Privacy Policy
Last updated: 2026-11-11
This policy says what personal data Kinotion collects when you use kinotion.ai, why, who else handles it, how long it's kept, and what you can do about it.
1. Who is responsible
The controller of your data is Grigor Topchyan, Arghutyan 22/54, Yerevan, Armenia, who runs Kinotion as a private individual. Contact: [email protected].
Representative in the EU: none appointed.
2. What we collect
- Account: your name, email address, a hashed password (if you use one), the name you want to be called, and your profile picture. If you sign in with Google, X or Apple, we get your name, email and picture from them, and keep the sign-in tokens they issue.
- Sessions: the IP address and browser of each signed-in session, to keep you signed in and spot misuse.
- Your projects: prompts, chat history, uploads (images, video, audio), the files the AI writes and the videos you export.
- Payments: Polar handles your card and billing details. We keep what you bought, your Polar customer number, your plan and its dates, and a record of the credits you've added and used.
- Connected accounts: if you connect ElevenLabs, the access token (encrypted) and a log of what you generated.
- Server logs: requests and errors, which can include your user number or email.
We don't use analytics, advertising or tracking tools, and we don't sell your data.
3. Why, and on what legal basis
- To provide Kinotion (your account, projects, the AI's work, exports, emails about your account): to perform our contract with you.
- To take payments and keep tax records: contract and legal obligation.
- To keep the service secure and working (sessions, logs, bot protection): our legitimate interest in a safe, reliable service.
- To use services you connect (social sign-in, ElevenLabs): your request, as part of the contract.
4. Who else handles it
These services process data for us, each only for the purpose shown:
| Service | What | Why | Where |
|---|---|---|---|
| Hosting provider | Everything stored: the database, project files and backups | Hosting | Germany |
| Content delivery network | Every request to the site: IP address, browser, the page asked for | Delivering the site and protecting it from attacks | Worldwide |
| Email delivery provider | Your email address and the emails we send you | Account emails: sign-in links, notices | United States |
| Polar and its payment processor | Name, email, billing address, card details, purchase history | Selling credits and Pro, tax, invoices | United States |
| AI model providers | Your chat, project files and images the AI needs to read | The AI model you choose | United States |
| AI media analysis providers | Still frames from your uploads; reference videos and images you ask Kinotion to study; template search terms | Recognising what an upload shows; analysing style; search | United States |
| Speech-to-text providers | The audio of videos and sound you upload | Captions | United States |
| Stock media libraries | Search terms the AI writes from your request. No account data | Stock photos and footage | Varies by library |
| The sign-in provider you choose (Google, X or Apple) | Your name, email and picture from that account | Signing in with it, if you choose to | United States |
| ElevenLabs (your own account) | The text and prompts you send it | Audio you generate there, if you connect it | United States |
AI providers receive what the model needs for the task you asked for, under their API terms. Some stock photos load directly from the library that hosts them, which sees your IP address.
5. International transfers
Your data is stored in Germany. Some providers above are in the United States, so the data they handle is transferred there and processed under each provider's own terms and privacy policy.
6. How long we keep it
- Account and projects: until you delete them. Deleting a project or your account removes its files right away, in the background.
- Deleted file versions in storage: up to 30 days.
- Server logs: 30 days.
- Audio sent for captions: 72 hours.
- Backups: up to 30 days.
- Payment records: as long as tax law requires, kept by Polar.
- Emails in our email provider's logs: 30 days.
7. Cookies and storage in your browser
Kinotion only uses what it needs to work, so there's no cookie banner. Nothing here tracks you across sites.
| Name | Kind | Why | Kept |
|---|---|---|---|
__Secure-better-auth.session_token | Cookie | Keeps you signed in | Until you sign out or the session ends |
Sign-in state cookies | Cookie | Protect signing in with Google, X or Apple | Minutes, during sign-in |
__cf_bm | Cookie (content delivery network) | May be set to tell people from bots and protect the site | 30 minutes |
kinotion:chat-model | Local storage | Remembers the AI model you picked | Until you clear it |
Per-project view settings | Local storage | Remembers the canvas view, connectors and start screen of each project | Until you clear it |
A message waiting to start | IndexedDB, session storage | Keeps the prompt and files you wrote before signing up, so the project can start after | Until it's used |
The site's fonts are served by Kinotion itself, not by Google.
8. Your rights
You can ask to see, correct, export or delete your data, to restrict or object to how it's used, and to withdraw consent you gave. Write to [email protected]; we answer within one month. You can delete your account yourself in Settings. You can also complain to your data protection authority.
9. Children
Kinotion is for people aged 16 and over. If you believe a younger child has an account, tell us and we'll delete it.
10. Security
Data travels encrypted (HTTPS), passwords are hashed, the token of the ElevenLabs account you connect is encrypted, and projects are private to your account. Report security issues to [email protected].
11. Changes
We'll update the date at the top when this policy changes, and email you about changes that matter before they take effect.
12. Contact
[email protected] · Grigor Topchyan, Arghutyan 22/54, Yerevan, Armenia