Privacy Policy

• Account data — email address, name and sign-in identifiers from our authentication provider (Clerk), or a random guest-session identifier stored in your browser if you have not signed up.
• Your content — recordings, audio, images, prompts, brand assets and the videos we render for you.
• Billing data — purchases, plan, credit balance and invoices. Card and bank details are collected by the payment provider, never by Menivor.
• Usage data — render jobs, API-key usage, audit events, device and browser information and IP address, used for security, fraud prevention and reliability.
• Connected accounts — if you connect a social platform for publishing, the access tokens and profile data that platform returns.

• to run the service: store uploads, generate and render videos, and publish them where you ask us to (contract);
• to process payments, grant credits and keep accounting records (contract and legal obligation);
• to secure the service, prevent abuse of the free tier and investigate incidents (legitimate interest);
• to send service emails and, only with your consent, product updates (consent — withdraw any time).

We do not sell personal data and we do not use your uploads to train our own models.

We share data only with providers that help us operate Menivor, under data-processing terms:

• Hosting, storage and delivery — Cloudflare (web app, object storage) and our application servers and database hosts.
• Authentication — Clerk.
• Payments — Creem, which acts as merchant of record for your purchase today (we are integrating Dodo Payments as a future merchant-of-record option; it is not yet processing live checkouts).
• AI processing — the language, voice, avatar, transcription and video-generation providers a render requires, including Anthropic and Groq for scripts and captions, OpenRouter as a language-model fallback, and Replicate for AI video, image, lip-sync and narration, plus providers you select for premium voices or presenters (for example ElevenLabs for voice and HeyGen for avatar presenters). They receive only the material needed for that step.
• Publishing — the social platforms you connect and ask us to post to.
• Advertising — X (Twitter) Ads, to measure the performance of our ad campaigns on our marketing pages.

Our servers and main database are in Germany. Some providers are outside your country, including in the United States; transfers rely on standard contractual clauses or equivalent safeguards.

The full list, with what each company receives, when, where, and a link to its data processing terms, is on Subprocessors.

Account data is kept while your account is open. Uploads and renders are kept until you delete them, your account is deleted, or a workspace's configured retention window expires. Billing records are kept as long as tax law requires. Security logs are kept for a limited period and then deleted or anonymized.

Depending on where you live (including under the GDPR and Turkey's KVKK) you can access, correct, export, restrict or delete your personal data, object to processing and withdraw consent. Signed-in users can do most of this themselves in Privacy settings: export all your data, manage consent choices and permanently delete your account. Your data requests explains each step, what is deleted and what is kept.

For anything else, email support@menivor.com. You may also complain to your local data-protection authority.

If you are in Turkey, Law No. 6698 (KVKK) gives you the rights in Article 11. How to use them, our 30-day answer time and how to complain to the Personal Data Protection Board are on Your data requests.

Every final video we render carries a mark that it was made with AI and signed Content Credentials (C2PA) with a content id, so a copy can be traced back to its record here for a takedown report. The mark holds no name or email. Anyone can read it on Check a video.

Before you create a brand voice, you record yourself reading a short phrase. We use that recording only to check that the words were said and that it is the same voice as your sample (speech recognition and a speaker check run on our own servers). It is never sent to the voice provider. It is kept with your uploads and deleted with your account.

We use strictly necessary cookies and browser storage for sign-in, your guest session, language preference and security. Our marketing pages also load a third-party advertising conversion pixel (X/Twitter Ads) to measure ad campaign performance; see Subprocessors for details.

Menivor is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

We will post updates here and change the effective date. Material changes are announced by email or in the product before they apply.