privacy notice

1. Who is responsible

eigenvideo is operated by Network Zero, established in India. For the purposes of the Digital Personal Data Protection Act 2023 we are the Data Fiduciary, and for the purposes of the UK and EU General Data Protection Regulation we are the controller of the personal data described here.

Write to saad@networkzero.tech about anything in this notice. If you are unhappy with the response, section 12 explains how to escalate.

2. What this notice covers

This notice applies to eigen.video, to the eigenvideo application and to the processing services behind them. It does not apply to any third party site you reach from a link on ours, each of which publishes its own notice.

3. Personal data we collect

Account data

Your email address. If you register through Google, the name and profile image associated with that Google account. If you register with a password, a bcrypt hash of that password, from which the password cannot be recovered. Also the identity provider used and the account identifier it issued.

Content you upload

The audio and video files you submit for processing, together with their file name, format, size, duration and pixel dimensions. Your files may contain personal data about you or about other people appearing in them, including faces and voices, and where they do we process that data on your instructions.

Output and job data

Everything the tools produce from your files, the parameters you selected, the status and progress of each job, any error returned, and the times a job started and finished. Projects, collections, tags and saved presets are stored alongside them.

Authentication data

A single session cookie, set when you sign in, which identifies your session until it expires or you sign out. It is strictly necessary for the service to function and carries no advertising or measurement purpose.

Local preferences

Your colour theme, sidebar state and similar interface settings, stored in your own browser and never transmitted to us.

Correspondence

Any message you send us and our reply, kept so that we can deal with the matter and evidence how it was handled.

We do not operate an analytics platform, we set no advertising or measurement cookies, we embed no third party tracking script, and we maintain no advertising profile about you. We do not knowingly collect special category or sensitive personal data, and you should not upload it unless the processing you are asking for requires it.

4. Why we process it, and on what basis

To provide the service

Creating and maintaining your account, authenticating you, storing your files, running the tool you selected and returning the result. Performance of our contract with you, and for users in India, the certain purpose for which you gave consent when you registered.

To take payment

Charging a subscription, keeping billing records and meeting tax obligations. Performance of contract and compliance with a legal obligation.

To keep the service working and secure

Diagnosing failures, preventing abuse, enforcing plan limits and investigating misuse. Our legitimate interest in operating a functioning and secure service.

To communicate with you

Service messages about your account, your jobs and material changes to these documents. Performance of contract, and legitimate interest for anything that is not strictly contractual.

To comply with law

Responding to a lawful request, dealing with a copyright complaint and retaining what we are required to retain. Compliance with a legal obligation.

We do not use your content to train machine learning models, ours or anyone else's, and we do not sell, rent or licence personal data to any third party. No decision producing a legal or similarly significant effect on you is taken solely by automated means.

5. Processors and other recipients

Delivering a video processing service requires other companies to hold or handle data on our behalf. Each is engaged under a written agreement restricting it to the purpose stated, and none is permitted to use your data for its own ends.

Vercel

Hosting and delivery of the website and its server functions.

Convex

The application database holding account records, library metadata and job records.

S3 compatible object storage

Storage of the media you upload and the media the tools produce.

Our processing servers

Transcoding, cutting, reframing and rendering. Your file is present on these machines while a job runs and is removed from working storage when it completes.

Google

Only where you choose to sign in with Google. Google discloses your email address, name and profile image to us. We disclose nothing to Google about your subsequent use of the service.

Groq, OpenAI, Mistral and ElevenLabs

Speech recognition, generation of script and caption text, and speech synthesis, according to which tool you run. Only the audio or text that the requested operation needs is transmitted, only at the moment you run it, and under terms that prohibit the provider from training on it.

Beyond these we disclose personal data only where we are required to by law, where it is necessary to establish or defend a legal claim, or in connection with a merger or acquisition, in which case you will be told before your data becomes subject to a different notice.

6. Transfers outside your country

Our processors operate infrastructure in several regions, so your personal data may be stored or processed outside India, including in the United States and the European Union. Where personal data protected by the GDPR leaves the EEA or the UK, the transfer is made under the European Commission's Standard Contractual Clauses together with the UK Addendum. Ask at saad@networkzero.tech for a copy of the safeguards applying to a particular transfer.

7. How long we keep it

Uploaded files and output

On the free plan, thirty days from upload, after which they are deleted from storage. On a paid plan, for as long as the account remains open. You can delete any file earlier from within the application.

Account records

Until you close the account, then up to thirty days while deletion completes across our systems and our processors.

Billing records

For as long as tax and accounting law in India requires, which is longer than the life of the account.

Correspondence and complaints

Up to three years from the last message, so that a repeat issue can be understood in context.

Backups

Encrypted backups may retain deleted records for up to thirty-five days before they are overwritten in the ordinary course.

8. Security

Traffic between your browser and the service, and between the service and storage, is encrypted in transit. Passwords are stored only as bcrypt hashes. Access to production systems is restricted to personnel who need it and is authenticated individually. Object storage is private and files are served through short lived signed links rather than public URLs.

No system can be guaranteed secure, and we do not claim otherwise. Where a breach is likely to result in risk to you we will notify you and the relevant authority within the period the applicable law requires.

9. Your rights

Subject to the conditions in the law that applies to you, you may ask us to do any of the following.

• Confirm whether we hold personal data about you, and give you a copy of it together with a summary of who it has been shared with.
• Correct anything inaccurate, complete anything incomplete or update anything out of date.
• Erase personal data where we no longer have a basis to keep it.
• Restrict or object to processing carried out on the basis of our legitimate interests.
• Receive the personal data you gave us in a portable, machine readable format, or have it sent to another provider where that is technically feasible.
• Withdraw a consent you previously gave, without affecting processing carried out before you withdrew it.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity, as the Digital Personal Data Protection Act 2023 allows.

Write to saad@networkzero.tech to exercise any of them. We answer within thirty days, and will tell you if a request will take longer and why. We do not charge for a first request. You are responsible for the accuracy of what you give us, and Indian law makes it an offence to file a frivolous or false grievance.

10. Cookies

The service sets one cookie, which holds your session and keeps you signed in. It is strictly necessary, so no consent banner is shown for it. Clearing it signs you out. Interface preferences are kept in your browser's local storage, which is not a cookie and is never sent to us.

11. Children

The service is not directed at children. You must be at least 18 to hold an account, or at least 13 with the verifiable consent of a parent or guardian who accepts the terms on your behalf. We do not knowingly process the personal data of a child below the age of 18 without such consent, do not track or profile children, and do not direct advertising at them. If you believe a child holds an account contrary to this, write to saad@networkzero.tech and it will be closed.

12. Complaints

Our Grievance Officer is Saad Basheer, reachable at saad@networkzero.tech. A complaint is acknowledged within 24 hours and resolved within 15 days, as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 require.

If you remain dissatisfied you may complain to the Data Protection Board of India, or, if you are in the EEA or the UK, to your national supervisory authority.

13. Changes

When this notice changes the date at the head of the page changes with it. Where a change materially affects how we handle data you have already given us, we will email you before it takes effect. Previous versions are available on request.

14. Related documents

Read this alongside our terms of service, acceptable use policy and copyright policy.