Privacy Policy

Last updated: 15 September 2026

This Privacy Policy explains what personal data NIBVOK collects, why we collect it, how we use and share it, and the choices and rights you have. It applies to the NIBVOK website and platform.

1. Who is responsible for your data

The data controller is NIBVOK, the trading name of the business operating this website. Our full registered details are available on request. For any privacy question, contact [email protected].

2. What we collect

Data you give us

• Account data — your name, email address, and password (stored in hashed form; we never store your password in plain text).
• Content you upload or create — videos, images, text, prompts and other material you submit or generate in the Service.
• Communications — messages you send to our support address.

Payment data

• Payments are handled by Stripe. We receive limited information such as your name, email, the plan or pack you bought, the amount, and a payment status. We do not receive or store your full card number.

Data we collect automatically

• Usage data — features used, token consumption, generation history, approximate timestamps and error logs. This is how we bill metered features and keep the Service working.
• Technical data — IP address, browser type, device type, and similar information.

Connected platforms

• If you connect a social account (for example TikTok or YouTube) we receive access tokens and basic account details needed to publish on your behalf. You can disconnect these at any time.

3. Why we use your data

• To provide the Service, including creating your account and delivering features you request.
• To process payments, manage subscriptions, and account for token usage.
• To send service messages such as verification emails, receipts and important notices.
• To keep the Service secure, prevent abuse, and enforce our Terms.
• To understand how the Service is used and improve it.
• To comply with legal and accounting obligations.

Where required by law, we rely on your consent, our contract with you, our legitimate interests in operating and securing the Service, or legal obligation.

4. AI processing

Features such as video, audio and text generation send your inputs to third-party AI model providers so the output can be produced. Those providers process the data to generate your result. Do not submit confidential material you are not permitted to share with a third-party processor.

5. Who we share data with

We share personal data only as needed, with:

• Payment processors — Stripe, to take payments and manage subscriptions.
• AI model providers — to generate the content you request.
• Infrastructure and email providers — hosting, storage and transactional email.
• Connected social platforms — when you choose to publish through them.
• Professional advisers and authorities — where we are legally required to disclose, or to protect our rights.

We do not sell your personal data.

6. Cookies and similar technologies

We use cookies and local storage that are necessary to run the Service — for example, to keep you signed in and to secure your session. We do not use advertising cookies to track you across other websites.

7. How long we keep data

We keep account and usage data while your account is active. If you close your account, we delete or anonymise your personal data, except where we must keep records (for example tax and accounting records, which we retain for the period required by law) or where we need it to resolve a dispute.

8. Your rights

Depending on where you live, you may have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where we relied on it;
• complain to your local data-protection authority.

To exercise any of these, email [email protected]. We will respond within the timeframe required by applicable law. If you are in the EU/UK, you also have the right to lodge a complaint with your national supervisory authority.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords and access controls. No system is perfectly secure, and we cannot guarantee absolute security — please use a strong, unique password.

10. International transfers

We and our providers may process data in countries other than yours, including the United States. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses, as required by applicable law.

11. Children

The Service is not intended for children, and you must be at least 18 (or the age of majority where you live) to use it. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy. If we make a material change, we will give reasonable notice. The "last updated" date at the top shows the current version.

13. Contact

Privacy questions or requests: [email protected] or our contact page.