Privacy Policy

BrainEasy (“we”, “us”, “our”) is an AI-powered video generation platform. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our website and services (the “Service”).

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

We collect the following categories of information:

• Account information — your email address and password when you register. If you sign in via a third-party provider (e.g. Google), we receive your name and email from that provider.
• Content you submit — text prompts, topics, or materials you input to generate videos.
• Generated content — videos produced by the Service are stored temporarily on our servers (see Section 6 on Data Retention).
• Payment information — we do not store your card details. Payments are processed by Stripe, which collects and handles your payment data under its own privacy policy. We only receive a confirmation of whether the transaction succeeded and a customer reference ID.
• Usage data — information about how you use the Service, such as pages visited, features used, and timestamps. This is collected via standard server logs and may include your IP address and browser type.

We use the information we collect to:

• Create and manage your account.
• Process payments and maintain your credit balance.
• Generate videos using our AI pipeline.
• Send transactional emails (e.g. account confirmation, password reset).
• Improve the Service — analysing usage patterns helps us identify bugs and improve features.
• Marketing — with your consent or as permitted by law, we may use your generated content as demo examples (see our Terms of Service for details and how to opt out).
• Comply with legal obligations.

We do not sell your personal information to third parties, nor do we use it to serve third-party targeted advertising.

To operate BrainEasy, we share limited data with the following categories of third-party providers:

• Payment processing — Stripe (United States). Your payment data is handled entirely by Stripe.
• Cloud storage — Cloudflare R2 for storing generated videos temporarily.
• Database & authentication — Supabase for storing account data and managing authentication.
• AI service providers — third-party AI providers are used to generate video narration, text, and other content. Your input text is sent to these providers solely for the purpose of generating your requested video. We do not permit these providers to use your data to train their models beyond what their standard terms allow.

Each of these providers operates its own privacy policy. By using the Service, you acknowledge that your data may be processed by them in connection with delivering the Service to you.

We use essential cookies and similar technologies to maintain your session and keep you logged in. We do not currently use advertising or tracking cookies from third parties. If this changes, we will update this policy and, where required by law, seek your consent.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from logging in or using parts of the Service.

• Generated videos — automatically deleted from our servers 30 days after creation. Download your videos before this window closes if you wish to keep them.
• Account data — retained for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes (e.g. payment records).
• Usage logs — retained for up to 90 days for security and debugging purposes, then deleted or anonymised.

You have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request deletion of your account and associated personal data (subject to legal retention obligations).
• Opt out of marketing use — if you do not want your generated content used for promotional purposes, contact us and we will remove it.

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days.

We implement reasonable technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. These include encryption in transit (HTTPS/TLS), access controls, and use of trusted cloud infrastructure providers.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You use the Service at your own risk.

Our third-party service providers (including Stripe, Cloudflare, Supabase, and AI providers) may process your data in countries outside Australia, including the United States. These countries may have different data protection laws. We take steps to ensure your data is handled with an appropriate level of protection wherever it is processed.

BrainEasy is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where appropriate, by email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this policy or wish to exercise your rights, please contact us at: support@braineasy.app

If you believe we have breached the Australian Privacy Principles and we have not resolved your complaint satisfactorily, you may contact the Office of the Australian Information Commissioner (OAIC) to lodge a complaint.