iLoveVideoEditor
Back to home

Privacy Policy

Last updated: June 24, 2026

This Privacy Policy explains how iLoveVideoEditor SRL("we", "us", or "our") collects, uses, stores, and protects your personal data when you use our website, applications, APIs, and services (collectively, the "Services"). It also describes your rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

1. Data Controller

The data controller responsible for your personal data is:

2. Our Core Privacy Principles

  • Privacy by design: We collect only the data necessary to provide and improve the Services.
  • Transparency: We tell you what we collect, why we collect it, and who we share it with.
  • Your control: You have rights over your data, including access, correction, deletion, and portability.
  • Security: We use industry-standard security measures to protect your data.

3. What Data We Collect

3.1 Account and profile information

When you create an account, we collect your email address, password hash (managed by our authentication provider), and optionally a display name and avatar. If you sign in via OAuth (Google, GitHub, or Apple), we receive your email address and basic profile information from the provider you choose.

3.2 Usage and technical data

We automatically collect information about how you interact with the Services, including:

  • Pages visited and features used
  • Video render jobs created, their cost, resolution, and duration
  • Browser type, operating system, device information, and language
  • IP address (hashed before storage for analytics)
  • Anonymous identifier to link events across sessions
  • Error reports and performance diagnostics

3.3 Payment information

We do not store credit card details or other payment instrument data. Payments are processed securely by Dodo Payments, which acts as a data processor. We receive and store only your customer ID, subscription status, invoice history, and credit balance within our systems.

3.4 Files and content you upload

You may upload media files (video, audio, images, fonts) to your account. These files are stored in your private workspace in Supabase Storage and are accessible only to you and members of your workspace. We do not access, analyze, review, or use the content of your files except as necessary to provide the Services.

3.5 Projects and video compositions

When you save a project, we store its VideoJSON description, thumbnails, status, and related render job identifiers in our database.

3.6 Render job data

To export a final video, your VideoJSON is sent to our cloud render pipeline. The render job metadata is stored in Cloudflare D1, the VideoJSON and temporary frame/audio data are stored in Cloudflare R2, and the resulting MP4 file is stored in R2 until it is automatically deleted. See Section 7 for retention details.

3.7 Communications

If you contact us, subscribe to our newsletter, or receive transactional emails (such as welcome, confirmation, password reset, invoice, or low-credits notifications), we collect your email address, the content of your message where applicable, and metadata related to delivery.

4. How We Use Your Data

We use your personal data to:

  • Provide, operate, and maintain the Services
  • Authenticate you and manage your account and workspace
  • Process video render jobs and deliver output files
  • Process payments, subscriptions, and credit top-ups
  • Send transactional emails and service notifications
  • Improve product features, performance, and user experience
  • Detect, prevent, and address fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service

5. Legal Basis for Processing (GDPR)

We process personal data only where we have a valid legal basis:

  • Performance of a contract: to provide the Services and process your render jobs and payments.
  • Legitimate interests: to improve our Services, ensure security, prevent fraud, and send service-related communications.
  • Consent: for analytics and marketing cookies and communications, where required. You can withdraw consent at any time.
  • Legal obligation: to comply with applicable laws, regulations, or lawful requests from public authorities.

6. Data Processors and Third-Party Services

We engage carefully selected third-party providers to process data on our behalf. These processors are contractually bound to use your data only for the purposes we specify and to implement appropriate security measures.

  • Supabase — authentication, PostgreSQL database, and object storage for user accounts, projects, and uploaded assets.
  • Dodo Payments — payment processing, subscriptions, and invoicing.
  • Resend — delivery of transactional emails (only when configured; otherwise a no-op provider is used).
  • Cloudflare — CDN, DDoS protection, Web Application Firewall, R2 object storage, D1 database, Turnstile challenge verification, and DNS.
  • Railway — cloud compute for the render pipeline (render API, queue workers, headless browser rendering, MP4 assembly) and Redis queue hosting.
  • Google Analytics 4 — website usage analytics, routed through our own analytics proxy to limit direct data sharing.
  • PostHog — product analytics and event tracking.
  • Sentry — error monitoring and performance diagnostics.
  • Google Tag Manager and Microsoft Clarity — used only if explicitly enabled in our configuration.

7. How We Handle Your Files

7.1 Browser-based editing

Preview, trimming, and many editing operations happen directly in your browser. The source files you open from your local device are not uploaded to our servers unless you choose to save them to your account or start a cloud render.

7.2 Cloud render pipeline

When you export a final MP4, your VideoJSON and any remote source URLs are sent to our Cloudflare-based render pipeline. No one at iLoveVideoEditor accesses or reviews the content of your video. We process your data only to the extent necessary to produce the output file.

7.3 Retention periods

  • Rendered MP4 output files: stored for 30 days after the render completes, then automatically deleted.
  • Temporary render files (frames, audio chunks, intermediate data): deleted automatically as soon as the render job is finalized.
  • Uploaded assets and projects: kept in your account until you delete them or close your account.
  • Render job metadata: retained for operational and billing purposes in line with our legitimate interests, typically aligned with the retention of your account.
  • Account and billing records: retained as long as necessary to comply with tax, accounting, and legal obligations.

8. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, understand how you use the Services, and improve your experience.

8.1 Necessary cookies

These cookies are essential for the Services to function. They include authentication tokens (such as Supabase session cookies) and security cookies.

8.2 Analytics cookies

We use Google Analytics 4, PostHog, and Sentry to collect anonymized or pseudonymized usage and error data. Where required by law, we will ask for your consent before enabling analytics cookies.

8.3 Marketing cookies

Marketing and advertising cookies are not enabled by default. If we enable them in the future, we will request your consent and update this policy accordingly.

8.4 Managing cookies

You can manage or disable cookies through your browser settings. Please note that disabling necessary cookies may prevent you from using certain features of the Services.

9. International Data Transfers

Some of our processors are located outside the European Economic Area (EEA). When we transfer your data internationally, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission and additional technical and organizational measures, to ensure an adequate level of data protection.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), encrypted storage, access controls, hashed identifiers in analytics, row-level security in our database, regular security reviews, and limited internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights Under GDPR

If you are located in the EEA, UK, or another jurisdiction that grants similar rights, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your personal data ("right to be forgotten"), subject to legal retention obligations.
  • Restrict processing in certain circumstances.
  • Object to processing based on legitimate interests or for direct marketing.
  • Data portability — receive your data in a structured, commonly used format.
  • Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
  • Lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, contact us at privacy@ilovevideoeditor.com. We will respond within one month, or inform you if we need more time due to the complexity of your request.

12. Children's Privacy

The Services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without parental consent, please contact us and we will delete the information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the functionality of the Services. We will post the revised policy on this page with a new "Last updated" date. Where changes are significant, we will notify you through the Services or by email.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Definitions

  • Personal Data: any information relating to an identified or identifiable natural person.
  • Processing: any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
  • Data Controller: the entity that determines the purposes and means of processing personal data.
  • Data Processor: a third party that processes personal data on behalf of the Data Controller.
  • User: any individual who accesses or uses the Services.