Genjutsu · Legal
Privacy policy
Last updated:
This Privacy Policy explains how Genjutsu (genjutsu.si) collects, uses, shares, retains, and deletes personal information when you use our website, video-editing application, and related services (the "Services").
Genjutsu does not sell your personal information. We do not use your prompts, uploads, or generated outputs to train Genjutsu-owned, shared, or general-purpose artificial intelligence (AI) models.
1. Scope and roles
This policy applies when Genjutsu decides how and why to process personal information, including for account administration, billing, security, and support. Genjutsu is operated by the same service operator as Sceneform. Contact support@sceneform.ai for the operator's legal entity and registered-address details.
When a business customer submits personal information through the Services, we may process it on that customer's behalf. A separate Data Processing Addendum or business agreement may apply. Third-party authentication, payment, hosting, and AI model providers have their own privacy practices.
2. Information we collect
Account, authentication, and support
Clerk manages sign-in, sessions, and account settings. When you sign in with email or Google, account information may include your name, email address, profile image, account identifier, and authentication or session identifiers. We also receive messages and information you send to support.
Google sign-in is used for authentication. Genjutsu does not connect to your Google or YouTube account for publishing, channel management, or access to unrelated content.
We use Google user data, such as your name, email address, and profile image, only to provide and maintain the sign-in feature you authorize. We do not use Google user data for advertising or AI model training. Our use complies with the Google API Services User Data Policy, including its Limited Use requirements.
Google API Services User Data Policy
Content and generation records
We process the source clips, reference images, prompts, links, and settings you submit, and the generated videos and technical metadata needed to provide video-to-video editing. We call these materials "Customer Content."
Your reshoot history can include prompts, source and output media URLs, resolution and duration information, job identifiers, timestamps, generation status, and error details. Uploads and generated media may contain people's faces, voices, or other personal information.
When you paste a TikTok or Instagram link, our server downloads the selected clip for preview and import. This is a link-import feature, not a connection to your social account. We do not obtain your social account's OAuth access or refresh tokens or publish posts on your behalf.
Billing and credit information
We keep information needed to administer subscriptions and credits, including Stripe customer, checkout, subscription, invoice, and transaction identifiers, subscription state, credit balances, grants, reservations, refunds, and daily generation usage. Stripe processes payment-card details; Genjutsu does not store full card numbers.
Technical information
Our application and infrastructure may process IP addresses, browser or user-agent information, request times, error details, and security events needed to serve requests, enforce limits, troubleshoot failures, and protect the Services. Diagnostic records may include limited Customer Content when needed to investigate a failed request, support request, abuse report, or security incident.
3. How we use information
- Create and secure accounts and authenticate requests.
- Upload, import, preview, trim, and process the media you select and generate the video edits you request.
- Display your reshoot history and generation results.
- Process subscriptions, payments, credit accounting, cancellations, and refunds.
- Provide support, diagnose errors, and maintain reliability.
- Detect fraud, abuse, security incidents, and violations of our Terms of Service.
- Communicate about your account, transactions, support requests, and material policy changes.
- Comply with law and protect our customers, other people, and the Services.
We may use aggregated or de-identified usage information and voluntary feedback to improve pricing, reliability, safety, and product design. Customer Content is not feedback unless you clearly submit it for that purpose.
4. AI training and access to content
Genjutsu does not use Customer Content to train or improve Genjutsu-owned, shared, or general-purpose AI models. We may inspect specific content when necessary to complete a support request, investigate suspected abuse or a security incident, enforce our Terms, or comply with law. Access is limited to personnel and providers who need it for those purposes.
If we offer a model-improvement contribution program in the future, it will be disabled by default and require separate affirmative consent. A policy update alone will not make previously submitted Customer Content eligible for Genjutsu training.
This commitment concerns Genjutsu's use of your content. Third-party model providers have their own terms and practices, as explained below.
5. AI and other service providers
AI generation and media storage
Genjutsu uses Higgsfield's Genjutsu motion-transfer model for video edits. Source clips, reference images, prompts, settings, and request metadata needed for a generation are sent to Higgsfield and its model or infrastructure providers. Local files may be uploaded directly from your browser to provider storage using a presigned upload URL. The provider also hosts generated output URLs.
Providers may process content for generation, moderation, abuse prevention, support, and other purposes under their applicable business or API terms. Some providers route requests to other companies that operate a model or infrastructure. Available models and providers may change.
We do not voluntarily opt Customer Content into optional provider training or data-sharing programs. Provider retention, training, processing location, and zero-retention controls vary by provider, model, contract, and account configuration. We do not promise that all providers offer no training or zero retention. Contact support before submitting sensitive or confidential material if you require a provider-specific commitment, processing location, or Data Processing Addendum.
Authentication, payments, and infrastructure
Clerk provides authentication and account management. Stripe provides checkout, subscription billing, and the billing portal. Convex provides the application database, background status checks, and shared rate limiting. Our hosting and storage infrastructure process data needed to run the Services. Cloudflare R2 serves public website assets and example media; it is not the application's primary store for your uploaded or generated videos.
Providers process information for the services they supply or as otherwise permitted by their applicable agreements and law. Following a source link or downloading media may also send requests to the platform or host that serves it, under that service's own terms and privacy policy.
Legal disclosures and business transfers
We may disclose information to comply with law or valid legal process, protect rights and safety, investigate fraud or abuse, or in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of the business. A successor remains subject to this policy for information collected under it unless applicable law and a new notice permit a change.
6. Faces, voices, and identifiable people
Video clips and reference images may depict identifiable people, and source videos may contain audio. We process this media to provide the edit you request, keep the Services safe, provide support, and comply with law. Genjutsu does not use it to identify people outside the requested feature.
We do not sell face, voice, or biometric information, use it for advertising or Genjutsu model training, or feature it in marketing without separate permission. AI providers may receive source media and create technical representations needed for the requested edit; their use and retention depend on their terms and settings.
You must have the rights and any consent required by privacy, publicity, biometric, or other applicable law before submitting media of another person. Contact support to request deletion of stored media.
7. Cookies and browser storage
We and our providers use cookies and similar technologies for authentication, security, and necessary service operation. Genjutsu stores your theme preference in local storage. It may save pending run inputs, including clips, reference images, prompts, and settings, in your browser's IndexedDB so they can be restored after sign-in or checkout.
A saved pending run is treated as expired for restoration after two hours. This is not a promise that its browser-stored data is automatically deleted at that time. You can remove locally stored data through your browser's site-data controls; doing so may remove saved drafts, preferences, and sign-in sessions.
Genjutsu does not currently integrate optional analytics or advertising trackers. Our authentication and payment providers may use their own cookies and storage when you use their services.
You can control cookies and storage in your browser. Blocking necessary cookies may prevent sign-in or other features from working.
8. Retention and deletion
We keep information as needed to provide the Services and for the purposes in this policy. Reshoot history, account-linked records, credit accounting, and billing records remain in our database until removed through a supported process or a verified request, subject to legal, security, and billing obligations. Ending a subscription does not automatically delete these records. Retention is not governed by a fixed post-subscription deletion schedule.
Clips downloaded from social links are held temporarily on our server. They become eligible for cleanup after two hours; cleanup runs periodically when new clips are stored, so deletion may happen later. Browser drafts and provider-hosted media follow separate storage lifecycles.
Email support@sceneform.ai to request account or content deletion, access, or help with stored data. We may verify your identity and coordinate with relevant providers. Changing or deleting an authentication account does not by itself guarantee that application history, provider media, or a Stripe subscription is removed or canceled. Request subscription cancellation separately through billing or support.
Deletion requests are subject to records that must be kept for billing, tax, law, security, fraud prevention, or disputes. Backup copies may remain until they rotate out. Third-party providers retain data under their applicable terms and settings; we cannot promise an exact deletion time for all provider-held copies. We do not use retained copies for Genjutsu model training or marketing.
Deleting an account does not automatically issue a refund. The Terms of Service describe refund eligibility and the effects of account closure.
9. Security and international processing
We use technical and organizational safeguards designed to protect information, including authenticated and user-scoped access to private application records and controls on uploaded and imported media. No service can guarantee absolute security. Protect your credentials and submit only content appropriate for processing by third-party AI providers.
Application access controls do not make every media URL private. Provider-hosted source or output URLs may be accessible to anyone who has the URL. Treat those URLs as sensitive and avoid sharing them unintentionally.
We and our providers may process information in the United States and other countries whose privacy laws differ from yours. Where required, we use recognized transfer safeguards, such as contractual protections. Contact support for details of safeguards that apply to your data.
10. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of information; restrict or object to processing; withdraw consent for future processing; opt out of certain sharing or targeted advertising; appeal a denied request; or complain to a privacy regulator.
Email support@sceneform.ai to exercise a privacy right. We may need to verify your identity and authority. You may use an authorized agent where applicable law permits, and we will not discriminate against you for exercising your rights.
11. Children's privacy
Genjutsu is not intended for anyone under 18 or the age of legal majority where they live, whichever is higher. We do not knowingly collect children's personal information through the Services. Contact support if you believe a child has provided personal information; we will investigate and delete it where required.
12. Changes to this policy
We may update this policy as our Services, providers, law, or practices change. We will give notice before a material change that reduces your privacy rights where required by law. A policy update alone will not enroll Customer Content in Genjutsu model training.
13. Contact
For questions or privacy requests, email support@sceneform.ai and identify Genjutsu or genjutsu.si in your message. Contact the same address for the service operator's legal entity or registered-address details.
Questions or requests? Email support@sceneform.ai.