Privacy Policy

This policy describes how Faceless Video Script Generator (“we”) handles information when you use the website and script generator.

1. What we collect

• Form inputs: topic, optional audience, niche/platform/tone selections you submit to generate a script. Processed in memory to produce output.
• Contact form: if you use the contact page, we receive the name, reply email, and message you submit so we can respond. Delivery is via a server-side email/form provider; we do not publish a public mailbox on the site.
• Rate-limit cookie: fsg_runs counts free script generations in your browser (typically 7 days).
• Server-side IP counter: for abuse prevention we may store a short-lived count keyed by IP in process memory (script generation and contact submissions). We plan to move this to Redis/KV for durable rate limiting as traffic grows.
• Technical logs: standard server/request logs (timestamps, status codes). We do not require an account for free use.

2. Script generation processing

When you generate a script, your topic and brief settings are processed on our servers to produce the output. To improve quality, prompts may be sent to a third-party AI processing partner under that partner's terms and privacy policy. We do not sell your prompts, and we do not require an account for free use.

3. Analytics

We may use privacy-conscious product analytics (for example Google Analytics 4 or Plausible) to record events such as generate, copy, download, and limit_hit when analytics is enabled on the live site. Cookie/consent requirements depend on your jurisdiction.

4. Payments (future)

Paid checkout is not live yet. When credits or subscriptions launch, payment data will be handled by a processor such as Creem or Stripe — not stored as full card numbers on our servers. This section will name the processor and link their policy before checkout is enabled.

5. Cookies

Essential: fsg_runs for free-run counting. Analytics cookies only if GA4 (or similar) is enabled.

6. Retention & security

Prompt text is not intentionally stored in a long-term database. Rate-limit state expires with the cookie window / IP bucket. Contact messages are delivered to the operator via a server-side notify provider and are not stored in our application database. The site is served over HTTPS; server secrets are never embedded in public client-side code.

7. Your choices

Clear site cookies to reset the browser run counter. Contact us via the contact form to ask about access or deletion requests once accounts exist. For EU/UK users we will add lawful-basis and DPA language before targeting those regions with ads or paid plans.

8. Contact

Privacy questions: use the contact form. We do not list a public email address on this site.