Privacy Policy

Effective May 27, 2026

This Privacy Policy describes how [LEGAL ENTITY NAME](“DFY Content,” “we,” “us,” or “our”) collects, uses, and discloses information when you use the DFY Content service available at app.dfycontent.io(the “Service”).

DFY Content is a closed-beta, invitation-only platform that produces short-form video content on behalf of contracted clients. By signing in to the Service, you agree to the practices described below.

1. Information we collect

1.1 Information you provide

• Account information. When you sign in with Google, we receive your Google account email address, name, and profile picture. We do not request or store your Google password.
• Client onboarding data. If you are an operator uploading content on behalf of a client, you may submit photographs, voice samples, biographical details, scripts, and brand assets supplied by that client.
• Communications. If you contact us by email or through the Service, we retain a record of that communication.

1.2 Information collected automatically

• Usage data. We log pages visited, actions taken, API requests, and generation jobs you trigger, along with timestamps and approximate request metadata.
• Device data. Standard server logs (IP address, browser user agent, referrer) are retained for security and debugging.
• Cookies. We use first-party cookies to maintain your sign-in session. We do not use third-party advertising cookies.

2. How we use information

• To authenticate you and enforce role-based access to the Service.
• To produce, review, and deliver the video content that is the purpose of the Service — including generating character references, voice clones, scripts, audio, animated clips, and final videos.
• To operate, maintain, debug, and improve the Service.
• To prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

3. Third-party processors

DFY Content relies on the following third-party service providers to deliver the Service. Each operates as a data processor on our behalf, subject to its own privacy policy:

• Supabase — authentication, database, and file storage hosting.
• Vercel — application hosting and content delivery.
• Google Cloud / Google Identity — sign-in (OAuth) and Gemini / Nanobanana image generation.
• ElevenLabs — professional voice cloning and text-to-speech generation. Voice samples uploaded for a given client are used only to produce a voice clone associated with that client.
• Creatify (Aurora) — frame-to-video animation.
• Replicate — model inference for transcription (Whisper) and music generation (MusicGen).
• Modal — long-running compute for video composition.
• Inngest — orchestration of background pipelines.

We do not sell, rent, or otherwise share personal information with third parties for their independent marketing purposes.

4. Biometric and likeness data

Because the Service produces synthetic video that includes a client’s likeness and voice, it necessarily processes data that may be considered biometric or sensitive under certain laws. We process this data only with explicit, written consent from the client whose likeness or voice is used. Operators uploading material on behalf of a client represent that they have authority and consent to do so.

Voice clones are scoped to a single client account at the underlying voice provider and are not shared across clients.

5. Retention

We retain your account and generated content for as long as your account is active or as needed to provide the Service. You may request deletion of your account or specific content at any time by writing to team@dfycontent.io. Once a deletion request is processed, the data is removed from production systems and purged from backups on our ordinary backup-rotation schedule.

6. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, role-based access controls, row-level security on our database, and column-level restrictions on credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices

• Access and correction. You can view and update most account information from within the Service.
• Deletion. Email team@dfycontent.io to delete your account or specific content.
• Revoke Google access. You can disconnect DFY Content from your Google account at any time via your Google account permissions page.

8. International users

DFY Content is operated from the United States. If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States.

9. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be noted by revising the effective date above and, where appropriate, notifying you within the Service.

11. Contact

Questions about this policy? Email team@dfycontent.io or write to [LEGAL ENTITY NAME], [MAILING ADDRESS].