Privacy notice

1. Data controller and contact

The controller is Yoann Bierling, sole trader (micro-entrepreneur), 20 rue Erckmann Chatrian, 57400 Sarrebourg, France. Privacy requests: [email protected].

2. Data we process

We process the minimum operational information needed to run your account: account details (email, username and password hash), age and terms acceptance confirmations, marketing preference, credit balances and transaction records, subscription and payment identifiers, referral and affiliate records, generation status, model/quality settings, provider request identifiers, and video availability/retention metadata. We do not store payment card numbers; checkout is handled by Stripe. Credit history records transaction type, date, credit amount and a minimal reference; it is not intended to store prompt text.

3. Reference images, prompts and AI processing

Reference images are kept locally in your browser for your convenience; YB Video does not maintain a server-side library of your pictures. When you generate a video, selected reference images and the information needed to fulfil that request are transmitted for processing by our service and the relevant AI provider. They may pass through our server as part of the request, but we do not retain reference-image files as an account asset. Provider-side processing and retention are governed by provider policies and settings.

Generated videos are different from reference images: providers may temporarily host outputs, and YB Video may save a local copy for up to 3 days so you can download the original. After that, the local copy is removed unless you explicitly request optional hosting. Optional hosting stores a compressed video copy for 1 credit per video per month, and can be stopped from your profile. Provider links may expire earlier.

YB Video uses Higgsfield for video generation, Mistral for prompt assistance and/or title generation, and may route processing through fal.ai or OpenAI when those services are enabled. Only the providers needed for the feature you use receive the relevant content. We have enabled Higgsfield's setting to exclude inputs and generated outputs from model training. For other providers, we cannot guarantee that submitted inputs or outputs are excluded from model training; their use is governed by the provider's current terms, settings and privacy documentation. Do not upload confidential or sensitive material unless you are comfortable with this processing.

4. Minimal generation and credit records

We keep minimal generation records as needed to provide history, operate the service, administer credits, prevent abuse and provide support. These can include status, timestamps, model/quality, provider and request identifiers, credit amount charged, and video availability/retention metadata. Mistral and other AI-assistance calls may be logged as events with provider, purpose, status and related credit usage where applicable; the text of an AI-assistance request is not needed just to record that a call occurred. Credit history records charges, grants, refunds, expirations and hosting renewals without exposing prompt contents. When you delete your account, associated records and content are deleted except information required for legal, accounting, security or dispute-resolution purposes. We do not use user prompts, reference images or generated videos to train our own AI models.

5. Purposes and legal bases

We process data to create and administer accounts, provide the service and purchased credits, manage subscriptions and referrals, and provide support (contract performance); to maintain accounting and tax records (legal obligation); to secure the service and prevent fraud (legitimate interests, balanced against your rights); and to send optional marketing communications only where you have consented (consent, which you may withdraw at any time). Service-related communications, such as account, payment, subscription, security, and credit-expiry notices, may be sent where necessary to provide and administer the service.

6. Recipients and international transfers

Recipients may include InterServer (hosting; infrastructure in California, USA), Stripe (payments and subscriptions), Higgsfield (video generation), fal.ai (where used for video processing), OpenAI (where used for AI processing) and Mistral (prompt assistance and/or title generation). These providers may process data outside the European Economic Area. We will use applicable transfer mechanisms and safeguards where required and make relevant information available on request. Provider roles and applicable contractual safeguards must be reviewed and kept current.

7. Retention

Reference-image files are not retained on YB Video as account assets. A local copy of a generated video is kept for up to 3 days when available, solely to let you download the original; it is deleted after that window unless you explicitly opt into compressed hosting at 1 credit per video per month. Hosted copies remain available while hosting is paid and are removed when the hosting period ends. Account, security, credit-ledger and payment records are retained only as needed to operate the service, resolve disputes and meet legal/accounting obligations. Backups may persist for a limited technical rotation period. Provider retention is governed by each provider's policies and controls.

8. Cookies, local storage and analytics

Strictly necessary session technologies are used to sign you in and operate the service. The application may also store settings, recent scenarios and your cookie preference in your browser. The service uses the existing Google Analytics 4 web measurement ID G-0WKDDEWYZF for analytics on YB Video and the wider yb.digital domain. Analytics is loaded only after you accept analytics cookies. Non-essential analytics or advertising technologies, including Google Analytics and any future Meta or LinkedIn tracking, should only be activated after obtaining any consent required by law. You can change or withdraw your analytics choice at any time using the Cookie settings link in the footer. Your choice is stored in your browser. Analytics is not loaded unless you accept it. Essential session technologies remain active because they are required to provide the service.

9. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, objection or portability, and withdraw consent at any time. Contact [email protected]. You may also lodge a complaint with the French data protection authority (CNIL): cnil.fr.

10. Security

Passwords are stored as password hashes. We use authentication and access controls to protect account and administrative functions. No online service can be guaranteed completely secure. Please use a unique password and report suspected account compromise.

11. Changes

We may update this notice when the service, providers or applicable requirements change. The current version will be published on this page.