Back to Home

Privacy Policy

Last Updated: 18 October 2026

1. Introduction

VideoZero ("we," "our," or "us") is a service operated by VIDEOZERO TECHNOLOGIES LTD, a company registered in England and Wales under company number 16964680, with its registered office at First Floor, Swan Buildings, 20 Swan Street, Manchester, M4 5JW, United Kingdom. VIDEOZERO TECHNOLOGIES LTD is the data controller responsible for the personal data described in this Privacy Policy, and is registered with the Information Commissioner's Office under registration number ZC168002.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video generation service, including the VideoZero website at https://videozero.ai (the "Site") and the services available through it (together with the Site, the "Service"). It is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Personal Information

We may collect personal information that you provide to us, including:

  • Name and email address
  • Account credentials. If you set a password, our authentication provider Clerk receives and stores it on our behalf (Section 3); we never see it
  • Billing details such as your subscription, transaction history, and the country, card type, and partial card number returned to us by our payment processor. We do not receive or store your full card number or security code
  • Communication preferences, including which marketing emails you have opted out of

Content You Provide

When you use the Service, we also hold the content you give us and the content created for you:

  • Your prompts and other inputs
  • Files you upload, such as images, videos, or data files
  • The videos, animation code, narration, and exports generated for you, and the generation records described in Section 8
  • Messages you send us, for example in support requests

Usage Information

When you use the Service, we record:

  • What you do in your account, such as the projects you create, the generations you run, and the credits you use
  • Technical details of failed requests, such as your browser type, so that we can diagnose errors
  • Cookies and similar technologies, as described in Section 10 (Cookies)

Like any website, our servers see your IP address when your browser connects to them. We do not store it in our own databases: we use it only briefly, in memory, to answer your request and to limit abusive traffic, and we remove it from our error logs. Our hosting, content delivery, and error-monitoring providers (Section 6) also process it to deliver and protect the Service, and our authentication provider (Section 3) and, only if you consent, Google (Section 10) process IP addresses as described in those sections.

Whether You Must Provide Personal Data

You are not required by law to provide us with personal data. However, some information is necessary to enter into and perform our contract with you:

  • Without an email address and authentication details (such as a password, or the details we receive from a third-party sign-in provider) we cannot create your account. Your name and profile image are optional
  • Without billing details we cannot process a paid subscription. We also need them to meet our tax and accounting obligations
  • The prompts, inputs, and files you submit are needed to generate your videos; we cannot generate content without them. You do not need to include personal data in them, and we recommend that you do not
  • Records of what you do in your account are created as you use the Service and are needed to provide it
  • Technical data such as your IP address and browser information is transmitted automatically when you visit the Site or watch a video in our embedded player, and is required to deliver it to you
  • The strictly necessary cookies described in Section 10 are required for you to sign in

Providing information beyond this — for example in support requests, by setting communication preferences, or by consenting to optional analytics and advertising cookies or to marketing emails — is voluntary, and declining has no effect on your ability to use the Service.

3. Authentication and Account Management

Account registration, sign-in, session management, and multi-factor authentication are provided for us by Clerk, Inc. (United States), acting as our data processor under a data processing agreement and only on our documented instructions. When you create or use an account, it processes your email address, name, profile image, authentication credentials, IP address, device and browser information, and sign-in timestamps on our behalf. If you set a password, Clerk receives and stores it on our behalf; we never receive or see it ourselves.

If you sign in using a third-party identity provider (such as Google or GitHub), we receive from that provider, via our authentication provider, your name, email address, profile image, and a unique account identifier. We do not receive your password for that account. The provider's own privacy policy governs their processing of your information.

Our lawful basis is the performance of our contract with you (UK GDPR Article 6(1)(b)), together with our legitimate interest in securing accounts and preventing fraud (Article 6(1)(f)). This data is stored and processed in the United States — see Section 13 (International Data Transfers) for the safeguards that apply.

4. Player Analytics

When a VideoZero video is viewed in our embedded player, the player sends us playback telemetry so that we can understand how videos perform in aggregate. For each playback we store which video was played, playback events (such as play, pause, and how far the video was watched), the website the player is embedded on, and whether the device is a phone or a computer. We do not store the viewer's IP address, browser details, or any account or cookie identifier, and the player sets no cookies. The IP address is used only briefly, in memory, to limit abusive traffic. We use this data to produce aggregated statistics and to improve the player and the Service; we do not use it to identify individual viewers, build profiles, or track viewers across other sites.

We process this playback data on the basis of our legitimate interest in measuring and improving the performance of our own product, having weighed that interest against the limited impact on viewers. You have the right to object to this processing at any time, as described in Section 9.

5. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Send technical notices and support messages
  • Respond to your comments and questions
  • Analyse usage trends and preferences
  • Detect and prevent fraud and abuse
  • Comply with legal obligations

We rely on the following lawful bases under Article 6 of the UK GDPR:

  • Performance of a contract — creating and operating your account, generating videos you request, processing your payments, and responding to your support requests about the Service
  • Legitimate interests — securing the Service, preventing fraud and abuse, understanding usage trends, improving our products, responding to other questions you send us, and sending you marketing emails about our own similar products and services after you have created an account, unless you opt out, in each case where these interests are not overridden by your rights
  • Legal obligation — retaining transaction records and responding to lawful requests
  • Consent — sending marketing in any other case, and setting non-essential cookies. You may withdraw consent at any time

Whichever basis applies, you can opt out of marketing emails straight away using the unsubscribe link in the welcome email we send when you sign up, and at any time afterwards using the unsubscribe link in any marketing email or through your email preferences. This does not affect service messages about your account.

Improving video generation. We review your prompts and generations (including the generation records described in Section 8) to diagnose problems and improve how VideoZero generates videos. We do not use them to train AI models. We rely on our legitimate interest in improving our own product; you may object to this processing as described in Section 9.

6. Information Sharing

We do not sell your personal information. We share your information with the following providers:

  • Clerk, Inc. (United States) — account registration, authentication, session management, and subscription billing
  • Stripe (United States and Ireland) — payment processing underlying our subscription billing. Stripe also processes payment data as an independent controller for its own purposes, such as fraud prevention and meeting its legal obligations, under its privacy policy
  • Google LLC (United States) — analytics, advertising conversion measurement, and remarketing, only where you have consented to optional analytics and advertising cookies. For advertising, Google acts as an independent controller under its privacy policy
  • Hosting and content delivery providers — serving the Site, our API, and uploaded files
  • AI model providers — generating video content, animation code, and narration from the prompts and inputs you submit, the contents of files you upload where needed to generate your video (for example, the data in an uploaded spreadsheet used to draw a chart), and preview frames of your video while it is generated, which may show your uploaded files or content based on them
  • Error-monitoring providers — diagnosing faults in the Service
  • Email providers — sending service and marketing emails and holding our team inbox

Separately, the following may receive your information:

  • Anyone holding a video or file link — your projects are private, but anyone you give a link to one of your videos can view it, and files you upload are served from publicly accessible URLs so they can be displayed in your videos and are reachable by anyone with the link. Do not upload confidential or sensitive material

We may also disclose your information to comply with legal obligations, to protect our rights and safety, with your consent, or in connection with a business transfer or merger.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your personal information for as long as necessary to provide the Service and comply with legal obligations. When we no longer need your information, we will securely delete or anonymise it. We determine retention periods using the following criteria:

  • Account and identity data, including any campaign attribution stored with your account (Section 10) — kept for as long as your account remains open
  • Projects, prompts, and generated content — kept while your account is open, unless you delete them sooner
  • Uploaded files — kept while your account is open, unless you delete them sooner. Files on a free account that has not been used for 90 days may be deleted after at least 7 days' notice by email, as set out in Section 3.5 of our Terms of Service
  • Support messages — kept for as long as needed to resolve your request and deal with any follow-up
  • Email preferences (including marketing opt-outs) — kept while your account is open and deleted with it
  • Generation records — the full transcript of an AI generation (the messages exchanged with AI models, including your prompt, and preview frames), which we use to diagnose failed generations and improve our generation pipeline, is deleted after 90 days; a summary of each generation (your prompt and the steps taken, with timing and cost) is kept while your account is open
  • Account notifications from our authentication provider — copies of the account and subscription updates Clerk sends us, which include your name and email address, are deleted after 90 days
  • Account activity and usage history — records of the projects you create, the generations you run, and the credits you use are kept while your account is open
  • Error logs — technical details of failed requests are kept only for as long as needed to diagnose and fix the fault, and are then deleted by our error-monitoring provider in line with its retention settings
  • Player analytics — deleted after 90 days
  • Google Analytics and advertising data — kept by Google for the retention periods set in our Google accounts, which for analytics data is at most 14 months
  • Transaction and billing records — kept on our behalf by our billing and payment providers for as long as tax and company law requires, generally six years from the end of the financial year they relate to
  • Account deletion record — when your account is deleted, we keep a record of your name, email address, username and account identifiers, subscription and payment details (payment references, and card type and last four digits), and credit and usage totals at that time (including how many projects, files, and exports you had), so that we can handle refund requests and payment disputes. Our lawful basis is our legitimate interest in handling refunds and payment disputes and in establishing or defending legal claims (UK GDPR Article 6(1)(f)); because the record is needed for legal claims, we may keep it despite an erasure request (Article 17(3)(e)). It is deleted after 6 months
  • Security and abuse-prevention logs — kept only for as long as needed to investigate and prevent misuse
  • Aggregated and anonymised data — retained indefinitely, as it no longer identifies you

When your account is deleted, we delete your projects, prompts, uploaded and generated files, exports, generation records, usage and credit history, and settings from our live systems, apart from the account deletion record described above. The only other exception is a file that another user's project also uses (for example a stock photo, or narration audio of the same words in the same voice): we keep that file so their video keeps working, but remove its link to you. Copies held in our backups are deleted as those backups are overwritten in the normal course.

9. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights, where they apply:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Object to or restrict processing
  • Data portability
  • Withdraw consent

Right to object. Where we rely on our legitimate interests — including securing accounts and preventing fraud and abuse (Sections 3 and 5), understanding usage trends and reviewing generations to improve the Service (Section 5), player analytics (Section 4), campaign attribution (Section 10), marketing emails to account holders (Section 5), and keeping the account deletion record (Section 8) — you may object at any time on grounds relating to your particular situation, and we will stop unless we have compelling legitimate grounds that override your interests or we need the data to establish, exercise, or defend legal claims. You may object to direct marketing at any time and for any reason, and we will then stop using your data for that purpose.

Automated decision-making. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. We do not automatically moderate your content, and any decision to suspend or close an account is made by a person.

To exercise any of these rights, contact us at [email protected]. We will respond within one month, and will tell you if we need longer because your request is complex or because you have made a number of requests.

Complaining to us. If you think we have handled your personal data in a way that breaches data protection law, you can complain to us directly by emailing [email protected] with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days of receiving it, investigate it, keep you informed of progress, and tell you the outcome.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113. If you live in the European Union, you may instead complain to the data protection authority of the EU country where you live or work, or where you believe the problem occurred (see the list of EU data protection authorities).

10. Cookies

We use cookies and similar tracking technologies to operate the Service and to understand how it is used.

Certain cookies are strictly necessary for the Service to function and cannot be disabled. These are the cookies set by our authentication provider Clerk (__session, __client, and __client_uat), which keep you signed in and maintain the security of your session; the cookies set by Cloudflare, which delivers our authentication service, to protect it against bots and abuse (__cf_bm and _cfuvid); and cc_cookie, which remembers your cookie choices. These cannot be switched off: without the Clerk and Cloudflare cookies you could not sign in, and without cc_cookie we could not remember your choice.

With your consent, we also enable optional analytics and advertising. This covers two things. The first is Google Analytics and Google Ads, provided by Google LLC (United States), which tell us how people find and use VideoZero and let us measure and target our advertising. Enabling them means your IP address, browser details, and the page you are viewing are sent to Google in the United States; Google sets cookies and stores similar data in your browser (such as _ga, _ga_*, _gcl_au, and _gcl_ls) to measure visits and conversions; and Google may add you to advertising audiences so that our ads can be shown to you on other websites (remarketing). The second is a record we store in your browser of the advertising campaign information in the link you arrived through (the utm_source, utm_medium, utm_campaign, utm_content, and utm_term values), so that if you go on to create an account we can tell which campaign brought you to us. Both are optional, and nothing is loaded or stored in your browser unless you enable them.

You may withdraw consent at any time through the "Cookie preferences" link at the bottom of every page. When you do, the Google cookies and data listed above that are stored on our website, and the stored campaign information, are deleted from your browser and Google's tags are no longer loaded. Cookies that Google sets on its own domains are governed by Google's own settings. Withdrawing consent does not affect processing that took place before you withdrew it.

If you arrive through a campaign link and create an account without leaving the page you landed on, we may also record which campaign brought you to us as part of your account details, which are held by our authentication provider Clerk. This does not involve storing anything in your browser. We rely on our legitimate interest in measuring the effectiveness of our own marketing, and you may object to it as described in Section 9.

You can also instruct your browser to refuse all cookies or to indicate when a cookie is being sent, though doing so may prevent you from signing in.

11. Third-Party Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will delete it. Users aged 16 or 17 may only use the Service with the agreement of a parent or guardian, as set out in Section 2.3 of our Terms of Service.

13. International Data Transfers

Some of our providers are located outside the United Kingdom, including our authentication provider, which stores and processes authentication data in the United States. Other providers listed in Section 6, such as our AI model, hosting, and error-monitoring providers, may also process personal data outside the UK, including in the United States. Where we transfer personal data outside the UK, we rely on one of the following safeguards:

  • UK adequacy regulations, for transfers to countries the UK recognises as providing adequate protection, such as countries in the European Economic Area (for example, Stripe in Ireland);
  • the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), where the recipient is self-certified under it. You can verify the current status of any certification on the official Data Privacy Framework List;
  • the International Data Transfer Agreement (IDTA), or the UK Addendum to the European Commission's Standard Contractual Clauses, where no adequacy mechanism applies.

You may request a copy of the relevant safeguard by contacting us at [email protected].

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Where a change materially affects you, we will also give you reasonable notice by email or through the Service before it takes effect.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us via [email protected] or by phone on +44 7721 319337 (a UK mobile number; international rates may apply from outside the UK). Email is the quickest way to reach us.

VIDEOZERO TECHNOLOGIES LTD
First Floor, Swan Buildings
20 Swan Street
Manchester M4 5JW
United Kingdom
Registered in England and Wales, company number 16964680

Additional contact in Germany. If you are in the European Union and have a question about how we handle your personal data under the GDPR, or you prefer to write to us in German or by post within the EU, you can also reach our founder, Patrick Rathje, at Paul-Fuß-Str. 24, 24106 Kiel, Germany, or on +44 7721 319337. Messages received this way are handled by VIDEOZERO TECHNOLOGIES LTD, which remains the controller of your personal data.