Privacy Policy
Last updated: July 2026
This policy explains what Clavid collects, why we collect it, who we share it with, and the choices you have. We aim to collect only what we need to run the service.
1. Who we are
Clavid ("Clavid", "we", "us") operates the service available at clavidai.com.
- Data controller: Ali Emir Beceren
- Contact for privacy matters: privacy@clavidai.com
If you are in the European Economic Area or the United Kingdom, we act as the controller for the personal data described below. If you are in Türkiye, we act as the "veri sorumlusu" (data controller) under Law No. 6698 on the Protection of Personal Data (KVKK).
2. Information we collect
Account information. Your name, email address, and authentication credentials. If you sign in with a magic link, we record the sign-in events associated with your account.
Content you submit. The topics, prompts, scripts, and any other inputs you provide to generate a video, along with the videos, audio, images, and text that the service produces for you.
Billing information. We do not collect or store your card details. Payments are processed by Paddle, our Merchant of Record, which collects your payment method, billing address, and tax location directly. We receive only the transaction record (plan, amount, status, country) needed to provision your account.
Usage and technical data. Log data such as IP address, browser and device characteristics, timestamps, pages visited, and actions taken in the app. We also generate a device fingerprint — a non-reversible identifier derived from browser and device characteristics — which we use solely to detect abuse of the Free plan, such as one person creating many accounts to obtain repeated free credits.
Support communications. If you email us, we keep the message and our reply.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and operating your account | Performance of a contract |
| Generating videos you request | Performance of a contract |
| Metering and deducting credits | Performance of a contract |
| Processing payments and issuing invoices | Performance of a contract / legal obligation |
| Preventing fraud and abuse of free credits | Legitimate interests |
| Diagnosing errors and improving reliability | Legitimate interests |
| Sending service and account emails | Performance of a contract |
| Sending product or marketing emails | Consent (you may withdraw at any time) |
| Complying with tax and accounting law | Legal obligation |
We do not sell your personal information, and we do not share it with advertisers.
We do not use your prompts or generated videos to train our own AI models.
4. Service providers we rely on
We use the following third parties to deliver Clavid. Each processes data only to provide its part of the service, under a contract that restricts what it may do with that data.
| Provider | Role | What it receives |
|---|---|---|
| Supabase | Authentication and database | Account details, usage records |
| Cloudflare R2 | Media storage | Your generated videos and assets |
| Vercel | Application hosting | Request logs, IP address |
| Paddle | Merchant of Record — payments, tax, invoicing | Name, email, billing address, payment method, tax location |
| fal.ai | AI visual generation | The visual prompts derived from your input |
| ElevenLabs | Voice synthesis | The script text to be narrated |
| Pexels / Pixabay | Stock media | Search queries only |
| OpenAI | Script and scene generation | Your topic and related prompt text |
| Resend | Transactional email delivery | Your email address and message content |
We may add or change providers as the service evolves. Material changes will be reflected in this page.
5. International transfers
Our providers are located in various countries, including the United States and the European Union. This means your personal data may be transferred outside your country of residence, including outside the EEA, the UK, and Türkiye.
Where such transfers occur, we rely on appropriate safeguards — typically the European Commission's Standard Contractual Clauses, or, for transfers from Türkiye, the mechanisms permitted under Article 9 of the KVKK.
6. Retention
- Generated videos and assets: retained for the period shown on the pricing page for your plan. After that period they are deleted from storage.
- Account data: retained for as long as your account is active.
- After account deletion: we delete your account data and generated media within 30 days, except where we must retain records longer.
- Billing and tax records: retained for the period required by applicable tax law (typically 10 years in Türkiye), even after account deletion.
- Abuse-prevention signals: retained for up to 12 months.
- Server logs: retained for up to 90 days.
7. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority.
To exercise any of these, email privacy@clavidai.com. We will respond within 30 days.
If you are in the EEA or UK, you may complain to your local data protection authority. If you are in Türkiye, you may apply to us first under Article 13 of the KVKK and, if unsatisfied, complain to the Kişisel Verileri Koruma Kurumu (KVKK Authority).
8. Cookies and similar technologies
We use strictly necessary cookies only — to keep you signed in and to secure your session. These cannot be disabled without breaking the service.
We do not currently use analytics, advertising, or cross-site tracking cookies. If we add analytics in the future, we will update this section before doing so.
You can clear or block cookies in your browser settings, but the app will not function correctly without the necessary ones.
9. Security
We protect your data with encryption in transit (HTTPS), encryption at rest for stored media and database records, row-level access isolation so that one account cannot read another's data, and access controls limiting who can reach production systems.
No system is perfectly secure. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as required by law.
10. Age requirement
Clavid is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a minor has created an account, contact privacy@clavidai.com and we will delete it.
11. Changes to this policy
We may update this policy as the service changes. When we do, we will revise the "Last updated" date above. If a change materially affects your rights, we will notify you by email before it takes effect.
12. Contact
Questions, requests, or complaints: privacy@clavidai.com General support: support@clavidai.com
Postal address (data controller): Ali Emir Beceren Apt. 4, No. 51, 326th Street, Efeler Neighborhood 35380 Buca, İzmir, Türkiye