Privacy Policy

This policy explains how [Legal entity name] (“we”) handles personal data when you use GlassCore. We process personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable law.

What we collect

• Account data: name, email address, password (stored only as a secure hash), or your Google profile if you sign in with Google.
• Content: prompts, settings, uploaded reference images and the videos generated for you.
• Payment data: top-up amounts, status and references from our payment partner. We never see or store your full card or bank details.
• Technical data: IP address, a random device identifier stored in your browser, and logs used for security, fraud prevention and rate limiting.

How we use it

• To provide the Service: generate, store and show your videos and chat history.
• To process payments, keep accurate financial records and issue receipts.
• To keep the Service safe: content moderation, abuse prevention and enforcing our policies.
• To contact you about your account, payments and support requests.

AI providers and data retention

To generate a video we send your prompt (and reference image, if any) to the selected AI model through our provider OpenRouter and the underlying model provider. Prompts may also be sent to an AI moderation model for safety checks.

Video generation is not eligible for zero data retention. Because video generation runs asynchronously, the provider must keep the inputs and the generated video for a limited time so we can retrieve it. Provider handling is governed by their own policies. As soon as a video is ready we copy it to our own secure storage.

Storage and security

Videos and images are stored in private cloud storage (Cloudflare R2) and are only accessible through short-lived signed links. Data is encrypted in transit. Access is limited to staff who need it.

Sharing

We share data only with service providers acting for us (AI model providers, payment processing by Cashfree or Razorpay, cloud storage and hosting, email delivery, security verification by Cloudflare Turnstile), or where required by law. We do not sell personal data.

Retention

We keep your account data and content while your account is active. Financial records are kept for the period required by tax and accounting law. Moderation logs are kept to enforce our policies.

Your rights

You can access and correct your data in your account, and ask us to delete your account or data by contacting [support email]. Some records (such as payment records) must be kept by law.

Cookies

We use essential cookies to keep you signed in and protect forms against cross-site attacks, and browser storage for your theme preference and device identifier. We do not use advertising cookies.

Contact / Grievance officer

[Name], [support email], [Registered address].