Privacy

Wahat Games FZ-LLC, in5 Media, EO07, IMPZ, Dubai, United Arab Emirates, is responsible for the personal data described here (the “controller”). This notice covers the No Prod AI app, your account and the services around it, and this website.

In short

• Your recordings, edits and everything made from them stay on your computer. We never receive them — unless you choose to send us a video testimonial.
• We keep what an account, a licence and a payment need, and counts of how the app is used — never what is in your files.
• We do not sell your data, and nothing here is used for advertising.
• Switch usage counts off in the app whenever you like, and delete your account from it — what we hold about you goes with it.

What stays on your computer

No Prod AI does its work on your own machine. These never reach us: your footage and audio, transcripts, edits, thumbnails and renders; your library and projects; your conversations with the built-in assistant, which runs on your computer; what you dictate, which is turned into text there and not kept; and the keys to the platforms you publish to, stored encrypted on your machine. When you publish, the app sends the video straight from your computer to the platform you chose — never through us. The one video that ever reaches us is a testimonial you decide to send (below).

What we collect, and why

• Your account — your email, first and last name and a nickname you can change; your password, stored only as a one-way hash; and, if you sign in with Google, LinkedIn or Apple, your name, email and that provider’s id for you. To give you an account and keep it secure (our contract with you).
• Your computers — an identifier derived one-way from the computer’s hardware id (the hardware id itself never leaves it), the computer’s name, system, app version and when it was last seen; and a description of its hardware — system, processor, memory, storage, graphics and language setting. To license your plan to one computer, and to know which machines the app must run well on (contract; legitimate interest).
• Your plan and payments — your plan, trial and renewal dates, and Stripe’s references for you. Stripe takes the payment and collects your card, billing name and address and any tax number itself; we never see your card. To bill you and meet tax law (contract; legal obligation).
• Credits and AI generations — your credit balance and its history; and for each generation you order, what was asked for (the prompt and settings), the model, its cost, and links to the files involved. The starting picture or clip, if any, is uploaded by your app straight to our AI provider, and the result is downloaded straight back to your computer; we keep the links, not the files. To make what you asked for, charge for it correctly and handle disputes (contract).
• How the app is used — hourly counts of which screens, features, tools and pipelines are used, how long they take, and which kinds of error happen, with the app version, tied to your account and computer. Never file names, paths, what you type or what is in your recordings. To find what breaks and what to improve (legitimate interest). You can switch them off in the app, under Settings → Preferences → Send usage counts: it stops counting and sending, and deletes the counts still waiting on your computer.
• Support — the issues, comments, votes and screenshots you send, and emails you write to us. To answer you and decide what to build next (contract; legitimate interest).
• Testimonials — only if you send one: the short video you recorded, an optional still from it, the name and role you sign it with, and the words you say in it (its quote and captions). We keep the video only while we review it. If we approve it, we publish it on our YouTube channel and show it, with your name, role and quote, on this website, in the app and on our social media accounts; an approved testimonial is public. If we ask for changes or decline it, we delete the video at once, and one we have not reviewed within 30 days is deleted. Your consent is the basis, and you can withdraw it at any time in the app or by emailing us.
• Proof of your consent to a testimonial — when you send one, we record when you agreed (our clock and your app’s), your account’s email and name at that moment, your computer and app details (device, app version, hardware description, browser or app identification and language), your IP address, the exact wording you agreed to, and a fingerprint (SHA-256) of the video, so the permission is tied to exactly that video. We add the same details when you withdraw consent or a testimonial is removed. This is how we can show we had your permission for what we published (legitimate interest; legal claims).
• Emails we send — sign-in and confirmation links, receipts and notices about your account or these terms. Not marketing.
• Technical logs — our servers see your IP address with each request, used briefly to keep the service secure and to limit abuse, and kept only in short-lived logs.

This website

The website sets no cookies of its own; it remembers your analytics answer in your browser. Only if you accept analytics, it measures how the site is used — pages visited, roughly where from, the device and browser — with Google Analytics, which sets the _ga and _ga_* cookies for up to two years. Until you accept, Google’s tag stores nothing about you. Change your answer any time with “Cookie settings” at the foot of every page. Our website host keeps ordinary access logs for security.

Who else handles it

Only companies that run part of the service for us, under contract and on our instructions:

• Amazon Web Services — our servers, database and file storage, in Mumbai, India.
• Cloudflare — the domain name system.
• Stripe — payments, invoices and tax.
• Resend — the emails we send.
• fal.ai, and the AI model providers it runs — the generations you order.
• Google, LinkedIn and Apple — only if you sign in with them.
• YouTube (Google) — hosting approved testimonials on our channel. Playing one on this website loads YouTube’s privacy-enhanced player, which sees your IP address and may set its own cookies; it loads only when you press play.
• Vercel — hosting this website; Google Analytics — only with your consent.

The app also fetches what it needs from where it is published, straight from your computer and without your account details: AI models from Hugging Face, FFmpeg from its upstream builds, and tutorial videos from YouTube (through its privacy-enhanced player). Those services see your IP address, as any download does.

We may disclose data where the law requires it, or to a buyer of the business, who would be bound by this notice. We do not sell or rent personal data, or share it for advertising.

Where it is stored

Our servers are in India, and some of the companies above work from the United States and elsewhere. Where data protection law requires it, transfers are covered by safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

• While you have an account, we keep what is listed above.
• When your account is deleted, we delete your profile, sign-in methods, computers, sessions, plan, credits, usage counts, generations with their prompts, and votes, testimonials, and stop your subscription renewing — and take your testimonials down from YouTube. Issues and comments you posted stay, no longer tied to you. Database backups roll over within seven days.
• Testimonials stay published until you withdraw consent or delete them, or your account is deleted. The video itself stays on our storage only while we review it. A testimonial we asked you to change or declined is kept, without its video, until you delete it, so you can see why.
• The proof of consent to a testimonial is kept even after the testimonial or your account is deleted — it is the evidence of permission for what was already published — and deleted six years after the testimonial is removed.
• Payment records are kept by Stripe and by us as long as tax and accounting law requires — typically five to seven years.
• Expired sign-ins and links are deleted within the hour; server logs are kept for a short time only.

Your rights

You can ask for a copy of the data we hold about you, have it corrected, deleted or handed over in a portable form, object to or restrict how we use it, and withdraw a consent you gave. In the app you can change your name, switch usage counts off (Settings → Preferences) and delete your account (Settings → Profile → Danger zone, with your password and the word DELETE). For anything else, email hello@noprod.ai from the address on your account. We answer within thirty days, and never charge for it. You may also complain to the data protection authority where you live.

If you live in California: we do not sell or share personal information as the law defines those terms, and you have the rights above to know, correct and delete it.

Security

Everything between the app, this site and our servers travels encrypted. Passwords and sign-in tokens are stored only as hashes, the hardware id is never sent, and the keys to your platforms stay encrypted on your own computer. Access to our systems is limited to the people who run them.

Children

No Prod AI is for adults — see the terms. We do not knowingly collect data from anyone under 18; if you believe we have, tell us and we will delete it.

Changes

If this notice changes materially, we tell everyone with an account by email or in the app before it applies, and the date above changes.

Contact

Wahat Games FZ-LLC, in5 Media, EO07, IMPZ, Dubai, United Arab Emirates · hello@noprod.ai