Privacy Policy
The short version
- Your photos, descriptions, and generated videos stay on your computer. We never see them.
- We collect the minimum personal data needed to run a subscription business — your email, account identifier, and payment status.
- We don't sell your data. We don't share it with advertisers.
- We use Microsoft Entra External ID for sign-in and Chargebee + Stripe for billing. They process the personal data they need to do their jobs.
1. Who we are
This policy explains how OSD365 Limited ("we", "us", "our") handles personal information when you use Image2Video Studio.
2. What we collect
Account information
- Email address (you provide this when you sign up).
- A display name (optional — used to greet you in the app).
- A unique account identifier issued by Microsoft Entra External ID.
- Subscription state (trial, active, paused, cancelled), renewal date, and plan.
Payment information
Payment is processed by Chargebee and Stripe. We don't store your full card number — Stripe does, in their PCI-compliant vault. We see a tokenised reference and the last four digits.
Technical information
When the app checks in with our servers to verify your subscription or download an update, our servers log standard request metadata — IP address, timestamp, app version, Windows version, and the kind of request being made. We use this to operate the service and to investigate abuse. We do not associate this data with your generated content (we have none of it).
What we do not collect
- The photos you import into the app.
- The prompts or descriptions you write.
- The videos you generate.
- Anything else from your computer beyond what's described above.
3. How we use it
- To deliver the service: verify your subscription, send updates, provide support.
- To run the business: bill you, comply with tax and accounting law.
- To improve the app: aggregate, anonymous usage signals (e.g. how many active subscribers; not what they generate).
- To investigate abuse: when we receive a credible report that someone is using the app to break the Code of Use.
- To comply with the law: respond to valid legal requests.
4. C2PA Content Credentials
Every video Image2Video Studio produces includes a C2PA Content Credentials manifest. The manifest contains your account identifier (a long opaque string, not your email) signed by Microsoft Entra. This lets us — and, with a lawful request, law enforcement — link a generated video back to the account that produced it. It does not contain your email, name, or any other directly-identifying detail.
5. Who we share data with
We share the minimum data necessary with the following service providers, and only so they can perform their function:
- Microsoft Entra External ID — account authentication and identity.
- Chargebee — subscription management.
- Stripe — payment processing and storage of your card.
- Cloudflare — content delivery and edge compute for licence checks and downloads.
We don't sell your personal data. We don't share it for marketing. We don't use it for behavioural advertising.
6. How long we keep it
- Account data — for as long as your account exists, plus the period required by tax and accounting law (typically 7 years).
- Server logs — 90 days.
- Abuse-investigation records — as long as the underlying matter is open, then archived for the period required by law.
- Priority waiting list emails — until launch is complete, after which they are deleted unless you've also signed up for a paid subscription.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export the personal data we hold about you, or to object to certain processing. You can exercise any of these by emailing privacy@image2video.studio. We'll respond within the timeframe required by applicable law (typically 30 days).
8. Security
We use industry-standard practices to protect personal data — encrypted connections, hardened cloud infrastructure, principle of least privilege for staff access. No system is perfectly secure; if we ever experience a personal data breach affecting you, we'll notify you as required by law.
9. Children
Image2Video Studio is not directed at children under 13 (or 16 in some jurisdictions). We don't knowingly collect personal data from children. If you believe we have, contact us and we'll delete it.
10. International transfers
Our service providers operate globally, which means your personal data may be processed in countries other than the one you live in. When that happens, we rely on the appropriate legal mechanisms (such as Standard Contractual Clauses) to make sure your data continues to be protected.
11. Changes to this policy
If we make material changes to this policy, we'll let you know — by email if we have your address, and by publishing the updated policy on this page with a new "last updated" date.
12. Contact
Questions about privacy: privacy@image2video.studio.