Privacy Policy

The short version

extend.video is a paid AI video tool. To run it we store your account, your uploaded videos, the still frames we extract from them, the generated results, your credit balance and your purchases. Your videos are sent to our AI provider, fal.ai, to be processed. Your files live in private storage that only your account can read. We do not sell your data, we do not share it with advertisers, and you can delete your account — and your files — yourself at any time. One thing survives deletion: the record of what you paid, because tax law and payment disputes require it. That is spelled out below.

Who is responsible

The data controller is leorigna (Leonardo Rignanese), a sole trader registered in Italy under the regime forfettario tax scheme, VAT number IT02848060428. The registered address is available on request at extendvideo@leorigna.com. Contact: extendvideo@leorigna.com.

What we store

• Your account — your email address and, if you sign in with Google, your Google account identifier and display name. Held by our authentication provider, Supabase.
• Onboarding answers — the short survey about your role, what you make videos for, how often, what you want to extend, and an optional free-text note. Answering is optional and you can skip it.
• Uploaded videos and extracted stills — the clip you upload, plus the still frames we extract from it in your browser and use for the content check.
• Generated outputs — the video the AI produces, copied into our storage so it survives the AI provider deleting it.
• Job records — which model you chose, the settings and any text prompt you wrote, the status, an error message if it failed, and the timestamps.
• Credit ledger — every credit movement: credits bought, credits spent on a run, credits refunded.
• Purchases — the payment identifier from Dodo Payments, which pack you bought, how many credits, the amount, the status and the date. We never receive or store your card details.
• Feedback — the thumbs up or down you give a result, and the optional note you attach to it.

Your files are private

The three storage buckets we use — uploads, extracted frames and generated outputs — are all private. None of them is publicly readable. Access rules at the database level scope every file to the account that created it, so one account cannot list or read another account’s files. When the app shows you a video it uses a link that expires after an hour.

Your video is sent to fal.ai

We do not run the AI models ourselves. To process a job we generate a temporary, expiring link to your uploaded video and to the extracted stills, and we send those links to fal.ai, our AI provider. fal.ai downloads the file, runs the model, and returns the generated video, which we copy into your private storage. fal.ai is a sub-processor and processes your content under its own terms and privacy policy. If you are not comfortable with your footage being processed by a third party, do not upload it.

Moderation: what gets checked

extend.video is SFW only, and the check runs before any credits are spent. Two things are examined. The still frames extracted from your video are sent to an automated adult-content classifier at fal.ai, which returns a score — no human looks at them as part of this step. Any text prompt you write is checked against a filter on our own server; the prompt text is not sent to a third party for that check, though it is sent to fal.ai as part of the job itself if the check passes. A rejection is logged without the prompt text. We may review content manually if we are investigating abuse or responding to a legal request.

Why we process it

• To run the service you asked for — account, uploads, jobs, outputs, credits. Legal basis: performance of a contract.
• To take payment and keep the books — purchases and the billing archive. Legal basis: contract, and legal obligation for the accounting records.
• To keep the service safe and working — content moderation, abuse prevention, storage quotas, error logs. Legal basis: legitimate interests.
• To understand how the product is used — privacy-first analytics, your feedback on results, and one optional email if you used the app and did not finish a video. That email is sent once. Legal basis: legitimate interests.
• To decide what to build — the optional onboarding survey. Legal basis: consent, which you give by answering and can withdraw by asking us to delete the answers.

Analytics

We use tgram-analytics, which we host ourselves on our own server. It is not Google Analytics and no advertising network is involved. It sets no cookies — the session identifier lives in your browser tab and disappears when you close it — it does no fingerprinting, and it honours your browser’s Do Not Track setting by sending nothing at all.

Visitors are counted with a short hash of a daily-rotating secret combined with your IP address and browser user-agent string. The raw IP address and the raw user-agent are never stored. The user-agent is parsed into a browser name, an operating system and a device type, and the original string is discarded before anything is written. Events record the page path, the referring page, UTM campaign parameters and coarse device context — browser, operating system, language, screen and window size, time zone.

Actions inside the app (a run started, a run finished, a pack bought) are also recorded, and those events carry your account identifier, which is an opaque identifier and not your name or email. We never send your email address, your prompt text, or your video to analytics.

Who else processes it

• Supabase — authentication, database and file storage.
• fal.ai — AI generation and the automated content check, as described above.
• Dodo Payments — merchant of record for every purchase. Dodo takes the payment, handles your card details and any VAT, and returns to us only the payment identifier, the pack, the amount and the status. Dodo’s privacy policy covers the payment itself.
• Google — only if you choose Google sign-in.
• Our hosting provider — for the site and the self-hosted analytics server.

Each of them processes data on our behalf under its own terms. Some are outside the EU/EEA and process data under standard contractual clauses. We do not sell your data and we do not share it with advertisers.

How long we keep it

We keep your media only as long as it is useful to you. Your upload and the frames we extract from it are deleted about 24 hours after the run that used them finishes, and within 14 days if you never run anything with them. Your generated result is kept for 7 days, which is how long the download link in your result email works — save the file before then. You can also delete anything, or your whole account, yourself at any time. Account data, job records, the credit ledger and feedback are kept while your account exists. Billing records are kept after that — see the next section. Analytics events are kept according to the retention setting on our analytics server and contain no raw IP address or user-agent.

Deleting your account, and the one thing we keep

You can delete your account from the app. When you do, we permanently delete every file you have in all three storage buckets — uploads, extracted frames and generated outputs — and then delete the account itself, which removes your onboarding answers, job records, credit ledger, feedback and the live purchase rows. This is a real deletion, not a hidden flag.

Before that happens, your billing records are copied to a separate archive and kept. The archive holds the Dodo payment identifier, the pack, the number of credits, the amount, the status, the purchase date, your account identifier and your last known email address. We keep it because a tax authority or a card dispute can ask about a payment months after an account is gone, and we would otherwise have no record of it. Erasure under the GDPR does not override a legal obligation to keep accounting records, so this data is retained for as long as tax, accounting and payment-dispute rules require, and is used for nothing else.

Analytics events already recorded are not removed by account deletion. They carry an opaque identifier, never your name or email. Ask us if you want them removed too.

Your rights (GDPR)

If you are in the EU/EEA you have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. In practice: you can delete your account yourself from the app, or email us and we will do it, usually within a few days — with the billing-archive exception described above. If you believe we have mishandled your data you can complain to your local data protection authority, or in Italy to the Garante per la protezione dei dati personali.

Contact

Questions, deletion requests, anything else: extendvideo@leorigna.com.