Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, password (hashed)
• Content you create: video clips you record, product information you enter, generated scripts, generated voiceovers, text overlays, and finished video projects
• Subscription information: subscription tier, billing status, payment confirmations (processed by Apple)
• Social platform connections: when you connect third-party platforms like TikTok, we receive your account ID, profile basics, and permission tokens required for posting
• Usage data: app activity, feature interactions, error logs, device type, OS version
• Technical identifiers: anonymous device identifiers for analytics and crash reporting

We do not collect biometric data, location data, contacts, or browsing history outside our app.

2. How We Use Your Information

We use your information to:

• Provide and operate the GetGMV service
• Process video clips into AI-generated short-form content
• Authenticate your account and manage your subscription
• Publish videos to connected social platforms when you authorize it
• Improve features, fix bugs, and develop new capabilities
• Communicate with you about your account, support requests, and service updates
• Detect and prevent fraud, abuse, or violations of our Terms

3. Third-Party Service Providers

We use the following third-party services to provide the app:

• Supabase — account authentication, database, video and audio storage
• Anthropic (Claude) — receives your product details to generate your script (also audience classification and voice matching)
• Google (Gemini) — receives frames/images from your recorded clip to identify the product and extract packaging text
• Fish Audio — receives your script text to generate the voiceover
• Serper — web search for product research
• Cloudflare — web hosting and serverless compute
• Apple App Store — payment processing for iOS subscriptions
• RevenueCat — subscription management (when integrated)
• TikTok API — video publishing when you authorize it
• Additional social commerce platforms — as we add support for Instagram Shop, Trybe, and other social commerce platforms, we will update this list

We share data with our third-party AI providers (Anthropic, Google, and Fish Audio) to deliver core features — only when you generate a video, and only after you've given consent. None of these services receive your data for the purpose of training their AI models, and we don't sell your data; each provider processes it solely to deliver GetGMV. Your generated content remains your content, and each service has its own privacy policy.

4. Data Storage and Security

Your data is stored using Supabase infrastructure with the following protections:

• All data transmitted over HTTPS with TLS encryption
• Account passwords hashed using industry-standard algorithms
• Database access restricted via row-level security policies (you can only access your own data)
• Sensitive credentials and connection tokens protected by access controls and isolated database policies
• Storage objects served via short-lived signed URLs
• Payment information processed by Apple and never stored on our servers
• Regular security audits performed on the codebase

5. Data Retention

• Account information: retained until account deletion or 3 years of inactivity
• Generated videos, scripts, and audio: retained until you delete them or your account is deleted
• Subscription and billing records: retained for 7 years as required by tax law
• Usage logs: anonymized after 90 days; raw logs deleted after 30 days
• Backups: deleted within 90 days of source data deletion

6. Your Rights

You have the right to:

• Access: request a copy of personal data we hold about you
• Correct: request correction of inaccurate data
• Delete: request deletion of your account and associated data
• Export: request your data in a portable format
• Object: object to certain processing
• Withdraw consent: where processing is based on consent

To exercise these rights, contact us at hello@getgmv.com. We will respond within 30 days.

7. Account Deletion

You can request account deletion at any time by tapping "Delete Account" in the app or by emailing hello@getgmv.com. Upon deletion, we will erase:

• Your account credentials
• Your generated scripts and audio
• Your uploaded video content
• Your social platform connection tokens
• Your generated videos

Some data may be retained as required by law (billing records, anonymized usage logs).

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission to protect such transfers. By using our service, you consent to these transfers.

9. Legal Basis for Processing (EU/UK Users)

If you are located in the European Union or United Kingdom, we process your data under the following legal bases:

• Contract performance: providing the app and services you subscribed to
• Consent: optional features, marketing communications
• Legitimate interest: security, fraud prevention, service improvement
• Legal obligation: tax records, responding to lawful requests from authorities

10. Your California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

Categories of personal information we collect:

• Identifiers (email, account ID)
• Commercial information (subscription history)
• Internet activity (usage data, device info)
• Audio/visual information (videos, voiceovers)
• Inferences (audience preferences, voice matching)

To exercise CCPA rights, contact hello@getgmv.com.

11. App Tracking Transparency

When required by Apple's App Tracking Transparency framework, we will request your permission before tracking your activity across other apps or websites for advertising purposes. We do not currently use cross-app tracking for advertising. You can change tracking permissions anytime in iOS Settings → Privacy & Security → Tracking.

12. Children's Privacy

GetGMV is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If we learn we have collected such data, we will delete it promptly. Contact hello@getgmv.com if you believe a child has provided us with personal information.

13. Data Breach Notification

In the event of a personal data breach likely to result in risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach, and notify the relevant supervisory authority where required by law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification. The "Last updated" date at the top of this policy reflects the most recent revision.

15. Contact Us