Privacy Policy

The data controller is EFilms.AI, of Tel Aviv, Israel. For any privacy question or request, contact TODO_SUPPORT_EMAIL.

Information you give us

• Account details: name, email address, password (stored only as a cryptographic hash), and, for business accounts, company name.
• Billing details: billing name and address, and the invoice history associated with your account.
• Content you upload: briefs, text, images, footage, audio, logos, and brand assets you submit to produce an advertisement.
• Correspondence: messages you send to support, and our replies.

Information collected automatically

• Usage data: the features you use, productions you run, and timestamps.
• Technical data: IP address, browser and device type, operating system, and referring page.
• Cookies and similar technologies, as described in clause 7.

Payment card details. We do not collect or store your full card number, expiry date, or CVV. Card details are entered directly with our PCI-DSS-compliant payment provider and are never held on our servers. We receive only a confirmation of the charge and the last four digits of the card.

• To create and administer your account, and to authenticate you.
• To provide the service: processing your briefs and content to generate the advertisements you request.
• To take payment, issue invoices, and handle refunds.
• To provide support and respond to your enquiries.
• To monitor reliability, diagnose faults, and prevent fraud and abuse.
• To meet legal obligations, including tax and accounting record-keeping.
• To send service messages about your account. Marketing email is sent only with your consent, and every marketing message carries an unsubscribe link.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Where the GDPR applies to you, we rely on: performance of our contract with you (providing and billing for the service); our legitimate interests (security, fraud prevention, and improving the service); your consent (marketing email and non-essential cookies); and compliance with legal obligations (tax and accounting).

We share personal information only with service providers who process it on our behalf, under contract, and only as needed to run the service:

• Payment processing: a licensed, PCI-DSS-compliant payment provider that handles card transactions and refunds.
• Cloud hosting and storage: infrastructure providers that host the application, the database, and generated media.
• AI model providers: the services that generate scripts, imagery, and video from the briefs and content you submit.
• Email delivery: providers that send transactional and, where consented, marketing email.
• Analytics and error monitoring: providers that help us measure usage and diagnose faults.
• Professional advisers and authorities: where required by law, court order, or to establish or defend legal claims.

Some of these providers operate outside Israel and the EEA. Where that is the case, transfers are made under an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

• Account and profile data: for as long as your account is open, then up to 12 months after closure.
• Content you upload and the outputs generated from it: for as long as your account is open, or until you delete it.
• Billing records and invoices: for seven years, as required by Israeli tax law.
• Support correspondence: up to 24 months after the enquiry is closed.
• Technical logs: typically up to 12 months.

We use cookies that are strictly necessary to run the site and keep you signed in, and (where you consent) analytics cookies that tell us how the site is used. You can block or delete cookies in your browser settings; the site will still work, but some features may not.

We protect your information with encryption in transit (TLS), encryption at rest for stored data, hashed passwords, access controls limiting staff access to what their role requires, and regular patching of our systems.

No system is completely secure. If a breach affects your personal information and poses a risk to you, we will notify you and the relevant authority as required by law.

You have the right to:

• Access the personal information we hold about you, and receive a copy.
• Correct information that is inaccurate or incomplete.
• Delete your information, where we have no overriding legal obligation to keep it.
• Object to or restrict certain processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Unsubscribe from marketing email, using the link in any such message.

To exercise any of these, email TODO_SUPPORT_EMAIL. We respond within 30 days. We may ask you to verify your identity first. If you believe we have mishandled your data, you may complain to the Israeli Privacy Protection Authority, or to your local supervisory authority if you are in the EEA.

The service is not directed at children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.

We may update this policy from time to time. The revision date at the top of the page reflects the current version, and we will notify you of material changes by email or in-product. See also our Terms of Service.