Privacy Policy
This Privacy Policy explains what personal data Media Buddy collects, how we use it, who we share it with, and how long we keep it.
We collect as little as we can. To use Media Buddy you give us an email address; the topics, scripts, prompts, and videos you work with are processed and stored only temporarily to run the Service, and are deleted automatically after a short retention period. We do not sell your data, we do not build advertising profiles, and we do not use your content to train AI models.
1. Who We Are
The controller responsible for your personal data is:
- RUSSEL INTERNATIONAL CO., LIMITED (豐順國際貿易有限公司)
- Flat/Rm 1303, 13/F, Cheong Tai Building, Nos. 287-289 Reclamation Street, Kowloon, Hong Kong
- Contact email: hello@media-buddy.com
For any privacy question, or to exercise your rights, email hello@media-buddy.com. We aim to respond within 30 days.
2. What We Collect
We collect only what we need to run the Service:
Account data
To create an account we require an email address and a password (stored only as a secure hash). If you choose to provide optional profile details, we store those too. Email is the only piece of personal data we require.
Billing data
When you buy credits, our third-party payment provider processes the payment. We receive and keep transaction records — such as the amount, date, status, and your credit balance — but we do not receive or store your full payment-card number or security code.
Content you create
To generate videos, the Service processes what you put in — topics, scripts, prompts, any images or material you provide — and the videos it produces for you. This content is handled temporarily to deliver the Service and is deleted automatically after a short retention period (see Sections 3 and 7).
Technical and log data
For security, fraud prevention, and troubleshooting, we process technical data such as IP address, timestamps, request metadata, error logs, and basic device/browser information. We try to avoid recording your scripts, prompts, or generated content in our logs.
3. Your Content: Temporary Processing and Automatic Deletion
The content you create with Media Buddy is treated as temporary working data:
- Your inputs and generated videos are stored only for as long as needed to produce and deliver your videos, and are deleted automatically once the applicable retention period ends.
- To generate a video, the necessary parts of your input (for example prompts, scripts, or reference material) are sent to the third-party AI-model and stock-media providers that carry out the generation. Their handling of that data is governed by their own terms.
- We do not use your content to train AI models, and we do not sell it or share it for advertising.
You are responsible for keeping your own copy of any finished video you want to keep, and for what you upload and publish (see the Terms of Service).
4. How We Use Your Data
We use personal data to:
- create and secure your account and let you sign in
- provide the Service and generate the content you request
- process credit purchases and keep billing and transaction records
- keep the Service secure, prevent abuse and fraud, and troubleshoot problems
- send you service-related emails (such as account, security, and billing messages)
- comply with our legal obligations
We do not build advertising or behavioural profiles about you, and we do not sell your personal data.
5. Who We Share Data With
We share personal data only with the service providers we need to run the Service, and only to the extent necessary. These fall into two groups.
Named infrastructure providers:
- Supabase — managed database and authentication (account, sign-in, credit balance)
- Cloudflare — DNS, CDN, security, and object storage (Cloudflare R2)
- Vercel — website and application hosting
- Resend — transactional email (account, security, and billing messages)
Other providers, referred to by category rather than name: a third-party payment provider (to process credit purchases), third-party AI-model providers and a stock-media provider (to generate videos). Video rendering is performed on cloud infrastructure located in Hong Kong. We do not sell your personal data to anyone. If we add a significant new provider that processes personal data, we will update this policy.
6. Where Your Data Is Processed
Media Buddy is operated from Hong Kong. Depending on the provider and feature, your data may be processed in Hong Kong, in Singapore (our managed database region), and on globally distributed infrastructure (for example Cloudflare's network). Some providers may process data in other countries.
Where personal data is transferred across borders, we rely on appropriate safeguards required by applicable law. For users in the EEA and the UK, see the regional rights section below.
7. How Long We Keep Data
We keep personal data only as long as needed for the purpose it was collected, and then delete or anonymize it:
- Account data: kept while your account is active; deleted after you delete your account, unless we must keep some records longer by law.
- Content you create (inputs and generated videos): stored temporarily and deleted automatically after the applicable retention period.
- Billing and transaction records: kept as long as required for accounting and tax compliance.
- Technical and log data: kept for a short period (typically around 30 days), unless needed longer for a security investigation or legal compliance.
8. How We Protect Your Data
We use reasonable technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, access controls, authenticated APIs, rate limiting, and minimizing sensitive content in logs. No online service can guarantee absolute security. If a data breach occurs that is likely to affect your rights, we will take the steps required by applicable law, including notifying authorities and/or affected users where required.
9. Your Rights
Subject to your local law, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing relies on it. To exercise any of these, email hello@media-buddy.com. You may also delete your account at any time.
10. Cookies
The website uses essential cookies needed to keep you signed in, maintain security, and process payments. We do not use advertising or cross-site tracking cookies. If we introduce optional analytics in future, we will ask for your consent first.
When you are directed to our payment provider to complete a purchase, that provider may set its own cookies, governed by its privacy policy.
11. Children
Media Buddy is intended for adults and for business and professional use. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact hello@media-buddy.com and we will delete it.
12. Regional Privacy Rights
The following applies in addition to the rest of this policy, for users in the regions named.
European Economic Area and United Kingdom (GDPR / UK GDPR)
If you are in the EEA or the UK, we process your personal data on the legal bases of performing our contract with you (providing the Service), our legitimate interests (security, fraud prevention, and improving the Service), your consent (where asked), and compliance with legal obligations.
You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent. Where your data is transferred outside the EEA or UK, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses or equivalent. You also have the right to lodge a complaint with your local data protection authority.
California (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access or deletion, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or an in-app or website notice; minor changes update the "Last updated" date without separate notice.
14. Contact
For privacy questions or to exercise your rights:
- RUSSEL INTERNATIONAL CO., LIMITED (豐順國際貿易有限公司)
- Flat/Rm 1303, 13/F, Cheong Tai Building, Nos. 287-289 Reclamation Street, Kowloon, Hong Kong
- Email: hello@media-buddy.com