analytics (only with your consent) — page views and feature usage via Google Analytics 4. No personally identifiable information is collected.
• Bug reports — if you submit a bug report by email, we store the content of that email to resolve the issue.
• Waitlist & newsletter — if you join the waitlist we store your email address, the time of signup, and the time you confirmed it (double opt-in), plus whether you opened or clicked our emails. The confirmation record is our proof of consent. You can unsubscribe from any email we send, at any time.

3. Legal basis (GDPR)

• Session cookies: Legitimate interest (necessary to provide the service)
• Job data: Contract performance (you created the content)
• Analytics: Consent (opt-in via cookie banner)
• Waitlist & newsletter: Consent (Art. 6(1)(a) GDPR, given by confirming the double opt-in email; withdrawable at any time via the unsubscribe link)

4. Third-party services

• Cloudinary — generated images are hosted on Cloudinary (cloudinary.com). Their privacy policy applies.
• DashScope / OpenRouter — AI inference for video and image generation. Your prompts are sent to these services to produce output.
• Google Analytics — only loaded when you accept analytics cookies.
• beehiiv — our waitlist and newsletter run on beehiiv (beehiiv.com, USA), which processes your email address, the confirmation of your opt-in, and open and click statistics on our behalf. The signup form on this site is embedded from beehiiv, so opening the page loads content from their servers. Sending is handled by their provider Twilio SendGrid.
• Resend — transactional account emails (email verification, password reset) are delivered via Resend (resend.com, USA). Only your email address and the message itself are processed.

5. Data retention

Job data and generated videos are stored until you delete them from your library. Session cookies expire after 7 days. Analytics data is retained per Google's default retention period (14 months). Newsletter data is kept until you unsubscribe; the double opt-in confirmation record is kept for a further three years after that, because it is the evidence that your consent existed.

6. Your rights

Under GDPR you have the right to access, correct, or delete your data. To exercise these rights, contact us at tim.tj.0112@gmail.com.

You can withdraw analytics consent at any time by clearing your browser's local storage or selecting "Essential only" in our cookie settings.

7. Cookies

8. Changes to this policy

We may update this policy. Significant changes will be communicated via the application. The "last updated" date at the top reflects the most recent revision.