Privacy Policy

1. Scope and who we are

CineGen is an AI-assisted video production and collaboration service operated by AIon X LLC, a California limited liability company ("CineGen," "we," "us," or "our"). This policy applies to our websites, applications, account services, AI tools, project workspaces, sharing and review features, and related support communications.

Questions or privacy requests can be sent to support@aionx.aionapp.org. If you use CineGen through an organization, that organization may separately control project access and information it submits to the service.

2. Information we collect

• Account and profile information: name, email address, authentication provider, profile photo, CineGen handle, account security settings, team membership, and policy-acceptance records.
• Projects and content: prompts, scripts, storyboards, characters, voice selections, scenes, timelines, comments, support attachments, uploaded video, audio and images, generated outputs, exports, and associated metadata.
• Collaboration and sharing information: invitations, project roles, mentions, comments, replies, approvals, review-link activity, and the display name a reviewer chooses to provide.
• Billing information: plan, token balance and usage, transaction identifiers, subscription status, promotion-code use, and limited billing details returned by Stripe. CineGen does not receive or store complete payment-card numbers.
• Support and communications: messages, tickets, replies, feedback, survey participation, and related correspondence.
• Technical and activity information: IP address, browser and device information, timestamps, request and security logs, feature usage, errors, and local browser preferences needed to operate, secure, troubleshoot, and improve the service.
• Optional verified-avatar information: an adult user's liveness-session data, extracted reference frame, front and side reference images, face-comparison result, consent record, and verification status. We treat this information as sensitive and potentially biometric information.

Please do not upload highly sensitive information that CineGen does not need, including government identifiers, financial-account credentials, health records, or another person's biometric information.

Optional Google Analytics collection starts only after you allow it. We send sanitized page paths and product events, not prompts, uploaded media, project names, email addresses, or private project identifiers. Our browser error reporting may collect an error message, stack trace, browser and build context, sanitized page path, and an internal user ID so we can diagnose failures. It does not use session replay or capture project content.

3. How we obtain information

We receive information directly from you; from teammates, reviewers, or an organization that gives you access; automatically when you use the service; from sign-in providers such as Google or Microsoft; and from service providers involved in payments, generation, storage, security, and customer support.

4. How and why we use information

• Provide accounts, workspaces, editing, generation, rendering, export, sharing, collaboration, and customer support.
• Process the prompts and media you direct us to process and return the requested output.
• Operate subscriptions, token balances, invoices, promotions, fraud prevention, and account administration.
• Protect users, enforce our Terms, prevent abuse and unauthorized access, diagnose errors, and maintain service reliability.
• Send transactional messages, service announcements, support replies, and—where permitted—product or marketing communications you can opt out of.
• Comply with law, respond to valid legal process, establish or defend claims, and complete a business transaction.

Where applicable under EEA or UK law, we rely on performance of our contract, our legitimate interests in operating and securing CineGen, compliance with legal obligations, and consent where consent is required. You may withdraw consent for future processing, but this does not affect processing already performed.

5. AI processing and model providers

When you use an AI feature, CineGen sends the inputs necessary for that request—such as prompts, selected project context, images, audio, or video—to the provider that performs it. Depending on the feature, providers may include Google Cloud and Google generative-AI services, ElevenLabs, and other providers identified in the interface.

CineGen does not use private projects to train a CineGen model. Provider processing, safety review, abuse monitoring, and retention are governed by our configurations and agreements with those providers. Avoid including personal information in prompts unless it is necessary for the output you requested and you have authority to use it.

6. Verified avatars and biometric information

Verified avatars are optional, limited to adults, and require separate express consent. AWS Rekognition processes a short live-camera session to determine whether a real person is present and compares the resulting reference image with the views you submit. CineGen receives a pass/fail result and does not expose the provider's confidence score.

We store a private liveness reference frame, the same-person reference images needed to operate your avatar, verification status, and consent record until you revoke the avatar or delete your account, subject to limited backup, security, and legal retention. This process confirms liveness and continuity between captures; it does not verify a legal name or government identity. Raw capture is not placed in a project, sold, or used by CineGen to train a model. You may revoke and delete the stored avatar references in the Character Creator. Previously generated media is not automatically deleted.

Do not attempt to enroll another person. If you do not want biometric processing, do not use verified avatars; the rest of CineGen remains available according to your plan.

7. When we disclose information

We disclose information only as reasonably necessary in these circumstances:

• Service providers: Google Cloud/Firebase for authentication, databases, storage, compute, and optional Google Analytics; Google AI services for generation; AWS for optional avatar verification; ElevenLabs for requested voice features; Stripe for billing; Sentry for application error diagnostics; and communications, security, infrastructure, and support providers that act for us.
• Your collaborators and audience: teammates receive access according to project roles. Reviewers receive content made available through a share link. Anything you intentionally publish or share may be copied by its recipients.
• Third-party libraries and integrations: when you browse or import content from services such as GIPHY or Pixabay, those services may receive ordinary request information and their own terms and privacy policies apply.
• Legal, safety, and rights protection: when we reasonably believe disclosure is required by law or necessary to protect CineGen, our users, or others from fraud, abuse, security threats, or harm.
• Business transactions: as part of financing, diligence, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and notice where required.

We do not sell personal information for money or share it for cross-context behavioral advertising.

8. Storage, transfers, and security

CineGen is operated from the United States and primarily uses United States cloud regions. Information may be processed in other countries where our providers operate. Those locations may have different data-protection laws. Where required, we use recognized transfer safeguards.

We use administrative, technical, and organizational safeguards designed for the nature of the information we process, including access controls, encrypted transport, account-security controls, and restricted backend writes. No service can guarantee absolute security. Protect your credentials, enable two-factor authentication, and contact us if you suspect unauthorized use.

9. Retention and deletion

We keep account and project information while your account is active and as needed to provide the service. You can delete projects and media in the product. Account deletion uses a 30-day recovery period before permanent deletion begins. Some records may remain longer where reasonably necessary for fraud prevention, security, billing, dispute resolution, legal compliance, or limited backup cycles.

We retain policy-acceptance and transaction records as needed to document our relationship with you. Support records are retained while a request is active and for a reasonable period afterward. We delete or de-identify information when it is no longer reasonably needed for the purposes described here.

10. Your choices and rights

You can update profile information, manage notification preferences, remove content, revoke a verified avatar, cancel a subscription, export finished work, or schedule account deletion from the service where those controls are available.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of certain sales, sharing, or targeted advertising; limit certain uses of sensitive information; and appeal a denied request. We do not discriminate for exercising privacy rights. Send requests to support@aionx.aionapp.org. We may verify your identity and authority before acting. Authorized agents may be required to provide written authorization.

EEA and UK residents may also complain to their local data-protection authority. California residents may contact the California Privacy Protection Agency. Because CineGen does not sell personal information or share it for cross-context behavioral advertising, we do not currently offer a sale/share opt-out link.

11. Children

CineGen is not directed to children under 13, and we do not knowingly collect personal information from them. Users under the age of legal majority must have permission from a parent or legal guardian. Verified avatars are available only to users who are at least 18. If you believe a child under 13 submitted personal information, contact us so we can investigate and delete it.

12. Changes and contact

We may update this policy as CineGen, our providers, or legal requirements change. We will post the new version and effective date. For a material update, we may provide an in-product notice or require renewed acknowledgement.

Privacy questions and requests: support@aionx.aionapp.org.