Legal

Privacy policy

Last updated: 14 October 2026

1. Information we collect

• Account details. When you sign in with Google we receive your name, email address and profile photo. We never see your Google password.
• Brand and video content. Logos, colours, fonts, business name and contact details, product photos, prices and text you add to brand kits and videos, and the videos we render for you.
• Billing records. The packs you buy, amounts, order and payment ids and your credit history. Card, UPI and bank details are entered directly with Razorpay or PayPal; we do not receive or store them.
• Business API data. API keys (shown to you once), webhook URLs, batch and video requests including any external ids and metadata you send.
• Free tools. Photos you put into the free photo enhancer or background remover are processed and sent straight back to your browser; we do not store them. To limit free use per day we keep a one-way hash of your IP address for two days. The marketplace video checker and video size guide read your file inside your browser and send nothing to us.
• Technical data. IP address, browser type, timestamps and error logs needed to run, secure and debug the service.
• Browser storage. We store a copy of the template catalogue and, before you sign in, a draft brand kit in your browser's local storage. We do not use advertising cookies.
• Analytics. We use Google Analytics to understand how visitors use the website: which pages they open, where they come from (for example a search or a link), and steps such as signing up, making a video or buying credits. It sets a first-party analytics cookie and records a pseudonymous account id when you are signed in, never your name or email. Google signals and ad personalisation are switched off. Visitors in the European Economic Area, the UK and Switzerland are asked first, and analytics cookies are only set if they accept.

2. How we use it

• To provide the service: sign you in, save your brand kits, preview and render your videos and deliver them to you or your webhook.
• To process payments, keep an accurate credit ledger and refund failed renders.
• To prevent abuse and fraud, enforce rate limits and keep accounts secure.
• To answer support requests and send essential service messages (for example about payments or changes to these policies).
• To understand and improve the product in aggregate.

We do not sell, rent or trade your personal information, and we do not use your brand content to advertise to others.

3. Service providers

We share data only with providers that help us run MsgVibe, and only what they need:

• Google Firebase: sign-in and identity verification.
• Amazon Web Services (United States): hosting, storage of brand assets and videos, databases and video rendering.
• Razorpay (India) and PayPal (international): payment processing.
• Brandfetch: only if you use “auto-fetch from website”, we send the website domain you enter to look up public brand assets.

We may also disclose information if required by law, or to protect the rights, safety and property of our users and MsgVibe.

4. Retention

We keep your account, brand kits and videos while your account is active. Billing records are kept as long as tax and accounting laws require. Logs are kept for a limited period for security and debugging. When you delete your account we delete or anonymise your personal data within 30 days, except where we must keep it by law.

5. Security

Data is encrypted in transit (HTTPS). Every API request is authenticated, and payment confirmations are verified with the payment provider on our servers. No system is perfectly secure, so please keep your Google account and API keys safe and tell us at once if you suspect misuse.

6. Your rights

You can access and update your brand kits in the app at any time. You can also ask us to provide a copy of your data, correct it, or delete your account and data by writing to team.msgvibe@gmail.com. Where the law of your country (including India's Digital Personal Data Protection Act, 2023 and the GDPR) gives you further rights, we will honour them. You may also complain to your local data protection authority.

7. Children

MsgVibe Studio is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

8. MsgVibe for Shopify

When a store installs MsgVibe from Shopify, the store is in control of its data and MsgVibe processes it on the store's behalf, only to make the videos the store asks for:

• Store data: the store name, contact email, currency and domain, and its products (names, prices, photos) to make product videos.
• Order data, only if the store switches on thank-you videos: the order number, the first item bought and the customer’s first name, which appears in that order’s thank-you video. We do not request customer email addresses, phone numbers or addresses.
• We use this data only to make and show the store’s videos. We never sell it, never use it for advertising or profiling, and never contact the store’s customers.
• Thank-you videos and the order number are kept with the store’s other videos while the app is installed. The customer’s name is not kept anywhere else.
• When a store uninstalls MsgVibe we stop accessing its data. When Shopify asks us to delete a store’s or a customer’s data, we delete it.

9. International transfers

Our servers are in the United States. By using MsgVibe you understand that your information is processed there, with the safeguards described in this policy.

10. Changes and contact

If we make material changes we will update the date above and, where appropriate, notify you in the app or by email. Questions? Write to team.msgvibe@gmail.com.