Privacy Policy

This Privacy Policy describes how Indaband Brasil Plataforma Digital LTDA, operating the Auvie product ("Auvie", "we", "us", or "our"), collects, uses, shares, and protects information about you when you use our website at auvie.ai and related applications (collectively, the "Service"). Auvie is an AI-powered conversational video editor: you upload a video, describe edits in natural language, and our AI agents transform it into a finished cut.

If you have any questions about this Policy or want to exercise any of your rights, contact us at support@auvie.ai.

1. Who we are

The data controller is:

Indaband Brasil Plataforma Digital LTDA ("Auvie")
Registered address: Av. Antônio Carlos Magalhães, 2487, Edifício Fernandez Plaza, Sala 1508, 15º andar, Parque Bela Vista, Salvador/BA, CEP 40280-000
CNPJ: 38.860.324/0001-72
Contact: support@auvie.ai

For users in Brazil, this contact also serves as our Data Protection Officer (Encarregado) under the LGPD (Lei Geral de Proteção de Dados, Law 13.709/2018). For users in the European Economic Area or the United Kingdom, the same contact serves as our point of contact for GDPR-related inquiries.

2. Information we collect

We collect the following categories of information.

Account information. When you sign up — via email & password, Sign in with Apple, or Sign in with Instagram — we collect identifiers necessary to create and maintain your account: email address, name (if provided), profile picture (if provided by the auth provider), and a unique user identifier. Apple may provide a private relay email; we treat it as your primary contact.

Connected accounts. If you connect your Instagram or Meta account, we collect the information described in Section 5 ("Instagram & connected accounts").

Content you upload or generate. When you use the Service, we collect:

• Video and audio files you upload.
• Chat prompts and instructions you send to our AI agents.
• AI-generated outputs (edited videos, transcripts, captions, generated images or music).
• Markers, settings, and editing decisions you make inside the product.

Usage and device information. We automatically collect technical information necessary to operate the Service and improve reliability: IP address, browser type, device identifiers, operating system, pages visited, features used, timestamps, error reports, and approximate location derived from IP. We use cookies and similar technologies (see Section 12).

Communications. If you email us or interact with our support, we keep a record of the conversation.

We do not intentionally collect special categories of personal data (race, religion, health, biometric data for identification, etc.). If such data is present in a video you upload, we process it solely to perform the editing task you requested.

3. How we use your information

We use your information for the following purposes, on the legal bases indicated (relevant to LGPD Art. 7 / GDPR Art. 6):

You can withdraw consent at any time where consent is the legal basis; doing so does not affect the lawfulness of prior processing.

4. AI processing of your content

This section describes how we process your videos, audio, transcripts, and prompts through AI models — both our own pipelines and third-party AI providers.

What we send to AI providers. To deliver the editing features you request, we send the relevant content to specialized AI providers — for example, your audio to a speech-to-text provider for transcription, your chat prompts and metadata to a large language model for routing and reasoning, and frames or clips for visual analysis when you ask for visual edits.

Sub-processors we use for AI. Currently:

• OpenAI (GPT-class models for chat reasoning; Whisper or equivalent for speech-to-text).
• Google (Gemini-class models for chat reasoning).
• A self-hosted or third-party transcription provider for speech-to-text.

We may add or change providers as the product evolves; the up-to-date list is reflected in Section 6.

How we may use your content to improve Auvie. We learn from what happens inside our users' conversations. We may review individual conversations — your prompts, our replies, the files you uploaded, and what our agents did with them. Where a conversation did not produce what you asked for, we may run your files through the system repeatedly while we adjust how it works, until it produces the result you should have gotten. And we may keep a conversation that exposed a defect as permanent test material, so that the same failure cannot return; that material can include your prompts and the files that triggered the problem.

Retention by AI providers. We rely on provider-side retention controls for inference traffic (typically zero or short-term). Output we generate for you is stored on Auvie's infrastructure under the retention rules in Section 9.

5. Instagram & connected accounts

If you choose to sign in with Instagram, or to connect your Instagram or Meta business account to publish or read content, this section applies. It is governed by Meta's Platform Terms and the Instagram Platform Policy.

What we request when you connect Instagram. Depending on which feature you use, we may request access to:

• Your Instagram profile (username, account ID, profile picture) — used solely to identify you and display your account inside Auvie.
• Your media (posts, reels, stories) — read access used so the AI can help you analyze, repurpose, or edit your existing content. We do not read content you have not authorized us to access.
• Publishing rights — write access used only to publish or schedule content you explicitly ask Auvie to publish on your behalf.
• Insights — read access to public-facing performance metrics, used solely to surface those metrics back to you inside the product.

What we do not do.

• We do not sell, rent, or share Instagram-derived data with advertisers, data brokers, or any third party for marketing purposes.
• We do not use Instagram-derived content to train AI models, and we do not keep it as test material.
• We do not access content beyond the scopes you grant.
• We do not publish on your behalf without your explicit request.

How to revoke access. You can revoke Auvie's access to your Instagram account at any time:

1. Inside Auvie: open your account settings and disconnect Instagram.
2. Inside Instagram: go to Settings → Apps and websites → Active and remove Auvie.

Revoking access stops further data collection from Instagram immediately. To delete Instagram-derived data we have stored, see Section 10 ("Your rights").

Sign in with Apple. If you sign in with Apple, we receive only the information you authorize Apple to share. Apple may provide a private relay email address; we treat that relay email the same as any other email.

6. How we share your information

We do not sell your personal information. We share information only with:

Sub-processors that operate the Service. The following providers process information on our behalf, under contractual data protection terms:

We update this list as our provider stack changes. Contact us at support@auvie.ai for the current list.

Advertising and measurement partners. We advertise the Service and need to know which campaigns lead to sign-ups. For that purpose we share a limited set of event and identifier data with the platforms below. Unlike the sub-processors above, these platforms act as independent controllers for their own measurement purposes.

About the hashed email. To measure conversions when browser cookies are unavailable, we may send your email address to Google as an irreversible SHA-256 hash. The hash is computed in your browser; your email address itself is never transmitted to the advertising platform, and the hash is used only to match a conversion we had already recorded. If you object to this processing, contact us at support@auvie.ai.

Billing data. To process payments we share with the payment provider the data needed to charge you (name, email, billing address or country, payment method). Payments are processed by Stripe (card) or Asaas (Pix) on our behalf. We use your billing country to determine currency and applicable taxes. We do not receive or store full card numbers. For purchases outside Brazil we sell through an authorised reseller and Merchant of Record, Dodo Payments (Dodo Payments Inc. and its affiliates): Dodo Payments is the controller of the data it collects at checkout, processes it under its own Privacy Policy, and shares with us what we need to give you access to your plan, such as your email, the plan bought and the status of your payments. A subscription bought outside Brazil before Dodo Payments became our reseller is still processed by Stripe on our behalf.

Authorities and legal requests. We may disclose information to comply with applicable law, a binding court order, or a lawful request by a public authority, including for national security or law enforcement purposes.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you and any successor will be bound by terms no less protective than this Policy.

With your direction. When you ask Auvie to publish to Instagram or share an export, we transmit the content to the destination you choose.

7. International data transfers

Our infrastructure and several of our sub-processors are located in the United States and the European Union. If you access the Service from Brazil, the European Economic Area, the United Kingdom, or another jurisdiction, your personal data may be transferred to and processed in those countries.

For transfers from the EEA/UK, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards. For transfers from Brazil, we rely on the bases in Article 33 of the LGPD, including specific contractual clauses with our sub-processors. You may request a copy of the relevant safeguards at support@auvie.ai.

8. Data security

We apply technical and organizational measures designed to protect your information: encryption in transit (TLS), encryption at rest for stored media, access controls limited to personnel who need access, logging and monitoring, and regular review of our security posture.

No security measure is perfect. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant authority (ANPD in Brazil; supervisory authorities in the EEA/UK) and affected users, in accordance with applicable law.

9. Data retention

We retain information for as long as needed to provide the Service and for the periods below:

After the retention period ends, we either delete the data or de-identify it so it can no longer be linked to you.

10. Your rights

Regardless of where you live, you can contact support@auvie.ai to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and the personal data associated with it.
• Receive a copy of your data in a portable format.
• Object to or restrict certain processing.
• Ask us to stop using your conversations and files as test material, and to remove anything we have kept.
• Withdraw consent where processing is based on consent.

Brazil (LGPD). Under LGPD Article 18, you have the rights of confirmation, access, correction, anonymization, blocking, portability, deletion, information about sharing, information about the consequences of refusing consent, and revocation of consent. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

EEA / UK (GDPR). You have the rights of access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local supervisory authority.

California (CCPA/CPRA). You have the rights of access, deletion, correction, and to opt out of "selling" or "sharing" of personal information. Auvie does not sell personal information. We do share a limited set of event and identifier data with advertising platforms for conversion measurement, as described in Section 6 — this may qualify as "sharing" for cross-context behavioral advertising under the CPRA. To opt out, contact us at support@auvie.ai.

We respond to verifiable requests within 15 days where required by law (LGPD), and within one month under the GDPR, with possible extensions where allowed.

11. Children

The Service is not directed to children under 13 (or under 16 in jurisdictions where that is the applicable threshold). We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact support@auvie.ai and we will delete it.

12. Cookies and similar technologies

We use first-party and third-party cookies and similar technologies to keep you signed in, remember preferences, and measure how the Service is used. You can manage cookies through your browser settings; some essential cookies are required for the Service to function.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email or via an in-product notice before they take effect. The "Last updated" date at the top of this Policy reflects the most recent revision. We keep prior versions on file and can provide them on request.

14. Contact us

For privacy questions, requests, or complaints:

• Email: support@auvie.ai
• Company: Indaband Brasil Plataforma Digital LTDA ("Auvie")
• Address: Av. Antônio Carlos Magalhães, 2487, Edifício Fernandez Plaza, Sala 1508, 15º andar, Parque Bela Vista, Salvador/BA, CEP 40280-000

Brazilian users may also contact the ANPD: gov.br/anpd.