00At a glance

The short version. Each point is expanded in the section that follows it.

• Stage — an MVP/beta, intended for professional and business evaluation.
• Accounts — sign-in, sessions and password recovery work. Creating a new account is currently closed.
• Data we process — your account details, session and security information, connection metadata, and the transactional email we send you.
• Data we do not process — prompts, uploaded assets, generated video, usage counters and payment data. None of it exists yet.
• Technical providers — third-party providers support authentication, hosting and infrastructure, and transactional email. Further information about the categories of service providers involved is available under Privacy.
• Tracking — none. No advertising, no analytics, no third-party tracking cookies.
• Your rights — access, rectification, erasure, portability, restriction and objection, under the GDPR.
• Contact — how to reach us about your data is set out under Your rights.

01About AiProVid

AiProVid is being built to turn a brief into advertising-video concepts, scripts, storyboards and variations. That capability is not yet open to users.

What exists today

What the service currently offers is the account layer: you can sign in, hold a session, sign out, recover a password and confirm an email address. Everything described in this document refers to that.

Beta status

This is an early-stage service aimed at professional and business evaluation rather than at general consumer use. Features may change, and parts of the service may be interrupted or withdrawn while it is in beta.

Who operates it

AiProVid is operated by an individual established in Spain.

02Privacy

Data controller

The controller of the personal data described here is the individual who operates AiProVid, established in Spain.

Categories of data

• Account data — your email address, a display name if you provide one, your language preference and the status of your account.
• Session and security information — information needed to maintain and protect sessions, including creation and expiry times and authentication-event information.
• Connection and security metadata — limited technical information associated with requests and security events, used to deliver the service and protect it from abuse.
• Transactional email — the address a message is sent to and its content, for account confirmation and password recovery.
• Connection data — the technical data any web request necessarily carries, including your IP address, processed to deliver these pages and to protect them from abuse.

Purposes and legal bases

• Creating and operating your account, keeping you signed in, and letting you sign out — performance of a contract (Art. 6.1.b).
• Sending account confirmation and password-recovery messages — performance of a contract (Art. 6.1.b).
• Protecting accounts and the service against abuse, credential guessing and session theft — legitimate interest (Art. 6.1.f), being the interest in keeping the service and its users secure.

Processors and recipients

We do not sell personal data and we do not share it for advertising. To run the service we rely on external providers that process personal data on our instructions. They fall into the following categories of recipient:

• Account and authentication service providers — verification of your credentials and management of your sign-in identity.
• Hosting and infrastructure providers — operation of the service and delivery of these pages.
• Data storage and technical processing providers — storage of your account, session and security records.
• Transactional communication providers — delivery of account confirmation and password-recovery messages.

These categories describe the external services used to operate AiProVid. Information about recipients can be requested under Your rights.

International transfers

Provider categories may involve processing outside the European Economic Area. Any such processing is subject to the applicable data-protection requirements.

Retention

Account data is kept while the account exists. Session records stop being usable when you sign out or when they expire. Security records are kept for as long as they remain useful for detecting and investigating abuse.

Providing your data

An email address and a password are necessary to create and use an account: without them an account cannot exist, and the service cannot be provided. Nothing beyond that is required of you.

Automated decision-making

No decisions producing legal or similarly significant effects are taken by automated means, and no profiling is carried out.

03Your rights

Under Articles 15 to 22 of the GDPR you may request, free of charge:

• Access — a copy of the personal data held about you.
• Rectification — correction of inaccurate or incomplete data.
• Erasure — deletion of your data, where the conditions for it apply.
• Portability — your data in a structured, machine-readable format.
• Restriction — that we limit how your data is used, in the cases the GDPR provides.
• Objection — to processing based on legitimate interest, on grounds relating to your situation.

Making a request

We may need to confirm your identity before acting on a request, so that account data is not disclosed to somebody else. Requests are answered within one month of receipt; where a request is complex, that period may be extended and you will be told why.

Complaints

If you consider that your data has not been handled properly you may complain to your supervisory authority. In Spain this is the Agencia Española de Protección de Datos (aepd.es).

04Security

AiProVid applies technical and organisational measures appropriate to the risk, in the sense of Article 32 of the GDPR. At the level at which it is useful to describe them, they concern:

• Account and session protection — measures that keep a signed-in session tied to the person who opened it, and that end it when they sign out.
• Access restriction — personal data is reachable only where the request is authorised to reach it.
• Secure communications — traffic to the site and the API is encrypted in transit.
• Abuse prevention — measures aimed at credential guessing, automated abuse and misuse of the authentication flows.
• Security monitoring and incident management — relevant events are monitored so abuse and security incidents can be detected and investigated.
• Maintenance — third-party dependencies are reviewed for known vulnerabilities as part of the release process.

Personal data breaches

Personal data breaches are assessed under the GDPR. Where notification is legally required, the competent supervisory authority is notified within the period the GDPR sets, and affected users are informed where the GDPR requires it.

05Cookies & local storage

AiProVid uses no advertising cookies and no third-party tracking cookies. Nothing on this site profiles you or follows you elsewhere.

Strictly necessary storage

When you sign in, technical storage is used so that the service can recognise your session on the next request. It carries no account details and expires or is removed when the session ends. Without it an authenticated session cannot work.

Functional storage

Your browser also keeps the preferences you choose — your language, your light or dark preference and your workspace layout. These stay in your browser and are never sent anywhere.

What is not stored

No access token, refresh token or account identifier is written to your browser's storage. The credential that proves your password exists only in memory, for the length of the sign-in exchange.

The service currently uses this storage for authenticated sessions and preferences chosen by the user, and does not use advertising or behavioural tracking technologies.

06Beta terms

The terms below are the ones that govern use of the service today. Full beta terms will be published before account creation reopens.

• Scope — the service currently consists of the account and authentication features described in this document. AI-powered generation is not part of what is offered today.
• Accounts — account creation is closed. Where an account exists, you are responsible for keeping your credentials confidential and for activity carried out through it.
• Acceptable use — no unlawful, deceptive or infringing use; no attempt to bypass limits, interfere with the service or gain access to accounts that are not yours.
• Your content — you keep all rights to any content you provide and to any output produced for you. You are responsible for holding the rights to what you upload.
• Availability — the service is in beta. It may be modified, interrupted or withdrawn, and no service level is promised.
• No payment — there is no billing, no subscription and no pricing in operation. If paid plans are introduced, the terms that apply to them will be published before they take effect.
• Law — Spanish law applies. Consumers keep the mandatory protections of their country of residence, including the right to bring proceedings before their local courts.

07Future AI functionality

Before AI-powered generation is opened to users, the following will be reviewed and the outcome published here:

• Which obligations of the EU AI Act apply to the service as built, and what each of them requires.
• Which providers and models are involved, and what data reaches them.
• How users are told they are interacting with an AI system, and how generated material is identified as machine-generated.
• How human oversight is preserved, so that generation and any action following it remain deliberate.
• How prompts and uploaded material are handled, retained and separated between accounts.
• What rules apply to the intellectual property of what you supply and what is produced for you.

One commitment applies from the outset: material you upload will be used to produce your own results only, and not to train or improve models for anyone else without your explicit agreement.

08Current capabilities

So that this document cannot drift away from the product, this is the state of each capability.

Available

• Sign-in and sign-out.
• Session management, including signing out of every session at once.
• Password recovery.
• Email address confirmation.

Closed

• Public registration — new accounts cannot currently be created.

Not currently available

• AI-powered video generation.
• Billing, subscriptions and pricing.
• Analytics, advertising and marketing tracking.
• Signing in with an account from another service.

This describes the service as it stands. It is not a commitment that any capability listed as unavailable will become available, nor a date for it.

09Version and changes

This page carries the current version of the information above, together with the date from which it applies.

When it changes, the updated version is published here and supersedes the previous one from its date, with a record of what changed. Where the law requires it, or where a change makes it appropriate, further information is provided.