Privacy Policy

Last updated: May 1, 2026 · Effective as posted

This Privacy Policy describes how Twivuu ("Twivuu," "we," "us," or "our") handles personal information when you visit our marketing website, create an account, upload media, subscribe to a paid plan, or otherwise interact with our services. Please read it carefully and review updates when we post them.

1. Who this policy covers

This policy applies to visitors, registered users, workspace members, and billing contacts who use Twivuu services where this policy is posted. If you access Twivuu through an organization, your administrator may impose additional rules; this document covers Twivuu as a service provider.

2. Information we collect

We collect information you provide directly (such as name, email address, password or authentication tokens, billing details processed by our payment partner, support messages, and content you upload for editing). We also collect technical data generated when you use Twivuu, including device type, browser version, approximate location derived from IP address, timestamps, diagnostic logs, and usage events that help us secure accounts and improve performance.

3. How we use information

• Provide, operate, maintain, and secure the Twivuu platform.
• Authenticate users, prevent fraud, and enforce acceptable use policies.
• Process subscriptions, invoices, and customer support requests.
• Improve models and features using aggregated or de-identified analytics where permitted.
• Communicate product updates, security notices, and policy changes.
• Meet legal obligations and respond to lawful requests from public authorities.

4. Legal bases (where applicable)

Depending on your region, we rely on one or more legal bases such as performance of a contract, legitimate interests (for example, securing our infrastructure), consent where required (such as certain marketing communications), and legal obligation.

5. Sharing and processors

We use trusted infrastructure and software vendors to host Twivuu, store media, process payments, send email, monitor reliability, and analyze product usage. These vendors process data on our instructions and are contractually required to protect it. We do not sell your personal information as a commodity; any "sale" or "sharing" as defined by U.S. state laws will be disclosed separately if applicable.

The categories of providers we rely on today include:

• Supabase — authentication, hosting of application data in PostgreSQL, and storage for media you upload. Processing may occur in regions configured for your Twivuu deployment.
• Stripe — payment processing, subscriptions, invoices, and billing-related communications. Stripe receives payment data you submit at checkout; Twivuu does not store full card numbers on our servers.
• Anthropic — AI-assisted editing features send prompts and relevant context (such as transcript snippets or instructions you provide) to Claude so Twivuu can interpret commands and suggest edits. Do not submit secrets or highly sensitive personal data in prompts.
• Resend — transactional email delivery (welcome messages, receipts, security notices).
• Sentry — error and performance monitoring to diagnose crashes and latency; may include technical metadata and limited context about your session when an error occurs.

Each provider maintains its own privacy policy and security practices. We select vendors with strong track records and restrict access to what is needed to operate Twivuu.

6. International transfers

Twivuu may process and store information in countries other than your own. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

7. Retention

We retain personal information for as long as your account is active, as needed to provide services, and as required to comply with law, resolve disputes, and enforce agreements. Uploaded media may be removed when you delete a project or account, subject to technical backup windows and legal holds.

Product analytics events are retained for up to 24 months and then deleted or anonymized. We track events such as page views, editor actions, upload/export milestones, billing events, and collaboration activity to operate and improve Twivuu.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission over the Internet is completely secure; we encourage strong passwords, hardware keys where available, and prompt reporting of suspicious activity.

9. Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or export certain data; to object to or restrict certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority. You may also control marketing preferences through unsubscribe links or account settings. Contact us using the details published on the Twivuu site to exercise these rights.

Twivuu does not sell personal data to third parties. You can request analytics deletion or data export from account settings (Download My Data) or by contacting support.

10. Children

Twivuu is not directed to children under the age where parental consent is required in your region. We do not knowingly collect personal information from children. If you believe we have collected information from a child in error, contact us and we will take appropriate steps.

11. Changes to this policy

We may update this Privacy Policy to reflect product, legal, or regulatory changes. When we make material updates, we will provide notice as required by law—such as posting a revised policy with a new effective date or emailing account owners.

12. Contact

Data controller: [TODO: Legal entity name — e.g. Twivuu Inc. or your operating company].

Postal address: [COMPANY ADDRESS LINE 1], [COMPANY ADDRESS LINE 2], [CITY], [REGION / POSTAL CODE], [COUNTRY].

Privacy and data requests: [TODO: privacy@yourdomain.com or support URL]. We will respond within the timeframe required by applicable law (often within 30 days for many jurisdictions).