Privacy Policy

Last updated: September 10, 2025

1. Company Information

This Privacy Policy applies to the services offered by:

2. About Flixyu

Flixyu is a video creation platform with artificial intelligence that allows users to:

• Create videos with personalized digital avatars
• Generate artificial voices for narration
• Edit videos with AI tools
• Process and render audiovisual content
• Use professional templates

3. Personal Data Collected

3.1 Registration Data

• Full name: for identification and personalization
• Email: for communication and account access
• Password: encrypted with bcrypt for security
• Phone: for support and communication

3.2 Biometric and Audiovisual Data

• Personal videos: for creating personalized digital avatars
• Audio/Voices: for voice cloning and narration
• Facial features: extracted from videos for avatar synthesis
• Vocal patterns: for faithful voice reproduction

3.3 Navigation and Usage Data

• Cookies and access tokens: to maintain active sessions
• System logs: via New Relic for monitoring
• Analytics data: via Google Analytics and Google Tag Manager
• Usage history: videos created, templates used, credits consumed

3.4 Payment Data

• Billing information: processed via Stripe
• Transaction history: for credit and subscription management

4. Purposes of Data Processing

We use your personal data for:

• Service provision: creation of videos, avatars, and artificial voices
• Authentication and security: access control and account protection
• Payment processing: plan and credit management
• Service improvement: usage and performance analysis
• Communication: technical support and important updates
• Legal compliance: meeting regulatory obligations

5. Legal Basis

The processing of your personal data is based on:

• Contract performance: for providing contracted services
• Consent: for avatar creation and voice cloning
• Legitimate interest: for service improvement and security
• Legal obligation compliance: when required by law

6. Data Sharing

We share your data only in the following situations:

6.1 Technical Vendors and Partners

• Amazon Web Services (AWS): secure storage on US-East-1 servers
• Remotion: video rendering
• Sync.so: avatar lip synchronization
• Minimax (Replicate): artificial voice generation
• Stripe: payment processing
• New Relic: performance monitoring
• Google (Analytics/GTM): usage analysis
• MongoDB Atlas: database with automatic backup

6.2 Competent Authorities

When required by law or court order.

7. Storage and Security

7.1 Data Location

• Servers: Amazon Web Services (AWS) US-East-1 region
• Biometric data: AWS S3 in private buckets with signed URLs
• Backup: MongoDB Atlas with automatic replication

7.2 Security Measures

• Encryption: passwords with bcrypt and encrypted sensitive data
• Signed URLs: secure access to user content
• Access control: authentication via JWT with automatic renewal
• Monitoring: security logs and anomaly detection
• AWS best practices: implementation of all security recommendations

7.3 Retention Period

• Personal data: maintained while the account is active
• Biometric data: stored during account validity
• System logs: 12 months for security purposes
• Financial data: 5 years as per tax legislation

8. Data Subject Rights

You have the following rights regarding your personal data:

• Access: obtain information about the processing of your data
• Rectification: correct incomplete or incorrect data
• Deletion: request the elimination of personal data
• Portability: receive your data in a structured format
• Opposition: object to processing in certain situations
• Consent revocation: withdraw authorization at any time

9. Data Deletion

When you request the deletion of your account:

• All personal files are removed from AWS S3
• Biometric and voice data are permanently deleted
• Personal information is anonymized in our systems
• Personalized avatars and voices are deactivated
• Video history is removed or anonymized

Important: Some data may be retained in anonymized form for statistical purposes or to comply with legal obligations.

10. Minors

11. Cookies and Similar Technologies

We use cookies for:

• Authentication: keeping you securely logged in
• Preferences: remembering personalized settings
• Analytics: understanding how you use our platform
• Advertising: personalizing ads on Google Ads

You can manage cookies through your browser settings.

12. International Transfer

Your data is processed on servers located in the United States (AWS US-East-1). We ensure that all transfers follow best practices for security and data protection, with appropriate protection contracts.

13. Changes to This Policy

This Privacy Policy may be updated periodically. We will notify you of significant changes via your registered email or through notices on our platform.

14. Contact

For other matters: Contact us through the official channels available on our platform.

15. Applicable Law

This Privacy Policy is governed by the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018) and other applicable regulations for personal data protection in Brazil.