Privacy Policy
This policy explains what data Fatih Sancar collects when you use IntactShot, why we process it, and what rights you have.
1. What we collect
- Account data: your email address and a cryptographic hash of your password (we never see the plaintext — authentication runs through Supabase Auth). If you sign in with Google instead, no password exists at all, and Google gives us your email address, your name, a link to your Google profile picture and your Google account identifier. We also record when you accepted these terms and which version.
- Content data: the images you upload — product photographs or app screenshots — the product or app page links you paste, photos of a place you save as a setting (with the note you write for it), the prompts and scripts you write, the templates you save, your brand profile, your caption choices, and the videos we generate.
- Usage data: generation records (duration, chosen avatar/voice, credits spent), your founding-member number if you hold one, and technical error logs. On your first visit to the studio we also ask where you heard about us and what kind of work you do. We store the option you pick, and the short text you type if you answer “somewhere else”.
- Billing data: your plan, subscription status and Dodo Payments customer ID, and the payment notifications Dodo Payments sends us, which include the name, email address and billing address you gave at checkout and the amounts and tax charged. We never receive your card number; card payments are processed solely by Dodo Payments, and the card-related fields in its notifications (the name on the card, its last four digits and its type) are removed before we store them.
2. Why we process it
- To provide the Service and generate your videos (performance of a contract);
- To manage your subscription and credit balance;
- To prevent abuse and keep the Service secure (legitimate interest);
- To meet legal obligations (invoicing, accounting).
We do not sell your data or share it with third parties for advertising.
3. Processors we share data with
To run the Service, parts of your data are passed to the processors below. Each receives only what its function requires:
- Supabase — database, authentication, file storage, and the account emails we send you, such as the link that confirms your address. Your account and your uploads live here, and so do videos made before we moved them to Cloudflare.
- Cloudflare — storage and delivery of the first frames and the videos we make for you (Cloudflare R2), and the DNS of our domain.
- Google — only if you choose to sign in with Google, which tells us the email address, name, profile picture link and account identifier of that Google account.
- OpenRouter — the gateway through which our script-writing model runs, and through which the Veo renderer runs if you choose it in Studio (and the Kling renderer, when Higgsfield is unavailable). Your uploaded image, your product description, your brand profile and (for those renderers) your script are sent here, and so is a setting photo when you save one. OpenRouter routes to OpenAI (writing the script and describing the scene of the first frame), to DeepSeek (analysis of the image you upload, checking a setting photo and describing the place in it, and checking the frames generated for your video) and, only if you choose that renderer, to Google (Veo) or Kuaishou (Kling) — the video model, which also generates the spoken voice for that video.
- Higgsfield — the gateway through which the Wan, Kling and Seedance renderers run if you choose one in Studio. The composite frame (built from your uploaded image) and your script are sent here. Higgsfield routes them to Alibaba (Wan), Kuaishou (Kling) or ByteDance (Seedance), the video model, which also generates the spoken voice for that video. Higgsfield keeps the request and the generated clip for seven days, then deletes them.
- Fal.ai — the gateway through which most generation models run, and which itself removes the background from your product photo (and, when the photo is small, first enlarges it with Recraft’s upscaler; when the photo shows several items, Meta’s SAM 3 picks the product out of it). Your uploaded image, your setting photo if you chose one, and your script text are sent here. We hold no direct relationship with most of the model providers; Fal.ai runs these on our instruction: OpenAI (the composite frame, in every video, built from your uploaded image, your chosen avatar and, if you chose one, your setting photo; in the First frame tool you may instead choose Krea (Krea 3), ByteDance (Seedream) or Google (Nano Banana) to draw that frame); ElevenLabs (the narration of hands-only videos; for the Wan, Kling, Seedance and Veo renderers, a transcription of the generated video’s audio, used only to time the captions; and, unless you keep the model’s own voice or when you use Change voice, the generated video’s speech, re-voiced in the voice you chose); Meta (SAM Audio, which separates that speech from the background sound before its voice is changed).
- HeyGen — rendered talking videos made before 29 October 2026, animating the presenter from the composite frame and the ElevenLabs voice through a direct account with us. New videos are not sent to HeyGen; they are rendered through Higgsfield or OpenRouter.
- Dodo Payments — payments, invoicing and tax (Merchant of Record).
- Railway — the hosting on which the app and its job queue run.
- Sentry — error monitoring. When something in the app fails it receives the technical details of that failure: the error, the code path it came from, the page you were on, and your browser version. It is configured not to receive your IP address, it sets no cookie, and it never records your screen. We use it to find and fix faults, nothing else.
- PostHog — product analytics, and only if you accept analytics cookies. It receives which features you use, which pages you visit, where you click and scroll, and a replay of your visit reconstructed from the pages you saw. What you type into a field is masked before it is sent, and the images and videos inside your account — your uploads and your finished ads — are blocked from that replay. It also runs the in-app chat widget you can use to reach us: a message you send this way, and the email address you give it to receive a reply, go to our support inbox. If we ask you a question in a short in-app survey, your answer is stored there too — answering is always optional and declining changes nothing about your account. Stored in the European Union.
We do not train any model ourselves. The models above are third-party services used through their providers’ APIs, and what each provider does with the data it receives is governed by its own terms, which we do not control.
These providers operate servers outside Türkiye and outside the European Economic Area. Your account and uploads are stored in South Korea (Supabase’s Seoul region); first frames and videos are stored by Cloudflare R2 in its Eastern Europe location; the app and its job queue run in the United States (Railway); the AI providers above process what they receive in the countries where they operate, principally the United States and, for DeepSeek, Wan, Kling, Seedance and Seedream, possibly China. Those transfers are made on the basis of the transfer safeguards in each provider’s data processing terms — in practice the European Commission’s Standard Contractual Clauses, and for providers certified under it, the EU–US Data Privacy Framework.
4. Retention
We keep account and content data for as long as your account exists. There is no automatic expiry: a video you generated stays in your library until you delete it or delete the account. You can delete an individual video from the app at any time; that removes the video and all its files. A one-line record of it stays — its date, length, the credits it cost and how it ended, with no content — until you delete the account, so that your credit balance can be explained if a payment is ever disputed.
When you delete your account (Settings → Delete account), your generated videos (including captioned copies) and first frames, uploaded images and setting photos, saved templates, brand profile, generation records (including those one-line records) and account record are permanently deleted, and your login is removed from our authentication provider. One thing to expect: if you still have an active subscription, deletion first cancels it, and if that cancellation cannot be completed the account is not deleted and you are told to cancel from the Billing page first — we will not leave a deleted account being charged.
Two things deliberately survive. Billing records are held by Dodo Payments as Merchant of Record, for as long as tax and accounting law requires, and deleting your account here does not erase them there. On our own side we keep a minimal log of payment events — the payment provider’s event reference, the kind of event and when it happened — because it is what stops a repeated payment notification from being counted twice. The payment details inside those entries are erased with the rest of your account; what remains identifies no one.
5. Your rights
You have the right to access your data, have it corrected, request its deletion, receive a copy in a portable form, restrict or object to processing, and withdraw any consent you gave. You can exercise the deletion right directly in the app (Settings → Delete account). For anything else, write to support@intactshot.com and we will respond within 30 days.
If you think we have handled your data wrongly you can also complain to a supervisory authority: in the EU, the data protection authority of the country you live in; in Türkiye, the Personal Data Protection Authority (KVKK).
6. Children
The Service is for adults. It is not directed at children, we do not knowingly collect data from anyone under 18, and accounts are open only to people of that age or over. If you believe a minor has created an account, write to us and we will delete it.
7. Cookies
We set the cookies required to keep you signed in, one that remembers your cookie choice, one that remembers your interface language, and two short-lived ones: one carries your acceptance of the terms through sign-up, the other confirms a password-reset link was opened. We also offer an optional analytics category, switched off by default: nothing in it loads unless you turn it on, and turning it back off stops it and deletes what it stored. There is no advertising, remarketing or cross-site tracking on this site. Dodo Payments sets its own necessary cookies during checkout. Every cookie is named and explained in our Cookie Policy, where you can also change or withdraw your choice.
8. Contact
Data controller: Fatih Sancar, an individual based in Denizli, Türkiye. A postal address is available on request by email. For any privacy question, or to exercise any of the rights above: support@intactshot.com. We answer within 30 days, as required by the GDPR.