Privacy Policy
This Privacy Policy explains how Zmanim ("etmol", "we") collects, uses and shares personal data when you use etmol.ai (the "Service"). The data controller is Zmanim, a Delaware corporation, registered office 251 Little Falls Drive, Wilmington, DE 19808, USA. Contact: support@etmol.ai.
1. What we collect
- Account data — your email address and authentication identifiers, handled through our authentication provider.
- Your Content — the photos and images you upload, any audio you upload, and any YouTube link you choose to import for its audio.
- Output — the videos the Service generates for you and related project settings.
- Usage & device data — log data, IP address, browser/device information and basic analytics needed to run and secure the Service. This includes pages visited, button clicks, campaign information and session recordings, including before you sign in. Recordings mask form inputs and designated private areas and are deleted after 30 days. If you sign in, we connect your earlier visitor activity to your account to understand the signup and film-making journey.
- Payment data — handled entirely by our payment processor (see §3). We do not receive or store your full card number.
2. How we use it
- To provide the Service: store your uploads, generate your video, and deliver it to you.
- To operate accounts, apply usage limits and entitlements, and process purchases.
- To secure the Service, prevent abuse and debug problems.
- To comply with legal obligations.
Legal bases (where GDPR/UK GDPR applies): performance of our contract with you, our legitimate interests in operating and securing the Service, consent where required, and compliance with law.
3. Who we share it with (subprocessors)
We use the following service providers to deliver the Service:
| Provider | Purpose |
|---|---|
| Supabase | Authentication and application database |
| Railway | Application hosting, compute and storage |
| Vercel | Website/edge delivery (sets a short-lived country cookie used only to choose your language) |
| Stripe | Payment processing — handles all card data on our behalf |
| AI video generation provider | Receives the photos you submit for a project solely to render your video |
| Residential network provider | Used only to retrieve the audio of a YouTube link you explicitly supply |
Optional Meta advertising measurement. When you continue after the notice at sign-in, or enable measurement in Privacy settings, we share future film purchase amounts and currency, event IDs and times, a hashed account identifier, browser User Agent, and available Meta attribution cookies or the click identifier from an ad you followed with Meta to measure our advertising. An ad click identifier may be retained in the current browser tab for up to 30 days and carried through our sign-in links. We do not include your photos, film content, email address or IP address in these events. You can turn measurement off through your account menu under Privacy settings. Existing privacy choices are preserved when you sign in again. This cancels queued events; it does not recall data already sent to Meta. See Meta's privacy policy for its handling of received data.
We may disclose data if required by law or to protect rights and safety.
4. International transfers
These providers may process data outside your country, including in the United States and the EU. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
5. Retention
We keep Your Content and Output for as long as your account/project exists or as needed to provide the Service, and then delete or anonymize it within a reasonable period. Account and transaction records are kept as required for legal, tax and accounting purposes. You can request deletion at any time (see §7).
6. Security
We use industry-standard measures including encryption in transit, access controls and isolation between users' data. No system is perfectly secure, but we work to protect your data and to limit what each provider can access.
7. Your rights
Subject to your location, you may have the right to access, correct, delete, port, restrict or object to processing of your personal data, and to withdraw consent. California residents have rights under the CCPA/CPRA, including that we do not "sell" or "share" personal information as those terms are defined. To exercise any right, email support@etmol.ai; we will respond as required by law. You may also complain to your local data protection authority.
8. Cookies
We use authentication storage to keep you signed in, a short-lived
country cookie to choose your language, and a first-party
etmol_visitor cookie lasting up to 30 days to connect visits
with usage events and session recordings. Google Analytics and Vercel
also collect website analytics. Advertising measurement and Meta
attribution are described in section 3 above.
9. Children
The Service is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
10. Changes
We may update this Policy; the "Last updated" date reflects the latest version and we will provide additional notice where required.
11. Contact
support@etmol.ai — Zmanim, a Delaware corporation, 251 Little Falls Drive, Wilmington, DE 19808, USA.