Privacy Policy
This Privacy Policy explains how SANTO VIDEO (the "Service", available at santovideo.io) collects, uses, shares and protects personal information. The Service is operated by Sabatier Group LLC, a Nevada limited-liability company, 20320 Pinion Springs Dr, Henderson, NV 89074, USA ("we", "us"). We are the controller of the personal information described here. Contact: office@sabatiers.com.
1. Information we collect
Information you give us
- Account information: your email address and, if you choose, a display name. We use passwordless sign-in: a one-time code sent to your email, or sign-in with Google or Apple.
- Information from Google or Apple: if you sign in with Google we receive your name, email address and profile picture; if you sign in with Apple we receive your email address (or an Apple private relay address) and, if you share it, your name. We do not receive your Google or Apple password.
- Content you create: prompts, scripts, settings, images, videos and audio you upload, and the videos, images and audio the Service generates for you.
- Face data ("Star in it", Face Swap, characters): if you choose to save your face, we process the photos you upload so your likeness can appear in your videos. See section 4.
- Payment information: purchases are processed by Stripe. We receive your plan, purchase history and limited card details (such as brand and last four digits); we never receive or store your full card number.
- Support messages and any other information you send us.
Information collected automatically
- Usage and device data: pages and features used, generations started, credits used, approximate location derived from IP address, browser and device type, and error logs.
- Cookies and local storage: we use strictly necessary storage to keep you signed in and remember your settings, and first-party analytics to understand how the Service is used. We do not use third-party advertising cookies.
2. How we use information
- To create and secure your account and sign you in (including sending sign-in codes by email).
- To provide the Service: generate, store, edit and export your content, and manage credits and subscriptions.
- To process payments, prevent fraud and abuse, and enforce our Terms of Service.
- To send service messages, such as sign-in codes, receipts and important account notices. Marketing emails are sent only where permitted, and you can unsubscribe at any time.
- To provide support, measure and improve the Service, and fix problems.
- To comply with legal obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your uploads, face data or generated content to train our own or third-party AI models.
Legal bases (EEA, UK and similar laws): performance of our contract with you; our legitimate interests in running, securing and improving the Service; your consent (for face data and optional marketing), which you can withdraw at any time; and compliance with legal obligations.
3. Google user data
When you sign in with Google, we request only your basic profile and email address (the openid, email and profile scopes) and use them solely to create and sign in to your SANTO VIDEO account. SANTO VIDEO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not use it to train AI models.
4. Face data
Face features are optional. We process your face photos only after you confirm that the face is yours (or that you have the documented consent of the person shown) and agree to this processing. We use them only to place that likeness in videos you request. We do not use face data to identify people, and we do not sell, rent or disclose it except to the service providers that generate your videos on our behalf. You can delete a saved face at any time in the app, and we delete face data within 30 days of deletion, when your account is closed, or after 3 years of inactivity, whichever comes first.
5. How we share information
We share personal information only as described here, with service providers bound by contract to use it solely to provide services to us:
- Supabase (database, authentication and file storage) and Amazon Web Services (website hosting and email delivery through Amazon SES).
- AI generation providers, such as Runway and BytePlus (ModelArk), which receive the prompts and media needed to generate your content.
- Stripe (payments) and Google and Apple (sign-in, when you choose them).
We may also disclose information if required by law or valid legal process, to protect the rights, safety and property of our users, the public or us, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
6. International transfers
We and our providers process information in the United States, the European Union, India and other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Retention
We keep account information while your account is active. Generated files are kept for the storage period of your plan, or until you delete them. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep certain records (for example, payment and tax records) for longer to meet legal obligations, resolve disputes or prevent fraud.
8. Security
We use encryption in transit (HTTPS/TLS), access controls, row-level security on our database, and passwordless sign-in with optional two-step verification. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires it.
9. Your rights and choices
Depending on where you live (including under the GDPR, the UK GDPR, the Israeli Privacy Protection Law and US state privacy laws such as the CCPA/CPRA), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can export your data and delete your account in Account settings, or email office@sabatiers.com. We will respond within the time the law requires and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.
You can unlink Google sign-in from your Google Account settings, and Apple sign-in from your Apple ID settings.
10. Children
The Service is not directed to children. You must be at least 18 years old, or the age of majority where you live, to use it. We do not knowingly collect personal information from children under 16; if you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new effective date and, for material changes, notify you by email or in the Service before they take effect.
12. Contact
Sabatier Group LLC, 20320 Pinion Springs Dr, Henderson, NV 89074, USA · office@sabatiers.com