Privacy Policy

jajavideo (a product of JajaSoft, "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have over it. By creating an account or using jajavideo, you agree to the collection and use of information as described here.

1. Information we collect

Account information. When you create an account, we collect your email address and a hashed password. Your password is never stored in plain text — we use bcrypt with 12 rounds.

Scripts and submitted content. We store the scripts you submit in order to generate your videos. These are retained alongside the generated video files for the duration of your plan's retention period (currently 30 days), then deleted automatically.

Generated videos. The MP4 files we produce are stored on our server and linked to your account. They are accessible only to you via your authenticated dashboard and signed download links.

Usage data. We track the number of videos you generate each day to apply your plan's daily watermark-free quota. We use Google Analytics to understand site usage (see Section 3); we do not use advertising trackers.

Session data. We use a secure, signed session cookie to keep you logged in. It does not track you across other websites and keeps you signed in until you log out.

2. How we use your information

• To create and deliver your generated short videos.
• To send transactional emails: email verification, password resets, "your short is ready" notifications, and batch-complete digest emails. We do not send marketing emails without your explicit consent.
• To apply daily quotas and plan limits.
• To maintain the security and integrity of the service (rate limiting, CSRF protection, abuse prevention).
• To respond to support requests you send us directly.

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

3. Third-party services

Generating your video requires communication with third-party providers. By using jajavideo, you acknowledge that your submitted content may be processed by these services under their respective privacy policies.

• Microsoft Edge TTS. Your script text is sent to Microsoft's Edge TTS service to produce a neural voice-over audio file.
• Google Cloud Text-to-Speech. For certain languages, your script text is sent to Google Cloud's Text-to-Speech API to produce the voice-over audio file.
• OpenAI. If you use the AI script writer or AI title suggester, your topic or script text is sent to the OpenAI API (GPT-4o-mini). Scene keywords extracted from your script are also sent to OpenAI to generate stock footage search queries.
• Pixabay and Pexels. Search keywords derived from your script are sent to the Pixabay and Pexels APIs to fetch royalty-free stock footage. No personally identifiable information is included in these queries. Videos may also use images and clips from jajavideo's own library of AI-generated media.
• Brevo (formerly Sendinblue). Your email address is used to deliver transactional emails via the Brevo platform. We do not share any other data with Brevo.

Analytics. We use Google Analytics to understand how visitors use the site (pages viewed, general location, device type). We do not use Facebook Pixel or any advertising or cross-site behavioural tracking.

Visit log. We keep a basic log of page views — operating system, browser, device type, browser language, and an approximate country derived from your IP address via a third-party geolocation lookup (ip-api.com). We do not store your IP address itself in this log, and it is used only in aggregate to understand our audience, never to identify an individual visitor.

4. Data retention

Generated video files are automatically deleted after your plan's retention period: currently 30 days from the date the video is generated. Scripts associated with completed jobs are deleted along with the job record.

Your account record (email address, hashed password, usage history) is retained until you request deletion. See Section 6 for how to exercise this right.

5. Data security

We implement technical and organisational measures to protect your data: bcrypt password hashing, HTTPS-only access, signed HttpOnly Secure session cookies, CSRF token protection on all state-changing requests, and server-side rate limiting on all API endpoints. No system is perfectly secure, but we take reasonable precautions appropriate to the nature of the data we hold.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and all associated data ("right to be forgotten").
• Object to or restrict certain processing of your data.
• Receive a copy of your data in a portable, machine-readable format.

To exercise any of these rights, contact us via the contact page. We will respond within 30 days.

7. Cookies

We use a single session cookie to keep you logged in. It is cryptographically signed, marked HttpOnly and Secure, and keeps you signed in until you log out. We also use Google Analytics cookies (see Section 3) and a cookie that remembers your interface language. We do not use advertising cookies or tracking pixels.

8. Children's privacy

jajavideo is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the current version. For material changes, we will notify registered users by email where practical. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

10. YouTube API Services

jajavideo uses YouTube API Services to let account owners connect their own YouTube channel and automatically publish videos generated by our Service to that channel, on the channel owner's explicit instruction and authorization.

By connecting a channel, you grant jajavideo permission (via Google's OAuth consent flow) to upload videos to that channel. This authorization is limited to the youtube.upload scope — jajavideo cannot read your subscriber list, watch history, other videos, comments, or any other YouTube data beyond what is needed to publish videos you generate through the Service.

We store the OAuth refresh token issued for the connected channel, and the video title, description, and tags we generate for each upload, for as long as the channel remains connected to your account. This data is used solely to publish and label your generated videos; we do not sell it, and we do not share it with any third party except Google (as the platform the video is published to).

You can revoke jajavideo's access to your YouTube channel at any time, either by asking us to disconnect the channel via the contact page, or directly through Google's own permissions page at myaccount.google.com/permissions. Revoking access there immediately invalidates our stored token.

By using the parts of jajavideo that publish to YouTube, you are also agreeing to the YouTube Terms of Service.

You can review and revoke jajavideo's access to your Google account at any time from the Google security settings page.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's own handling of your data is described in the Google Privacy Policy.

11. Contact

For privacy-related questions or data requests, please use our contact page.