Privacy Policy

What we collect

• Account data: your email address and, if you use Google sign-in, your name and profile picture from Google. Passwords are handled by our authentication provider and are never visible to us.
• What you create: prompts, refinement instructions, images you upload, website links or HTML you provide, and the videos and animation code generated from them.
• Billing: which credit pack you bought, the amount and the Razorpay order/payment IDs. Card, UPI and bank details are entered on Razorpay's checkout and never reach our servers.
• Usage and credits: a ledger of credits granted and spent, and product events such as which model or pack you chose (used to improve the product and pricing).
• Attribution: when you arrive from a link with campaign parameters (utm_*), a partner link (/r/…) or another website, we store the source, the page you landed on and the referring site in a first-party cookie and copy it to your account when you sign up. This tells us which channels work and lets us pay partner commissions.
• Technical data: IP address (for security and rate limiting), browser type and server logs kept by our hosting providers.

Why we use it (and the legal basis)

• To provide the service you asked for: generating, previewing, refining and exporting videos, keeping your credit balance and processing purchases (performance of our agreement with you).
• To keep Flich secure and prevent abuse such as trial farming (legitimate use).
• To understand which features, models and channels people value, and to pay partners (your consent, which you can withdraw — see Cookies below).
• To send essential service emails (account confirmation, password reset, receipts). We will only send marketing emails if you opt in.

AI processing

To generate a video, your prompt, any website content you supplied and your images are sent to AI model providers (Anthropic Claude models, accessed through fal.ai and OpenRouter). They process this data to return a result for us. We do not use your content to train our own models, and we don't allow our providers to use it for training where we can control that by contract or settings.

Who we share data with

We share personal data only with service providers that help us run Flich, under contracts that limit their use of it:

• Supabase — database, authentication and file storage
• Vercel — website hosting
• Google Cloud — video rendering
• fal.ai, OpenRouter and Anthropic — AI model processing
• Razorpay — payments
• Partners — if you signed up through a partner's link, they see that a referral signed up or purchased and the commission amount, never your email or your videos.

Some providers process data outside India. We never sell your personal data. We may disclose data if required by law.

Cookies

• Essential: sign-in session cookies and a security cookie. Without these Flich can't work.
• Analytics & attribution: first-party cookies fl_ft, fl_lt, fl_ref and fl_aid (source of your visit, partner code, an anonymous visitor ID). No third-party ad trackers are used.

You can choose "Essential only" in the cookie banner, or clear the fl_consent cookie to see the choice again.

How long we keep it

• Account data, videos and the credit ledger: while your account is open. Deleted within 30 days of an account deletion request, except billing records.
• Billing records: as long as Indian tax and accounting law requires (usually 8 years).
• Product events: up to 24 months. Server logs: as kept by our hosting providers, typically under 30 days.

Your rights

You can ask to access, correct or delete your personal data, withdraw consent, or nominate someone to exercise your rights. Write to support@aivideoeditor.in; we respond within 30 days. You can also delete individual videos in the studio at any time.

Children

Flich is not meant for anyone under 18 and we do not knowingly collect their data.

Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Access is restricted by row-level security, AI-generated code runs in an isolated sandbox with no network access, and the rendering service holds no database credentials. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

Grievance officer

Himanshu Khandelwal — support@aivideoeditor.in. If you are not satisfied with our response you may complain to the Data Protection Board of India.

Changes

If we change this policy in a meaningful way we will update the date above and tell signed-in users before the change applies.