Privacy Notice
This page explains in plain English how Flinzo works today. If anything here is unclear, write to support@flinzoai.com and we will answer.
This notice covers Flinzo, a US video editing service. It is written in the shape US state privacy laws expect — categories, sources, purposes, retention, rights — because that shape is also the clearest way to tell you what actually happens to your footage.
Three statements up front, because they are the ones people ask about. We do not sell or share your personal information, and we have no advertising technology, no third-party ad pixels and no data brokers. We do not use your content to train AI models. We never send your whole video to an AI model: a model sees the transcript, the scene boundaries and a small set of sampled still frames, and it returns a plan in JSON that our own renderers execute.
1. What we collect, where it comes from, why, and how long we keep it
| Category | Examples | Source | Why we process it | Retention |
|---|---|---|---|---|
| Identifiers | Email address, account ID, sign-in provider ID, IP address at sign-in | You, when you create an account; your browser | Create and secure your account, sign you in, apply rate limits, detect abuse | While your account exists; deleted when you delete your account |
| Commercial information | Plan, credit balance, credit ledger entries, top-up purchases, invoices, the disclosure text shown to you at checkout | You; Stripe | Charge you correctly, apply quotas, refund credits when we fail, answer a billing dispute | Billing disclosure records and invoices are kept at least three years because California law requires it; they survive account deletion. Everything else goes with the account. |
| Internet or network activity | Pages viewed, actions taken in the editor, error events, request timing | Your browser, first-party and cookieless | Understand where the product fails, measure time to first result, fix bugs | Aggregated after 90 days; raw events deleted |
| Audio, electronic, visual and similar information — your footage | The video and audio files you upload, derived audio, sampled still frames, transcripts with word timings, scene boundaries, salience tracks, crop rectangles, edit plans, rendered output | You, by uploading or by giving us a direct file or authorised cloud-storage link | Do the editing you asked for: transcribe, detect scenes, propose a plan, cut, reframe, caption, render | Per your plan's retention period, and deleted immediately when you delete the project or your account |
| Professional or employment information | None. We do not collect it. | — | — | — |
| Sensitive personal information | We do not deliberately collect it. Your footage may contain whatever you filmed, including your own voice and face; we treat all footage as confidential and process it only to edit it. | You | Same as your footage above | Same as your footage above |
| Precise geolocation | None. We do not collect it. | — | — | — |
| Biometric identifiers | None. See "Face detection for framing" below: we keep crop geometry and salience scores, not face templates. | — | — | — |
We do not use your personal information for automated decisions that have a legal or similarly significant effect on you. Every edit plan is shown to you and waits for your approval.
2. Face detection for framing
To turn a wide shot into a vertical clip, something has to decide where to crop. Flinzo detects where a face is in a frame and uses that, together with motion and where the audio is coming from, to choose the crop.
- What we keep
- A crop rectangle per shot — four numbers — and a salience score per region over time. Nothing else.
- What we never create or keep
- No face template, no face embedding or descriptor, no landmark sets, no cropped face thumbnails, and no per-frame detection intermediates. Detection intermediates are discarded inside the same process and are never written to storage or to the database.
- What we never do
- We do not identify anyone, we do not match a face against any database, we do not cluster shots by "same person", and we do not offer face search or per-person highlights. These are prohibited features, not features we have not built yet.
- How long it lasts
- Crop geometry and the salience track are part of the project and are deleted when you delete the project or your account.
We say this plainly on the upload screen too, where you are actually making the decision, rather than only here.
3. We do not sell or share, and we honour Global Privacy Control
We do not sell your personal information and we do not share it for cross-context behavioural advertising. There is nothing to sell: Flinzo runs no advertising technology, sets no third-party advertising or analytics cookies, embeds no session-replay tool and works with no data brokers.
Because of that, an opt-out signal from your browser is trivially satisfiable and we honour it. If your browser sends the Global Privacy Control signal — as the Sec-GPC request header, or through navigator.globalPrivacyControl — we treat it as a valid do-not-sell-or-share request for that browser and record that we honoured it. You do not need to do anything else, and you do not need an account for this to apply.
If we ever introduce anything that could amount to selling or sharing, this section changes first and we will tell you before it does.
4. Who we disclose information to
We disclose personal information to service providers who process it on our instructions and only to run Flinzo: hosting, storage, queueing, speech-to-text, AI planning, payments, transactional email and error monitoring. The subprocessors page names each one, what it does, what categories it receives, where it runs, and whether we have confirmation that it does not train on our data.
Read the subprocessors page rather than this paragraph for provider retention. Two honest details that belong here: an AI provider may retain a request longer than its normal window when its own abuse-detection system flags it, and a provider's backups can hold a deleted item for a short period after deletion. Where we know the number, the subprocessors page states it.
We also disclose information where a law or valid legal process requires it, to protect our rights or someone's safety, and — if Flinzo is ever sold or merged — to the acquirer, under the same commitments.
5. Your rights and how to exercise them
Wherever you live in the US, you get the same set of rights from us. We do not make you prove residency in a particular state to get them.
- Know and access — what we hold about you, and a copy of it in a portable format.
- Delete — your account and everything behind it. This is self-serve: you do not have to email anyone, and there is no retention screen.
- Correct — inaccurate personal information.
- Opt out of sale or sharing — already satisfied, because we do neither. A Global Privacy Control signal is honoured automatically.
- Limit the use of sensitive personal information — we do not use it for anything beyond providing the service.
- No retaliation — exercising a right never changes your price, your plan or your access.
Account settings has both Export my data and Delete my account and all my data. Deleting your account removes your projects, your footage, your transcripts, your edit plans and your rendered output, and the deletion reaches our providers: transcripts held by a speech-to-text provider are deleted through its API, stored objects are purged, and derived frames go with them. The only exception is the small set of billing records named in section 1.
If you would rather ask us than use the controls, or if you want to appeal a decision we made about a request, write to us. We answer within 45 days and will tell you if we need the one extension the law allows. An authorised agent may make a request on your behalf with written proof of authority.
- Privacy requests and appeals
- support@flinzoai.com
6. Security, children, and changes
Your files are stored in private object storage — no public buckets — and are reachable only through short-lived signed links scoped to you. Every query for a project, an asset or a render is filtered by owner, so one account cannot reach another account's data. Media processing runs in a sandbox with no network access. Secrets live in environment variables and are redacted from logs. No system is perfect; if a breach affects you, we will notify you and the relevant authorities as the law requires.
Flinzo is for people aged 18 and over. We do not knowingly collect personal information from children. If we learn that an account belongs to someone under 18, we terminate it and delete the data.
When this notice changes materially we update the version and date at the top and tell account holders before the change takes effect.