Privacy Policy for AriaFlow.ai

Privacy Policy for AriaFlow
Last Updated: July 19, 2025

1. Introduction
Welcome to AriaFlow (https://ariaflow.ai). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services to create and edit viral faceless videos.

2. Information We Collect
We collect the following personal information:

Name
Email address
Payment information
Google account information (when you sign in with Google)
Content and files you upload or create using our services
We also collect non-personal data through web cookies and usage analytics.

3. How We Use Your Information
We use the collected information for:

Order processing purposes
Providing video creation and editing services
Account management and authentication
Customer support
Service improvement and analytics
4. Google API Data Usage
When you connect your Google account, we may access:

Basic profile information (name, email)
Google Drive files (only when explicitly authorized by you)
YouTube data (only when explicitly authorized by you)
We use this data solely to provide our video creation services and do not use it for any other purposes.

5. Data Protection and Security
Security Measures
We implement industry-standard security measures to protect your personal information:

Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols
Secure Storage: User data is stored in encrypted databases with restricted access
Access Controls: Only authorized personnel have access to user data on a need-to-know basis
Regular Security Audits: We conduct regular security assessments and vulnerability testing
Authentication: Multi-factor authentication is required for administrative access
Google API Data Protection
For data obtained through Google APIs, we implement additional security measures:

API Key Security: Google API keys are stored securely and rotated regularly
Scope Limitation: We only request the minimum necessary permissions required for app functionality
Secure Transmission: All Google API communications use HTTPS encryption
Data Isolation: Google user data is stored separately from other application data
Data Breach Response
In the unlikely event of a data breach:

Users will be notified within 72 hours
Relevant authorities will be contacted as required by law
Immediate steps will be taken to secure the breach and prevent further unauthorized access
6. Data Retention and Deletion
Data Retention Policy
Active Accounts: We retain user data only as long as necessary to provide our services
Inactive Accounts: Data from inactive accounts (no login for 24 months) is automatically scheduled for deletion
Google User Data: Data obtained from Google services is retained only as long as necessary for service functionality
Service Termination: If our service is discontinued, all user data will be deleted within 90 days
Data Deletion Rights
Users have the right to request deletion of their data:

Account Deletion: Users can delete their entire account and all associated data through account settings
Selective Deletion: Users can request deletion of specific data types through our support system
Google Data Deletion: Users can specifically request deletion of data obtained from Google services
Response Time: Data deletion requests are processed within 30 days
Automatic Data Deletion
Temporary Data: Cached and temporary data is automatically deleted after 30 days
Log Data: System logs containing user information are automatically deleted after 90 days
Backup Data: Deleted data is permanently removed from all backups within 90 days
Data Retention Exceptions
Data may be retained longer only when:

Required by law or legal proceedings
Necessary for fraud prevention or security purposes
Required for legitimate business operations (anonymized data only)
How to Request Data Deletion
Users can request data deletion by:

Using the account deletion feature in app settings
Contacting our support team at [email protected]
Sending a written request to our privacy officer
All deletion requests will be confirmed via email once completed.

7. Data Sharing
AriaFlow does not share your personal information with any third parties, except:

When required by law
With your explicit consent
With service providers who assist in our operations (under strict confidentiality agreements)
8. Cookies
We use web cookies to enhance your browsing experience on our website and to analyze usage patterns.

9. Children's Privacy
AriaFlow does not knowingly collect any personal information from children under the age of 13.

10. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

11. Your Rights
Depending on your location, you may have the following rights:

Right to access your personal data
Right to rectify inaccurate data
Right to erase your data
Right to restrict processing
Right to data portability
Right to object to processing
12. Updates to This Privacy Policy
If we make changes to this Privacy Policy, we will notify you by email and update the "Last Updated" date at the top of this policy.

13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: [email protected]

Privacy Officer: [email protected]

Thank you for trusting AriaFlow with your personal information.