Privacy Policy

This Privacy Policy explains how Revid SAS (“Revid”, “we”, “us” or “our”) collects, uses and shares personal data when you use the Revid website at revid.ai, the Revid web app and mobile app, and the Revid API, MCP server and CLI (together, the “Services”).

The privacy of your data is a big deal to us. Our team only opens your account or private projects to help you when you ask, to fix a bug, to investigate abuse, or when the law requires it.

Who we are

Revid is operated by Revid SAS, a company registered in France and based in Paris. We are the data controller for the personal data described in this policy, under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act. When we process content on behalf of a business customer, for example in a team workspace, we may also act as its processor. For any question or request about your data, email us at hello@revid.ai.

Information we collect

Account information: your email address, and the name and profile picture provided by the sign-in method you use (an email link, Google, or Apple in the mobile app), your settings, your plan and credit balance, and your role in any team workspace you join. When you sign up, we also record how the account was created: the sign-in method, the page you came from, and the country of your connection.

Content you provide: prompts, scripts, links, the files you upload (images, videos, audio and documents), brand details, characters, voice samples you upload for cloning, your messages to the AI assistant in the editor, and the settings of your automations.

Content we generate for you: scripts, voiceovers, images, video clips, music, captions and finished videos, and the project data needed to edit and render them.

Connected social accounts: the profile, posts, statistics and access tokens described in the section on connected social accounts below.

Payment information: payments are processed by Stripe, by Apple for purchases in our iOS app, and by Lemon Squeezy for some older subscriptions. We never receive or store your full card number. We receive the payment status, plan, amount, currency, country and the identifiers needed to manage your subscription.

Usage and device data: the pages you visit, the features you use and events in the app (for example a project created or a video exported), your browser and device type, your IP address and the approximate country it indicates, the website or ad that brought you to Revid (for example an ad click identifier), and performance and error reports.

Support and feedback: the messages, screenshots and files you send us through the in-app support chat or by email, and your answers to our surveys.

Mobile app: your device's push notification token and the purchase records Apple sends us. Our mobile privacy notice adds details specific to the app.

How we use your information

To provide the Services: create your account, generate and render your videos, store your projects, publish the posts you schedule and show your statistics. Legal basis: performance of our contract with you.
To bill you and manage your plan and credits. Legal basis: contract, and our legal obligations for invoices and accounting.
To keep the Services secure and fair: prevent fraud, abuse of free credits, spam and attacks, and enforce our Terms of Service. Legal basis: our legitimate interests.
To answer your support requests. Legal basis: contract and our legitimate interests.
To understand how the Services are used and improve them. Legal basis: our legitimate interests, and your consent where the law requires it for cookies.
To send you service emails (sign-in links, security, billing, credits and notices before inactive media is deleted) and news about Revid. You can unsubscribe from news with the link in each email. Legal basis: contract, our legitimate interests, or your consent where required.
To measure our advertising. Legal basis: your consent where the law requires it, otherwise our legitimate interests.
To comply with the law and respond to lawful requests from authorities.

You can connect TikTok, YouTube, Instagram, Facebook Pages and X accounts to publish your videos and follow their results. Some of these connections are rolled out gradually and may not be available on your account yet. We only access an account after you sign in to that platform and approve the permissions it shows you.

TikTok: we read your basic profile (display name, avatar and account ID), your profile statistics (followers, likes and video count) and the list of your videos with their statistics, and we upload and publish the videos you choose. Permissions requested: user.info.basic, user.info.profile, user.info.stats, video.list, video.upload and video.publish.

YouTube (Google): we read your basic Google profile and your channel's information and statistics, and we upload the videos you choose to your channel. See the section on Google user data below.

Instagram (Meta): for a professional (Business or Creator) account, we read your profile (username, name, profile picture and follower count), your media, and insights such as views, reach and engagement for the Stats page, and we publish the videos you choose. Permissions requested: instagram_business_basic, instagram_business_content_publish and instagram_business_manage_insights.

Facebook Pages (Meta): we list the Pages you manage, read their engagement, and publish the videos you choose to the Pages you select. We never post to a personal Facebook profile. Permissions requested: pages_show_list, pages_read_engagement and pages_manage_posts.

X: we read your profile (name, username and picture) and publish the videos and text you choose. Permissions requested: tweet.read, tweet.write, users.read, media.write and offline.access.

Webhooks: if you add a webhook (for example Zapier or Make), we send the post's video link, title and description to the URL you set.

What we publish: only the posts you publish or schedule yourself, or that an automation you set up (Auto-Mode, Series Maker, or a request you make through our API, MCP server or CLI) is set to publish, to the accounts you choose. We do not post anything else, and we do not send messages, follow accounts, like or comment on your behalf.

How we use and store this data: we use platform data only to publish your posts, show your accounts, posts and statistics in Revid (for example on the Stats page), and link each published post to the project it came from. We do not sell it, use it for advertising, or show it to anyone outside your account and your team workspace. The access and refresh tokens each platform gives us are stored in our database on Google Cloud (Firestore) with your account or team workspace, and are used only to make these requests.

Disconnecting: you can disconnect an account at any time in your account settings, under social accounts. This removes the account and its tokens from Revid. You can also revoke our access from the platform's own app permission settings, for example your Google account permissions. Posts already published stay on the platform until you delete them there. To delete the posts and statistics we stored from a connected account, follow the data deletion steps below.

Use of Google user data

Access: when you sign in with Google, we receive your name, email address and profile picture through Google's OAuth 2.0 sign-in. When you connect a YouTube channel, we ask for permission to upload videos and to read your basic profile and channel information.

Usage: we use your Google email to create and identify your Revid account, and your YouTube data to publish the videos you choose and to show your channel's information and statistics in Revid. We never publish without your action or an automation you set up.

Storage: this data is stored in our database on Google Cloud (Firestore) in the United States. It is encrypted in transit and at rest, and protected by access rules.

Sharing: we do not sell Google user data and do not use it for advertising. We do not transfer it to third parties, except to the providers that host the Services, for security, or when the law requires it. Our team does not read it unless you ask us to for support, it is needed to investigate security or abuse, or the law requires it.

Revid's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalized AI or machine learning models.

YouTube API Services: Revid uses YouTube API Services. By connecting a YouTube channel, you agree to the YouTube Terms of Service. The Google Privacy Policy explains how Google handles your data. You can revoke Revid's access at any time on the Google security settings page.

Deleting: you can disconnect YouTube or delete your Revid account at any time, as described in the data deletion section below. Deleting your account deletes your Google user data stored with it.

AI processing

To make your videos, we send the content needed for each request (prompts, scripts, uploaded files, reference images, voice samples and the links you give us) to AI model providers. They process it to return text, images, video, speech, music, transcriptions or safety checks. A single video can use several providers, and a failed request may be retried with another provider.

Depending on the tool and model you choose, these providers can include:

Scripts and text: OpenAI, Anthropic, Google (Gemini), Mistral, OpenRouter, Groq, Fireworks AI and TypeSafe.
Images and video: Google (Veo and Gemini image models), ByteDance (Seedance and Seedream), MiniMax, Runway, Luma, Leonardo and xAI (Grok).
Voices and voice cloning: ElevenLabs and Google text to speech.
Transcription and audio: AssemblyAI, Deepgram, Google Speech-to-Text and Auphonic.
Music: Suno.
Talking avatars and lip sync: HeyGen, Hedra, Sync and Sieve.
Model platforms: fal.ai, Replicate, Kie.ai, MuAPI and PiAPI, which run models from the makers above and others.

We also use Firecrawl to read the web pages you ask us to turn into videos, and stock libraries (Pexels, Pixabay and Giphy) to find footage. Stock searches send keywords, not your files.

Providers process your content to perform the request, under their API terms. We do not use your content to train general-purpose AI models, and we do not sell it. When you create a character, we may build a custom model or reference set from the images you provide, used only for your account. We and our providers screen prompts and outputs for prohibited content, so a request may be refused.

Voice cloning, faces and likeness

You can upload a voice sample to create a cloned voice, or photos of a person to create a character or an AI twin. Only upload the voice or images of yourself, or of someone who has given you clear permission.

Voice samples are sent to ElevenLabs to create the cloned voice. The voice is stored in your account and used only to make the videos you request. When you delete the voice or your account, we delete it from ElevenLabs too.

Character images are stored in your account and sent to the image and video models you use, to keep that person consistent from scene to scene. We also use face detection to frame shots automatically. We do not use voices or faces to identify anyone, and we use them only to make your videos. You can delete a cloned voice or a character at any time, and both are deleted when you delete your account.

Public pages and sharing

Each project has a page at revid.ai/view/... so you can share the video. Unless you change it, this page is public, and public videos can appear in galleries, examples and search results on revid.ai, with a title and description written by AI. You can make a project unlisted (only people with the link can watch it) or private (no public page) from its sharing options or through the API.

In a team workspace, members can see the projects, media, connected social accounts and usage of that workspace.

Cookies, analytics and advertising

We use cookies and similar technologies to keep you signed in, remember your preferences, protect the Services, understand how they are used and measure our ads. We use these tools:

Amplitude: product analytics for signed-in users, linked to your account ID.
Google Analytics and Google Ads: website traffic and ad measurement.
Meta Pixel and Meta Conversions API: measurement of our ads on Facebook and Instagram. For sign-ups and purchases, we may send a hashed (SHA-256) copy of your email address.
OpenAI Ads pixel: measurement of our ads in ChatGPT, with a hashed copy of your email address for sign-ups and purchases.
Rewardful or Affonso: tracking of affiliate referral links.
Sentry: error monitoring.
Vercel Speed Insights: page performance.
Cloudflare Turnstile: bot protection on some forms and free tools.

Visitors in the European Economic Area, the United Kingdom and Switzerland see a cookie banner on our public pages. Until you accept, Google Analytics and Google Ads run in consent mode, which sends cookieless signals only. Your answer is stored for 12 months in a cookie named CookieConsent. Signed-in pages of the app do not show the banner. You can also block or delete cookies in your browser settings, and turn off personalized ads in your Google and Meta ad settings.

Service providers

We share personal data with service providers only as needed for them to provide their service to us:

Hosting and infrastructure: Vercel (website and API), Google Cloud and Firebase (database, sign-in and backend jobs), Cloudflare (content delivery, file storage and bot protection), Amazon Web Services (video rendering), Turbopuffer (search index of your projects and media) and Redis (caching).
AI providers: listed in the AI processing section above.
Payments: Stripe, Apple and Lemon Squeezy.
Email: Postmark and Resend.
Support: Gleap, for the in-app support chat and bug reports.
Analytics and advertising: listed in the cookies section above.
Internal tools: Slack, for team notifications about the Services.
Social platforms: the platforms you connect, when we publish or read data for you.

We do not sell your personal data. We may also disclose personal data when the law requires it, to protect the rights and safety of our users, the public or Revid, or as part of a merger or acquisition, in which case we will tell you.

Business outreach

We may contact businesses about Revid using professional contact details from public sources or business data providers, and may prepare a sample video page for that business. If we do, we record whether the page is viewed. You can ask us to stop at any time by replying to the message or by writing to hello@revid.ai.

Public posts in our viral video library

Our viral video search indexes publicly available posts from TikTok, Instagram and YouTube, such as captions, transcripts, engagement counts and the public account name, collected through data providers such as ScrapeCreators. If you are a creator and want a post removed from our library, write to hello@revid.ai.

Data retention

Account data and content: for as long as your account is open.
Inactive free accounts: if you have no active subscription and have not used Revid for 90 days, we delete the media, uploads and rendered videos of your projects. We email you before this happens. Your account, characters and settings stay.
Deleted accounts: we delete your data when you delete your account, as described below. Copies in our providers' logs and backups are removed on their normal schedules.
Billing records: for as long as tax and accounting laws require (in France, up to 10 years).
Support requests: for as long as needed to help you and keep a history of your requests.
Analytics data: kept by our analytics providers under the retention settings of our accounts with them.

Data deletion

Delete your account yourself: sign in and use the account deletion page. It works on the web and in the mobile app (Account, then Delete account), and it cancels your personal subscription as part of the deletion. You can also use the Delete Account button in your account settings, which asks you to cancel your subscription first.

What is deleted: the account deletion page deletes your account and sign-in links, personal projects, uploaded media, exported videos, cloned voices, characters, automations, editor assistant chats, and the social accounts and tokens stored on your account. Team workspaces and their content stay with the team. Deletion cannot be undone.

Ask us: if you cannot sign in, or want us to delete only part of your data (for example the posts and statistics we stored from a TikTok, YouTube, Instagram, Facebook or X account), email hello@revid.ai from the address on your account. We confirm by email when it is done.

These are also our data deletion instructions for Meta (Facebook and Instagram), TikTok, Google and X.

Your rights

Under the GDPR and French law, you have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, withdraw your consent at any time, and give instructions about what happens to your data after your death. To use these rights, email hello@revid.ai. We reply within one month and may ask you to confirm your identity. You can also complain to the French data protection authority, the CNIL, or to the authority of the country where you live.

International transfers

Revid SAS is based in France. Our main database is hosted by Google Cloud in the United States, and many of our providers are in the United States or other countries outside the European Economic Area. When personal data leaves the European Economic Area, we rely on the safeguards the GDPR provides, such as the European Commission's standard contractual clauses or a provider's certification under the EU-U.S. Data Privacy Framework.

Security

We use encrypted connections, access controls and database security rules, and we store data with providers that encrypt it at rest. Only team members who need access to run the Services can reach production data. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.

Children

Revid is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

Other websites

Our website may link to external sites that are not operated by us. We have no control over the content and practices of these sites, and cannot accept responsibility or liability for their privacy policies.

Changes to this policy

We may update this policy. We change the date below each time, and for significant changes we tell you by email or in the app before they apply.

Contact

Revid SAS, Paris, France. Email: hello@revid.ai.

Last updated: October 25, 2026