Privacy Policy
Last updated: 5 October 2026
This policy explains what personal data ainius collects, why, who receives it, and what you can do about it.
In short:
- We collect what we need to make your videos, take payments, stop abuse and measure our ads.
- We don't sell your data for money.
- Ad pixels on our site share some data with Meta, TikTok and Google, and you can opt out.
- Email support@ainius.net to see, export or delete your data.
1. Who we are
The controller of your personal data is Nguyen Minh Tuan (Nguyễn Minh Tuấn), an individual based in Vietnam who operates ainius at ainius.net ("ainius", "we", "us").
Address: Vinhomes Ocean Park 1, Da Ton, Gia Lam, Hanoi, Vietnam. Privacy contact: support@ainius.net (subject "Privacy").
2. What we collect
| Category | Examples |
|---|---|
| Account | Email address, user ID, sign-in method. If you sign in with Google, the name and profile photo Google provides. Your plan and credit balance. |
| Guest use (first video without an account) | A random device ID stored in your browser, and your IP address. Your email, if you choose to buy or save your video. |
| Content you submit | Links, topics, text, instructions, chat edit messages, images and logos you upload, brand kit settings, voice choices, custom voice IDs. |
| Content we make for you | Scripts, narration audio, captions and videos. Your ratings and feedback on videos. |
| Payments | Plan, amount, currency, order code, status and date. For USD orders, Dodo Payments tells us your email, country and payment status; we never receive your full card number. For VND bank transfers, the details in the bank notification (such as bank, transfer note, reference, and where shown, the sender's name and account), which we need to match and refund payments. |
| Usage and device | Pages you view and actions you take (for example starting a video, finishing one, buying). Time, language, time zone, browser, device type, IP address. Where you came from: referrer, campaign tags (utm) and ad click IDs (gclid, fbclid, ttclid). |
| Communications | Emails you send us, and whether our emails were delivered. |
We don't ask for sensitive data (health, religion, political views and similar), except your voice when you choose to create a custom voice: a voice can be biometric data, and we ask for your separate consent then (see §5). Please don't put sensitive information about yourself or others in your Input.
Country from IP address. To know which country you visit from, we look up the country of your IP address using GeoLite data created by MaxMind (https://www.maxmind.com). The lookup runs inside our own servers; we do not store the raw IP address for this purpose and we do not send IP addresses to third parties for the lookup.
3. Why we use it
| Purpose | Legal basis (EEA/UK) |
|---|---|
| Make your videos, run your account, keep your history and downloads, answer support requests | Contract |
| Take payments, issue invoices, process refunds, keep accounting records | Contract; legal obligation |
| Prevent abuse and fraud (for example, people collecting free credits with many accounts) | Legitimate interests |
| Understand how ainius is used and fix problems, using our own analytics | Legitimate interests |
| Send service emails (video ready, receipts, refunds) | Contract |
| Send product news and offers by email | Legitimate interests for customers; consent where the law requires it. Marketing emails have an unsubscribe link; our personal emails have no link, and you can simply reply "stop". |
| Measure and improve our ads with Meta, TikTok and Google pixels | Consent where the law requires it (EEA, UK, Switzerland); legitimate interests elsewhere, with an opt-out |
| Handle legal claims and takedown requests, and comply with the law | Legal obligation; legitimate interests |
Our abuse checks may automatically limit free credits on an account or device. If this happens to you, email us and a person will review it. We make no other automated decisions that have legal or similarly significant effects on you.
4. Who receives your data
We use these service providers. Each one receives only what it needs for its task.
| Provider | What it does for ainius | Data it receives | Where |
|---|---|---|---|
| Google Cloud (Cloud Run, Cloud SQL, Cloud Storage) | Hosting, database, file storage | All the data above | Singapore (asia-southeast1) |
| Google Firebase (Authentication, Hosting) | Sign-in and website hosting | Email, sign-in data, IP address | Google's global infrastructure (servers in many countries, which may include the US) |
| Our render servers | Build the video files | Scripts, images, audio, videos | Vietnam |
| OpenRouter and the model-hosting providers it picks (for example DeepInfra) | AI writing: scripts and edits (an open DeepSeek model run on these providers' servers, not DeepSeek's own) | Your topic, text, instructions, and the text of the linked article | United States and other countries (OpenRouter transfers data to servers in the US; where the model runs depends on the provider chosen) |
| Google Gemini | AI writing and image checks | Same as above, plus images | Any country where Google or its agents maintain facilities |
| TypeSafe (Jev) | AI quality and fact checks on scripts | Script text, and the title and an excerpt of the source article | United States |
| ElevenLabs | AI narration | Narration text and voice choice, and your voice recording if you create a custom voice | United States (storage); servers also in the Netherlands and Singapore |
| Firecrawl | Fetching the article at your link | The link and the page content | United States |
| Pexels | Stock images | Search keywords only (no personal data) | — |
| Resend | Sending and receiving emails | Email address and email content | United States |
| SePay | VND bank-transfer notifications | Transfer details | Vietnam (SePay is based in Ho Chi Minh City; its policy does not state where its servers are) |
| Dodo Payments | USD checkout, tax, invoices and refunds. Dodo is the Merchant of Record and an independent controller of the payment data it collects. | Name, email, billing address, payment details | Dodo's policy names no specific country; its processors may be located anywhere in the world. See Dodo's privacy policy |
| Meta (Facebook, Instagram) | Ad measurement (Meta Pixel) | Cookie IDs, browser and device data, pages and actions, IP address, your ainius account ID | United States, Ireland and other countries |
| TikTok | Ad measurement (TikTok Pixel). TikTok may also collect a hashed (scrambled) form of an email you type into a form on our site. | Same as Meta | Singapore, Malaysia, Ireland, the United States and other countries |
| Google Ads and Google Analytics | Ad measurement and analytics | Same as Meta | Google servers in many countries |
| Discord | Our community server, only if you join; and our internal channel that receives feedback you send in the app (via webhook) | What you post there; the text of your feedback (up to 300 characters, with emails and phone numbers removed before sending) | United States (and possibly other countries) |
We may also disclose data when the law requires it, to protect people's safety or our rights, or as part of a transfer of ainius to a company or a buyer.
Selling and sharing. We don't sell personal data for money. Under California law, letting ad pixels collect data for cross-context behavioral advertising can count as "sharing". You can opt out of that (see §6 and §8).
5. Your content and AI
- Your Input and the article text are sent to AI providers (OpenRouter and the hosting providers it uses, Google Gemini, TypeSafe, ElevenLabs) only to make your video. With OpenRouter we turn on a setting that excludes providers that store or train on your data.
- We do not train AI models on your Input or your videos.
- Each provider handles data under its own API terms.
Music you upload. If you upload a track to use as background music ("Your music"), the file is stored in your account and mixed into your videos; we do not use or share it for any other account. When you tick the consent box, we store the consent version, the exact text you saw, the time and your IP address, for use if a claim arises. You can delete the file at any time; videos already made may still contain it. If your account is deleted, the file is deleted. See also the section "Music you upload" in the Terms of Service.
Your voice (custom voice). If you create a custom voice, the voice recording you upload is sent to ElevenLabs to create the voice, and we keep a copy of the sample in our own storage. The only purpose is to let you narrate your own videos with it; the voice can only be used in your account. A voice can count as biometric data, so we ask for your separate consent before creating it, and store the consent together with the exact text you saw, the time and your IP address. When you delete a voice, we remove it from ElevenLabs and delete the sample from our storage.
6. Cookies, pixels and local storage
| Type | What | Can you turn it off? |
|---|---|---|
| Essential | Sign-in session (Firebase), language choice, checkout state | No. ainius doesn't work without them. |
| Our own analytics | An event log on our servers (pages, actions, campaign tags, click IDs). Local storage remembers how you first arrived. | Yes: email us and we will exclude your account. |
| Advertising | Meta Pixel; TikTok Pixel (including automatic advanced matching and click tracking); Google Ads conversion tag (cookie _gcl_aw); Google Analytics 4 | Yes, see below. |
Your choices
- EEA, UK and Switzerland: we ask for your consent before ad pixels set advertising cookies or send events. The regions where we must ask are detected from your browser's time zone. You can change your choice at any time with "Cookie settings" in the footer.
- Everywhere:
Advertising measurement
To measure whether our ads lead to sign-ups and purchases, we may share conversion events (for example a sign-up or a purchase) and hashed identifiers with ad platforms (Meta, TikTok). An event may include the time, the page, and the campaign tags or ad click IDs (fbclid, ttclid) that brought you to ainius.
- Hashed before sending. When we include your email address or another identifier to match an event to an ad click, we hash it with SHA-256 (a one-way scramble) before it leaves our systems.
- Nothing else is sent. We do not send the content of your videos, your Input or your card details to the ad platforms.
- Purpose. Only to measure conversions and improve our own advertising. We do not sell the data.
- Opting out and your rights. You can ask us to exclude your account from ad measurement by emailing support@ainius.net (subject "Privacy request"), and you can use the ad settings of Meta, TikTok and Google listed above. Your other rights are in §8. Once Meta and TikTok receive the data, they process it under their own policies.
7. International transfers
We are based in Vietnam. Our providers process data in Singapore, Vietnam, the United States, Ireland, the Netherlands, Malaysia and other countries, which may have different data-protection laws from yours.
For data from the EEA, the UK and Switzerland, we rely on the standard contractual clauses or other safeguards our providers offer, where available.
We do not send your data to DeepSeek's own servers. The AI writing model runs through OpenRouter, so data may be processed in the United States and other countries, depending on the provider that runs the model.
8. Your rights
Everyone can ask us to:
- give you a copy of your data, or export it;
- correct it;
- delete it;
- stop marketing emails (use the unsubscribe link, or reply "stop");
- stop ad tracking.
In the EEA and the UK (GDPR / UK GDPR) you can also:
- restrict or object to our use of your data, including an absolute right to object to direct marketing;
- receive your data in a portable format;
- withdraw consent at any time;
- complain to your data protection authority (in the UK, the ICO).
In California (CCPA/CPRA) you can:
- know what we collect, and delete or correct it;
- opt out of the "sale" or "sharing" of your data;
- not be treated differently for using these rights;
- use an authorized agent.
We don't use sensitive personal information, other than the voice recording you upload to create a custom voice (with your separate consent). We may not yet be required to follow the CCPA, but we honor these rights anyway.
How to ask. Email support@ainius.net from the email on your account, with the subject "Privacy request". We may ask you to confirm by email that it's you. We reply within 30 days, and it's free.
Deleting your account. Email support@ainius.net with the subject "Delete my account". We delete your account, Input and videos within 30 days. We keep:
- payment records the law requires us to keep;
- limited data we need to handle legal claims or prevent fraud.
9. How long we keep data
| Data | How long |
|---|---|
| Account and profile | While your account exists; deleted within 30 days of a deletion request |
| Your Input, scripts and videos | While your account is active. A video you delete disappears from your account and its share link stops working immediately; the files are permanently deleted when you ask us to delete your account or email us a deletion request (within 30 days of the request). |
| Temporary build files | Deleted automatically within 7 days |
| Usage events and attribution data | 24 months, then deleted or anonymized |
| Server logs | About 30 days |
| Payment and tax records | As long as Vietnamese accounting and tax law requires (up to 10 years) |
| Support emails | 24 months |
| Backups | Deleted data can stay in backups for up to 30 days before it is overwritten |
10. Security
- We use HTTPS everywhere.
- We keep files in private storage that is reached only through time-limited links. Exception: a share link you turn on yourself for a video (it makes the video and its title public and counts views) works until you turn it off.
- We limit who can access production systems.
- Card details never reach our servers; Dodo Payments handles them.
No system is completely secure. If a breach affects your data, we will tell you and the authorities as the law requires.
11. Children
ainius is not meant for anyone under 16. If we learn that we hold data about a child under 16, we will delete it.
12. Changes
We will update this policy when our practices change and change the date at the top. For material changes, we will tell you by email or in the app.
13. Contact
Nguyen Minh Tuan (Nguyễn Minh Tuấn)
Vinhomes Ocean Park 1, Da Ton, Gia Lam, Hanoi, Vietnam
support@ainius.net (subject "Privacy")