Privacy policy

The data controller is Omer Zaradez, a sole trader established in Israel, of HaGefen 100, Ramat HaSharon, Israel. For anything in this policy, including a request to exercise the rights below, write to support@kestrel.video.

Israel has an adequacy decision from the European Commission, so personal data may be transferred here from the EEA without additional safeguards.

Account data. Your email address and a hashed password, held by our authentication provider. We never see your password.

Content you create. The prompts you write, the images and video you upload, the settings you choose, and the files the models return. Prompts are stored alongside each generation because they are the only record of how a result was produced.

Usage and billing records. Your credit balance and the ledger of every reservation, charge and refund; your plan and its billing period. We do not receive or store your card details — those go directly to PayPal.

Technical data. Standard server logs from our host, including IP address, user agent and the pages requested, kept for security and for diagnosing faults.

We do not use advertising or analytics trackers, and we do not build a profile of you for marketing.

To provide the Service — running generations, storing your library, showing your history. Basis: performance of our contract with you.

To take payment and keep accounts — processing subscriptions and packs, maintaining the credit ledger, meeting tax and accounting obligations. Basis: performance of the contract, and legal obligation for the records we must retain.

To keep the Service secure and working — detecting abuse, investigating faults, preventing fraudulent use of credits. Basis: our legitimate interest in operating a service that is not being abused.

To contact you about the Service — account and billing notices, and changes to these policies. Basis: performance of the contract. Marketing email, if we ever send it, will be on consent and separately unsubscribable.

We use the following processors. Each receives only what it needs to do its part, and each is bound by a data processing agreement.

• Supabase — authentication, database and object storage. Holds your account record, your generation history and every file you upload or generate.
• fal.ai — runs the models. Receives the prompt and any media you submit for a generation, and returns the result. Their handling of that data is governed by their own terms, which you should read if your prompts or uploads are sensitive.
• PayPal — processes payments. Takes and holds your card or PayPal account details and billing information directly; we receive only the fact of a payment, the amount, what was bought, and PayPal’s transaction and payer references.
• OpenAI — screens every prompt before it runs, and translates a prompt written in another language into English for the few models that only follow English. Receives the text of each prompt you submit and nothing else: not your media, your email, or your account.
• Resend — sends account email such as sign-up confirmation. Receives your email address and the message.
• Vercel — hosting and request logs.
• Inngest — the job runner that carries a generation from submission to completion. Sees generation identifiers and status, not your media.

We do not sell personal data, and we do not share it with anyone for their own marketing. We may disclose data where a law requires it, and we will tell you unless we are forbidden from doing so.

The processors above operate internationally, so your data is transferred outside the country you are in — including to the United States. Those transfers rely on the standard contractual clauses or an equivalent mechanism in each processor’s data processing agreement.

Your content stays until you delete it or close your account. Deleting a generation removes it and its files from storage.

Your account is removed when you close it. Some records survive: the credit ledger and payment history are kept for as long as tax and accounting law requires, because we are obliged to be able to reconstruct what was charged.

Server logs are kept for a limited period for security and diagnostics, then discarded.

Server logs are kept for 30 days and then discarded.

Deleted content is removed from our storage within 30 days of you deleting it. The delay is deliberate: it is the window in which a deletion made by mistake can still be undone.

Billing and credit records are kept for seven years after the transaction, because Israeli tax law requires us to be able to reconstruct what was charged.

Depending on where you live, you have some or all of the following rights over your personal data: to obtain a copy of it; to have inaccurate data corrected; to have it erased; to restrict or object to how we use it; to receive it in a portable form; and to withdraw consent where we relied on consent.

You can exercise most of these directly in the product — your library is your content, and closing your account removes it. For anything else, write to us at the address in the first clause and we will respond within one month.

If you are in the EEA or the UK and think we have handled your data badly, you can complain to your national supervisory authority. We would rather you told us first.

We set a session cookie so that you stay signed in, and our payment provider sets what it needs to complete a checkout. That is all — there are no advertising or analytics cookies, which is why this site does not ask you to accept any.

The Service is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will remove it.

We will post any change here and update the date at the top. If a change materially affects how we use your data, we will tell you by email before it takes effect.