Privacy Policy
Last Updated: September 13, 2026 · Effective Date: September 13, 2026
Core Privacy Commitments at a Glance
- ✓ Zero AI Model Training:We do NOT use your uploaded videos or generated outputs to train, retrain, or fine-tune AI models.
- ✓ Automatic Video Purging:Uploaded clips and generated videos are kept for your plan's storage period (7 days on Free, 30 days on Creator, 1 year on Studio) and then deleted automatically. You can delete any video immediately from your dashboard.
- ✓ Instant Erasure:You can delete your videos immediately at any time via the self-service "Delete now" button.
- ✓ Strict 18+ Age Requirement:We do not knowingly collect personal data or biometric videos from minors under 18.
1Who We Are
This Privacy Policy explains how Extender.Video ("we", "us", "our") collects, uses, protects, and handles your personal information when you use our website at extender.video and our related video extension APIs and tools (the "Service").
For individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland, Extender.Video acts as the Data Controller of your account and transactional information. For inquiries or data protection requests, contact our designated privacy team at [email protected].
2Information We Collect
We adhere to the principle of data minimization, collecting only data necessary to operate our service:
Account & Authentication
When you sign up or log in (via Google OAuth or email), we store your email address, name, account ID, and creation timestamp.
User Content (Videos)
Video clips uploaded by you (MP4, MOV, WebM), selected aspect ratios, motion prompts, and generated output files.
Technical & Diagnostic Logs
IP addresses (masked for analytics), browser user-agent, operating system, file dimensions, generation duration, and server status codes.
Payment Information
Payment card processing is performed directly by our authorized checkout partners (Whop and Freemius). We do not store raw credit card numbers or security CVVs.
3Uploaded Videos, Storage Limitation & AI Training
Automated Retention Schedule:
| Data Category | Retention Period | Purpose & Automated Action |
|---|---|---|
| Original Uploaded Video | 7 days (Free) / 30 days (Creator) / 1 year (Studio) | Used to feed the generation task and kept for your plan's storage period, then automatically deleted permanently from Cloudflare R2 object storage. You can delete it sooner from your dashboard. |
| Generated Video Output | 7 days (Free) / 30 days (Creator) / 1 year (Studio) | Retained to allow user review and download. Automatically deleted after the retention window expires. |
| Manual Immediate Deletion | Immediate (< 1 minute) | Triggered when you select "Delete now". Both original inputs and generated outputs are purged instantly. |
| Job Metadata & Diagnostics | Account lifetime / 90 days | Timestamp, credit balance, and job status. Deleted upon account deletion request. |
4Subprocessors & Service Providers
To run high-performance video generation pipelines, we partner with specialized infrastructure and AI providers. All subprocessors are vetted for compliance with GDPR, CCPA, and standard contractual clauses (SCCs):
| Entity | Role | Data Handled | Location |
|---|---|---|---|
| Cloudflare, Inc. | Object Storage (R2), Serverless Database (D1), CDN & WAF | Encrypted video assets, database records, network telemetry | USA / Global Edge |
| fal.ai (Features & Labels Inc.) | AI Model Inference (MiniMax video model, served through fal.ai) | Temporary signed video read URLs, your prompt and any reference audio during inference (No AI training) | USA |
| Whop & Freemius | Merchant of Record & Payment Processing | Billing email, transaction records, sales tax / VAT compliance | USA / Global |
| Vercel, Inc. | Cloud Application Hosting & Edge Middleware | Server access logs and runtime traffic | USA |
| Amazon Web Services, Inc. | Transactional email (Amazon SES) | Email address and the verification / password-reset messages we send you | USA |
| Microsoft Corporation | Usage analytics (Microsoft Clarity) | Pseudonymous interaction data such as page views, clicks and scrolling | USA |
| Ahrefs Pte. Ltd. | Website analytics (Ahrefs Web Analytics) | Aggregated page-view statistics and referrers | Singapore |
| Inngest, Inc. | Background job orchestration | Job identifiers only; no video, audio or personal content | USA |
| Google LLC | OAuth Identity Provider | Email, display name, profile avatar (upon user sign-in) | USA |
5Legal Bases for Processing (GDPR Article 6)
We process personal data only when lawful grounds exist under European data protection laws:
- Performance of a Contract (Art. 6(1)(b)): To deliver video extension and outpainting requested by you, manage user accounts, and process purchases.
- Legitimate Interests (Art. 6(1)(f)): To maintain platform security, detect fraud, protect against unauthorized bot scraping, and resolve technical bugs.
- Legal Obligations (Art. 6(1)(c)): To retain required tax and transaction invoices and respond to valid legal process or copyright takedown requests.
6International Transfers & Safeguards
Your information may be transferred to and processed in the United States or other countries where our cloud infrastructure providers operate. Where personal data originating in the EEA or UK is transferred outside these territories, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and UK International Data Transfer Addendum.
7Cookies & Tracking Technologies
We believe in a privacy-first web. We do not use invasive third-party cross-site behavioral tracking cookies, Meta Pixels, or TikTok Pixels.
We only use:
- Strictly Necessary Cookies: Required for secure session authentication (
better-auth.session_token) and DDoS protection (Cloudflare). - Privacy-Friendly Analytics: Aggregated, non-personally identifiable telemetry to measure page speed and error rates.
You can adjust preferences anytime on our Cookie Settings page.
8Your Rights (GDPR & CCPA / CPRA)
Depending on your jurisdiction, you have the following enforceable rights:
To exercise any of these rights, email us at [email protected]. We respond to all verified requests within 30 days without charge.
9Children's Privacy (18+ Policy)
10EU AI Act (Article 50) & Synthetic Media Disclosure
Under European Union Regulation (EU) 2024/1689 (the Artificial Intelligence Act), providers and deployers of AI systems generating synthetic audio, image, or video content are subject to transparency obligations.
In compliance with Article 50:
- Videos created or extended through Extender.Video are artificially generated or manipulated using deep learning models.
- Extender.Video does not strip, alter, or remove provenance metadata, technical watermarks, or C2PA authenticity headers embedded by upstream foundation models.
11Security & Contact Information
We implement industry-standard technical measures including TLS 1.3 encryption in transit, AES-256 encryption at rest on Cloudflare R2, strict IAM least-privilege scoping, and short-lived pre-signed URLs to protect your videos and credentials.
For any questions, concerns, or requests regarding this Privacy Policy:
Extender.Video Privacy & Legal Desk
General Inquiries: [email protected]
Privacy & Data Rights: [email protected]
Copyright & DMCA: [email protected]