Privacy policy

Autovidea is run by Oktrai Ltd (“OktrAI”, “we”), a company registered in Nigeria (RC 9932756), whose registered office is at 80 Alexander Avenue, Lagos Island, Lagos State 101241, Nigeria. OktrAI decides how your personal data is used (the “data controller”) under Nigeria’s Data Protection Act 2023, and under similar laws, such as the GDPR, where they apply to you. For anything about your data, email support@oktrai.com.

Your account. Your name, email address, and password. The password is stored only as a one-way hash, so nobody at OktrAI can read it. If you continue with Google, we receive your Google account id, name, and email address, never your Google password.

What you make. Titles, scripts, your templates and their settings, reference video links, files you upload (reference videos, images, music, clips), and what Autovidea produces from them: voice tracks, images, clips, thumbnails, and finished videos.

Characters made from your own face. If you choose to make a character from your own face, the photo you upload, two camera shots taken in your browser to check it is really you, your consent (its wording, the time, and your IP address), and the check results. This is biometric data, so we handle it as described below.

Going live and recording as a character. Your camera picture while you go live or record a take, any picture you upload to stream as, what our picture check found in it, and, for a real photo, who you said it shows and your confirmation (its wording, the time, your IP address, and your browser type). We also keep your confirmation that you are 18 or older, and a record of each stream: when, how long, and the credits it used. For the free 30-second try, we keep the IP address it came from for a day. More below.

Connected accounts. When you connect YouTube, TikTok, Facebook, or Instagram to post videos, we receive an access token from that network, plus the account’s name and id. Tokens are stored encrypted. We use them only to post the videos you ask us to post and to read what that needs, such as your channel name.

Payments. When you buy credits, we keep the order: the pack, the amount, the currency, the payment reference, and its status. Card and bank details go to Paystack and never reach us. If you pay with crypto, NOWPayments handles it: we send it only the order reference and amount, and we keep the coin, network and transaction ID it reports.

Support and reports. Messages you send to support, and content reports you send us.

Sign-in records. For each session, the IP address and browser type, used to keep sessions valid and to look into abuse.

Error reports. When something breaks, a technical report: what failed, where in our code, and your browser type. We strip names, email addresses, IP addresses, cookies, and the content of your requests from these reports before they are sent.

• To run the service you signed up for (a contract with you): your account, making your videos, posting them where you choose, credits, and support.
• To keep it safe and working (our legitimate interest): stopping abuse and fraud, finding faults, and checking reports of content that breaks the terms.
• Characters made from your own face (your explicit consent, which you give before uploading and can withdraw at any time by deleting the character).
• Because the law requires it: keeping payment and tax records, and answering lawful requests.
• Emails: we send emails about your account, such as password resets and replies to support. We do not send marketing emails.

We do not sell your personal data, show you ads, or use your content to train AI models. No decision with legal or similarly significant effects on you is made by software alone. Where we restrict an account, a person decides.

Autovidea makes videos with outside AI services. To make each part, we send that service what it needs: the text of a title or script, voice text, prompts describing scenes, reference images, and reference videos. Each one returns its result to us. They work under their own API terms. We choose services whose terms do not let them use what we send to train their models where they offer that choice, and you should not put anything into a script or upload that you would not want processed this way.

Results made by AI can be wrong, odd, or resemble existing work. Check what you publish.

If you connect an AI assistant, such as our ChatGPT connection, what you send through it is also handled by that assistant’s provider under your account with them.

We also give information to authorities when the law requires it, and to a buyer if OktrAI or Autovidea is ever sold, under this same policy.

Most of the services above are outside Nigeria, so your data is transferred abroad, to the countries listed. We do this because those services are needed to provide what you asked for, and we rely on their contract terms and the safeguards the law allows. You can ask us for details of the safeguard for any service.

You can make an AI character from a photo of your own face. Only adults (18 or older) can, only of their own face, and only after agreeing to it. Before anything is drawn:

• On our own servers, we find the face in your photo and in two camera shots taken in your browser (one facing the camera, one with your head turned), and compare them, to check a real person is there and that it is the person in the photo. The face measurements used for this are worked out, compared, and thrown away. They are never stored or sent anywhere.
• Google Gemini looks at the photo once to check the person appears to be an adult and is not a well-known public figure.

If the checks pass, the photo is sent to fal.ai to draw your character’s pictures. We keep those drawn pictures and the record of your consent while the character exists.

• The camera shots are never stored.
• The photo is erased as soon as the character is made, or straight away if you delete the character first.
• We use your face only for your character in your workspace’s videos, labelled as AI. Never to identify you anywhere else, and never to train AI models.
• Delete the character at any time from My characters, and its pictures are deleted.

If you think a character or a video made with Autovidea uses your face or voice without your consent, ask us to remove it. We look into it and reply within 48 hours.

You can stream or record yourself as a character: one of yours, or any picture you upload. Your camera picture is sent live to be redrawn, and the result comes back to your browser. Your voice is never sent: your streaming app picks up your microphone. We don’t store the stream. Only takes you choose to save are kept, in your Library.

• The picture check. A picture you upload is looked at once by our image model, to check it shows one person or character, that it isn’t someone well known, a character owned by a company, someone under 18, or nudity, and whether it looks like a real photo. We keep the answers with the picture.
• No face fingerprints. We don’t keep any face measurements from uploaded pictures. We keep a code worked out from the whole picture, so a picture removed after a report can’t be uploaded again. It can’t be turned back into the picture.
• Real photos. A real photo can only be used after you confirm it is you, or that the person agreed and is 18 or older. We keep that confirmation as described above.
• The AI label. Every stream and take carries the label “AI character · autovidea.com”, so anyone who sees their face can find us.
• Uploaded pictures are deleted when you delete them, after 90 days without use, or at once when a report about them is upheld.

If you see yourself streamed by someone else without your consent, ask us to remove it. A picture or character with an open report can’t start a new stream, and we reply within 48 hours.

Your scripts and videos are private. Authorised OktrAI staff open them only to answer your support request, check a content report, investigate fraud or a security problem, settle a payment dispute, or meet a legal requirement. Opening a video’s content needs a written reason, and every opening is recorded in an audit log.

Autovidea uses YouTube API Services to post to your channel and read what that needs. Google’s handling of that data is covered by the Google Privacy Policy. You can disconnect an account at any time from Settings in Autovidea, and you can also remove Autovidea’s access to Google from your Google security settings. When you disconnect, we delete that account’s tokens.

The same goes for TikTok, Facebook, and Instagram: we use their access only to post the videos you choose and read what that needs. Disconnect them from Settings in Autovidea, or remove Autovidea’s access in that network’s own app settings, and we delete their tokens.

Your account and what you make

While your account is open

Files you delete

Removed for good 3 days later. The short delay lets us undo a mistake.

Face photo for a character

Erased as soon as the character is made, never kept in the trash

Camera shots for the face check

Never stored

A character’s pictures and consent record

Until you delete the character, or close your account

Likeness removal requests

Kept as the record of how we handled them

Pictures uploaded to go live as

Until you delete them, 90 days after their last use, or at once when a report about them is upheld

A removed picture’s code

Kept, so the same picture can’t be uploaded again

Your camera picture while live

Never stored by us. Only takes you save are kept.

The IP address of a free try

1 day

Uploaded reference videos

Removed once Autovidea has watched them, then gone for good 3 days later

Records of emails we sent you

90 days

Connected-account tokens

Until you disconnect, or close your account

Payment, refund, and credit records

For as long as tax and accounting law requires, currently up to 7 years, even after your account is closed. These keep only what the law needs: the amount, what was bought, the date, and the email address it was paid with.

A scrambled code of your email address

Kept after your account is closed, so the free welcome credits are given once per person. It can’t be turned back into your address.

Backups

Copies of the database, kept up to 30 days, then overwritten

You can ask us to:

• tell you what personal data we hold about you, and give you a copy
• correct anything wrong
• delete your data, or your whole account
• give you your data in a form you can take elsewhere
• stop or limit a use of it, or object to a use based on our legitimate interests

Email support@oktrai.com from the address on your account. We answer without undue delay, and within 30 days. We may ask you to confirm it is you. Some data we must keep by law (payment records, above) even when you ask us to delete it, and we will tell you when that applies.

If you are unhappy with how we handled your data, tell us first so we can fix it. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng), or to the data protection authority where you live.

Go to Settings and choose Delete my account. You confirm with your password (or, if you sign in with Google, by typing your email address). It happens straight away: your account, your videos, templates, characters, scripts, files, support messages, and connected-account tokens are deleted, a plan that is still renewing is cancelled, and unused credits are lost. Files are gone for good 3 days after that, and from backups within 30 days. Payment records stay as described above. We email you to confirm.

If other people work in your workspace, contact us first so we can hand it to one of them; their work is not deleted with yours. You can also email support@oktrai.com from the address on your account and we will delete it for you.

Deleting your Autovidea account does not delete videos already posted to YouTube, TikTok, Facebook, or Instagram: delete those on that network. Paystack and the networks keep their own records under their own policies.

Autovidea uses only the cookies it needs to work. None are for advertising or tracking.

• autovidea_session keeps you signed in. 30 days, renewed while you use Autovidea.
• autovidea_google_signin and autovidea_youtube_oauth exist for about 10 minutes while you sign in with Google or connect an account.
• autovidea_admin_session is for OktrAI staff only.
• autovidea_theme remembers light or dark mode.

Your browser also stores which announcements you have closed. That stays on your device.

Anyone can use Autovidea, but someone under 18 may only use it with a parent’s or guardian’s consent, as Nigerian law requires. A parent or guardian can use any of the rights above for their child, including asking us to delete the child’s account: email support@oktrai.com.

Connections are encrypted, passwords are hashed, connection tokens are encrypted, staff access to the admin area needs a second sign-in step, and staff actions are logged. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the regulator as the law requires.

When this policy changes, the date at the top changes. If a change matters, we will tell you by email or in Autovidea before it applies.