Privacy Policy

This policy explains how the operator of Opus 5.5 Video (opus55video.com) ("we", "us") handles personal data. We are the controller of the personal data described here. Contact: support@opus55video.com.

1. What we collect

Account data: email address, name, profile picture (if you sign in with Google), password hash. Source: You, or Google if you use Google sign-in. Purpose: To create and secure your account.
Your prompts, change instructions and submitted URLs. Source: You. Purpose: To write your videos.
What you had written when the payment window opened (the first 500 characters), with the style, length and format you chose, and the reason you pick if you tell us why you didn't buy. Source: You. Purpose: To learn what people want to make and why they don't buy, so we can improve the product and its prices.
Content read from a URL you submit: page title, headings, text excerpt, colours and logo. Source: The website you point us to. Purpose: To write a video in that brand.
Generated animation code and its versions. Source: Created by the service. Purpose: So you can preview, change and download your videos.
Download records: length, resolution, watermark. Source: Created by the service. Purpose: To decide the download resolution and watermark, and prevent abuse.
Credit balance, orders and subscription status. Source: Created by the service and Stripe. Purpose: To run billing, refunds and support.
Support messages. Source: You. Purpose: To answer you.
Records of blocked requests: account, time, the rule that blocked it, and the first 300 characters of the request. Source: Created by our content screening. Purpose: To enforce our Acceptable Use Policy and respond to compliance review requests from legal authorities or payment service providers concerning prohibited content.
Technical data: IP address, browser, device, request logs. Source: Your browser. Purpose: Security, fraud prevention and keeping the site working. To limit free videos per device, we keep salted hashes of a random browser ID and, on computers, of browser characteristics for 90 days.
Usage data: pages you visit, how you arrived, and actions such as signing up, generating or downloading a video, and starting checkout. Source: Your browser, through Google Analytics and PostHog. Purpose: To understand how the site is used and improve it. Before anything is sent, we remove URL parameters that could identify you, such as your email address. If you are signed in, PostHog links these actions to your account's random ID, never to your email address or name. Account settings and admin pages are not sent to PostHog.
Session recordings: how you move through a page (clicks, taps, scrolling, pointer movement) and the page as it appeared to you. Source: Your browser, through Microsoft Clarity and PostHog. Purpose: To see where pages confuse people or break, and fix them. What you type into fields is never recorded, and email addresses on the page are hidden before anything is sent (Clarity also hides numbers). PostHog recordings also leave out your photos, the video preview and your account name and picture. Recording is off on account settings and admin pages, and on any page whose web address carries personal details, such as email-verification and password-reset links.

Your MP4 files are not uploaded to us. Videos are rendered and encoded in your browser and saved directly to your device.

We do not collect your full card number. Card details go straight to Stripe.

2. Legal bases (EEA/UK users)

Contract: running your account, generating videos, billing and support.
Legitimate interests: security, fraud and abuse prevention, screening requests against our Acceptable Use Policy, and improving the service with aggregate statistics, session recordings and what you had written when the payment window opened. You can object to this at any time.
Legal obligation: keeping payment and tax records, and responding to lawful requests.
Consent: where we ask for it; you can withdraw it at any time.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We share data only with the service providers below, who process it on our behalf:

Anthropic, PBC. Receives: Your prompts, change instructions, the content read from your URL, and the current version of your animation code. Purpose: Generating the animation with the Claude Opus 5.5 model.
OpenAI, L.L.C. Receives: The text you submit (prompts, change instructions, repair requests), the text read from your URL, and the on-screen text of each generated video. Purpose: Automated content screening with its moderation model.
Cloudflare, Inc. Receives: All data stored by the service, and request logs. Purpose: Hosting, database and security. When you make a free video, Cloudflare Turnstile also checks your browser to tell people from automated scripts.
Stripe, Inc. Receives: Your email and payment details. Purpose: Payment processing (Stripe Privacy Policy).
Google LLC. Receives: Sign-in data, only if you use Google sign-in. Purpose: Authentication.
Google LLC (Google Analytics). Receives: The usage data above, your browser and device type, and your IP address, which Google uses to estimate your country and city and does not store. Purpose: Measuring site usage. Google signals and ad personalisation are turned off, so this data is not used for advertising (Google Privacy Policy).
Microsoft Corporation (Microsoft Clarity). Receives: The session recordings above, your browser and device type, and your IP address. Purpose: Finding and fixing usability problems (Microsoft Privacy Statement).
PostHog, Inc. Receives: The usage data and session recordings above, your browser and device type, your IP address and, if you are signed in, your account's random ID. Purpose: Seeing which steps people take on the site and where they stop, and finding usability problems, so we can improve it (PostHog Privacy Policy).
Plausible Analytics, if enabled. Receives: Anonymous page-view statistics (no cookies, no personal profile). Purpose: Measuring site usage.
Email delivery provider. Receives: Your email address and the email content. Purpose: Sending account emails such as verification.

We may also disclose data when required by law, or to protect our rights, users or the public.

These providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

4. How long we keep data

Account data, videos, versions and support messages: Until you delete them or delete your account; then removed within 30 days.
Content read from URLs: Stored with the video it was used for, and deleted with that video.
What you had written when the payment window opened, and your reason: 90 days, then deleted.
Orders, payments and credit records: 7 years, for tax and accounting obligations.
Security and request logs: No more than 30 days.
Records of blocked requests: 3 years, then deleted.
Usage data in PostHog: 1 year.
Session recordings (PostHog): 30 days.
Session recordings (Microsoft Clarity): 30 days; a small random sample, and recordings we mark as favourites, up to 9 months.

5. Cookies

We use cookies that the site needs to work: a sign-in session cookie, and cookies that remember your language and theme. We also use Google Analytics cookies (_ga and _ga_*, kept for up to 2 years) to tell visits apart and measure how the site is used. You can block them in your browser or with Google's opt-out add-on; the site still works without them. We also use Microsoft Clarity cookies: _clck keeps a random visitor ID and _clsk joins the pages of one visit into a single recording. Microsoft may also set its own cookies on its domains, such as MUID and CLID, which it says are used across Microsoft sites, including for advertising. For visitors from the EEA, the UK and Switzerland, Clarity sets no cookies. We also use PostHog's cookie ph_<project key>_posthog, which keeps a random visitor ID for up to 1 year, together with PostHog's storage in your browser, to tell visits apart and measure how the site is used. We do not use advertising cookies. If you use Google sign-in, Google may set its own cookies during sign-in.

6. Your rights

Depending on where you live, you can ask us to: access your data; correct it; delete it; export it in a portable format; restrict or object to certain processing; and withdraw consent. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

To use any of these rights, or to delete your account, email support@opus55video.com from the address on your account. We will reply within 30 days. EEA/UK users can also complain to their local data protection authority. California residents have the right to know, delete and correct their data and will not be treated differently for using these rights.

7. Children

The service is not for anyone under 16. We do not knowingly collect data from children under 16; if we learn that we have, we delete it promptly. Contact us if you believe a child has given us data.

8. Security

We use encryption in transit, access controls and encrypted storage for sensitive settings. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

9. Changes

If we make material changes, we will notify you by email or in the service at least 15 days before they take effect. The date at the top shows the latest version.

10. Contact

support@opus55video.com