Privacy Policy

jajavideo (a product of JajaSoft, "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have over it. By creating an account or using jajavideo, you agree to the collection and use of information as described here.

1. Information we collect

Account information. When you create an account, we collect your email address and a hashed password. Your password is never stored in plain text — we use bcrypt with 12 rounds.

Scripts and submitted content. We store the scripts you submit in order to generate your videos. These are retained alongside the generated video files for the duration of your plan's retention period (7–60 days depending on tier), then deleted automatically.

Generated videos. The MP4 files we produce are stored on our server and linked to your account. They are accessible only to you via your authenticated dashboard and signed download links.

Usage data. We track the number of shorts you generate each month to enforce your plan's quota. We do not use third-party analytics platforms or advertising trackers.

Session data. We use a secure, signed session cookie to keep you logged in. It does not track you across other websites and expires after 30 days of inactivity.

2. How we use your information

• To create and deliver your generated short videos.
• To send transactional emails: email verification, password resets, "your short is ready" notifications, and batch-complete digest emails. We do not send marketing emails without your explicit consent.
• To enforce monthly quotas and apply plan limits.
• To maintain the security and integrity of the service (rate limiting, CSRF protection, abuse prevention).
• To respond to support requests you send us directly.

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

3. Third-party services

Generating your video requires communication with third-party providers. By using jajavideo, you acknowledge that your submitted content may be processed by these services under their respective privacy policies.

• Microsoft Edge TTS. Your script text is sent to Microsoft's Edge TTS service to produce a neural voice-over audio file.
• OpenAI. If you use the AI script writer or AI title suggester, your topic or script text is sent to the OpenAI API (GPT-4o-mini). Scene keywords extracted from your script are also sent to OpenAI to generate stock footage search queries.
• Pixabay and Pexels. Search keywords derived from your script are sent to the Pixabay and Pexels APIs to fetch royalty-free stock footage. No personally identifiable information is included in these queries.
• Brevo (formerly Sendinblue). Your email address is used to deliver transactional emails via the Brevo platform. We do not share any other data with Brevo.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or behavioural tracking services.

4. Data retention

Generated video files are automatically deleted after your plan's retention period: 7 days for Free accounts, and progressively longer for paid plans (up to 60 days for Pro). Scripts associated with completed jobs are deleted along with the job record.

Your account record (email address, hashed password, usage history) is retained until you request deletion. See Section 6 for how to exercise this right.

5. Data security

We implement technical and organisational measures to protect your data: bcrypt password hashing, HTTPS-only access, signed HttpOnly Secure session cookies, CSRF token protection on all state-changing requests, and server-side rate limiting on all API endpoints. No system is perfectly secure, but we take reasonable precautions appropriate to the nature of the data we hold.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and all associated data ("right to be forgotten").
• Object to or restrict certain processing of your data.
• Receive a copy of your data in a portable, machine-readable format.

To exercise any of these rights, contact us via the contact page. We will respond within 30 days.

7. Cookies

We use a single session cookie to keep you logged in. It is cryptographically signed, marked HttpOnly and Secure, and expires after 30 days of inactivity. We do not use advertising cookies, tracking pixels, or cross-site cookies of any kind.

8. Children's privacy

jajavideo is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the current version. For material changes, we will notify registered users by email where practical. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or data requests, please use our contact page.