Privacy Policy

Effective October 28, 2026

Music Video Wizard is a desktop app. Your music, footage, projects and finished videos stay on your computer — we never upload them. This page explains the small amount of data that does leave your computer, why, and how to have it deleted. Using Music Video Wizard is also covered by our Terms of Service.

Music Video Wizard is run by Data-based Innovations LLC, a Missouri (USA) company, which is responsible for the data described here (the “data controller”). Postal address: 117 S Lexington Street, Ste 100, Harrisonville, MO 64701, USA. Contact us at support@musicvideowizard.com.

What we collect

  • Account. If you create an account: your email address and a password (stored hashed).
  • Tokens and purchases. Your token balance, and a receipt for every purchase, AI clip, refund, reversal and any manual adjustment by support (for example “AI clip — Kling 5s”). If you delete your account, the receipts also record any unused tokens that were forfeited. We do not keep the text of your AI prompts in this history.
  • Computer ID (fraud prevention). If you sign in, the app sends your computer’s hardware ID when you sign in, buy tokens or generate an AI clip. We store only a scrambled (keyed hash) version that can’t be turned back into the ID, linked to your account. It is used only to stop fraud — for example, so a computer banned for a disputed payment can’t keep making new accounts.
  • Sign-in history. If you sign in, each time you use the app signed in we record when, whether you signed in or were still signed in from last time, the app version and your computer details (below), linked to your account. We use it to understand how the app is used and to help with problems you report.
  • Payment and AI clip records (fraud prevention). When you buy tokens or generate an AI clip, we record the IP address the request came from, the country it belongs to (looked up on our own server — the address isn’t sent to anyone for this), and the app version, linked to your account. For a purchase, Stripe also tells us the card’s brand, last 4 digits, issuing country and type (credit, debit or prepaid), a fingerprint Stripe uses to recognise the same card across payments, whether your bank verified the payment (3D Secure), and Stripe’s fraud-risk rating. For an AI clip we record the model and settings used, the length of your prompt (not its text), how the AI service handled it and its estimated cost to us. These records are used only to prevent and investigate fraud and abuse.
  • Payments. Handled entirely by Stripe. Your full card number goes to Stripe and never reaches our servers.
  • AI clip prompts. When you generate an AI clip, your prompt is sent to our generation service and on to fal.ai and the AI model provider you pick, so the clip can be made. We don’t store the clip ourselves: it’s downloaded to your computer. fal.ai keeps your prompt and the generated clip for a time under its own terms, and may keep the clip on its servers at an unlisted web address. Don’t put personal information in prompts.
  • Automatic error reports — on by default, can be turned off; in Europe, off unless you turn them on. If your computer is set to a time zone in Europe (including the UK and Switzerland), nothing is sent unless you agree when the app first asks, or later in Settings. When something crashes, the app sends the error message, technical details, app version, computer details (below) and a random ID for this installation. File paths and file names (such as song and clip titles) are removed before sending. Turn this off any time in ⚙ Settings → Privacy.
  • Daily active count — on by default, can be turned off; in Europe, off unless you turn it on (as for error reports). Once a day the app sends an anonymous count: a random ID created only for this purpose, whether you’re signed in, the app version and your operating system. It isn’t linked to your account, your IP address or anything you do in the app, and is kept for up to 2 years. It tells us how many people use the app, with and without an account. Turn it off in ⚙ Settings → Privacy.
  • Render count — on by default, can be turned off; in Europe, off unless you turn it on. When a render ends, the app records whether it finished, failed or was cancelled, whether it was the whole song, a selection or an in/out range, the quality, how many formats, the number of clips, the video’s length, how long it took, the app version and your operating system. Never file names, folders or anything in the video. If you’re signed in it is linked to your account; if not, to a random ID used only for this count (not the daily active count’s ID). It tells us how much the app is used and how well rendering works, and is kept for up to 2 years. Turn it off in ⚙ Settings → Privacy.
  • Anonymous usage stats — off unless you turn them on. If you opt in: which features and settings are used and when (for example opening the app, loading a song and its tempo, running Shuffle and which options were on, applying an effect, using Hydra, starting and finishing a render), a random ID for each time the app is opened, app version, computer details and the same random installation ID. Never your files, file names, prompts or anything you type.
  • Things you choose to send. Problem reports (your description, computer details and, if you include it, recent log lines) and feature requests, linked to your account if you are signed in.
  • Computer details (sent with the items above, to help fix problems): operating system and version (for example “macOS 15.5” or “Windows 11 24H2”), processor type and model, number of cores, amount of memory, and whether the app is running under emulation. Nothing that names you or identifies the computer.
  • IDs the app keeps on your computer. The app saves random IDs in its own settings on your computer the first time it needs them: one sent with error reports, usage stats and your reports, one used only for the daily active count, and one used only for the render count when you’re not signed in. They don’t contain anything about you. When you’re signed in, the app also reads your computer’s hardware ID, as described under Computer ID above.
  • Update checks. When it starts, the app asks GitHub whether a newer version is available, and downloads it from GitHub if so. GitHub sees your IP address and basic request details, as with any website; we don’t receive them.
  • Emails with us. Messages you send to support and our replies, and the sign-up confirmation and password-reset emails we send you.
  • Mailing list. If you sign up on this website: your email address and when you signed up.
  • Website visits. This website uses Google Analytics to count visits: pages viewed, how you arrived (for example from YouTube or a search), your approximate location (country or city, from your IP address, which Google does not store) and your device and browser type. It uses cookies to tell new visitors from returning ones. It is not linked to your account, and Google’s advertising features are turned off. If you visit from the EU, the rest of the EEA, the UK or Switzerland, Google Analytics only runs (and sets cookies) after you choose Accept in the cookie banner; choose Reject and it never loads. The app itself does not use Google Analytics.

Most of this comes from you or from the app. Some comes from others: Stripe tells us the card details and fraud rating listed above, and we look up the country of an IP address ourselves.

Why we use it

To run your account and token balance, process purchases, generate the AI clips you ask for, prevent fraud and abuse of paid features, fix bugs, understand which features matter (only if you opt in to usage stats), answer your reports, and send launch and product emails if you signed up for them. We do not sell your data or use it for advertising.

If you are in the EU, the rest of the EEA, the UK or Switzerland, the law requires a legal basis for each use. Ours are:

  • Providing what you asked for (performing our contract with you): your account, token balance, purchases and receipts, generating AI clips, and replying to your reports and emails.
  • Our legitimate interests, which we have weighed against your rights:
    • Preventing payment fraud and abuse of paid features — the computer ID, the payment and AI clip records, sign-in history and records of banned accounts, computers and email addresses.
    • Keeping the app working — update checks.
    • Knowing how many people use the app — sign-in history.
    You can object to any of these — see Your choices and rights.
  • Your consent: automatic error reports, the daily active count, the render count, usage stats, Google Analytics on this website and the mailing list. You can withdraw consent at any time; that doesn’t affect what happened before.
  • Legal obligations: keeping receipts for tax and accounting records, and answering lawful requests from authorities.

What you have to give us. You need an email address and password to create an account. To buy tokens or generate AI clips, the app must send your computer ID and we must keep the payment and AI clip records described above; without them we can’t sell tokens. Everything else is optional, and the app works without an account.

Automatic decisions

If a payment is disputed with a bank, or Stripe warns us it may be fraud, our system automatically takes back the tokens from that payment and blocks the account, its computers and its email address from buying again. Stripe’s fraud checks may also block a payment before it goes through. These decisions are made by computer, without a person. If you think one was wrong, email support@musicvideowizard.com: a person will review it, you can explain your side, and we’ll reverse it if it was a mistake.

Who we share it with

Only the services that run the product, each for the purpose listed. Most only handle data on our behalf and under our instructions. Those marked (own terms) also decide how they use it themselves, under their own privacy policies.

  • Supabase — database and sign-in. United States.
  • Stripe (own terms) — payments, and its own fraud prevention (Stripe privacy policy). United States and Ireland.
  • fal.ai, and the AI model provider you pick (MiniMax, Kling or Google) (own terms) — receive your prompt and produce the clip, and keep them under their own terms (fal.ai privacy policy). fal.ai’s terms allow it to use data derived from prompts to improve its services and AI models. fal.ai is in the United States. MiniMax and Kling are made by companies based in China, so your prompt may also be processed outside the United States, including in China.
  • Railway — hosts our generation and payments service. United States.
  • Vercel — hosts this website. United States.
  • Google — Google Analytics, for website visit statistics. United States.
  • GitHub (own terms) — hosts app downloads and updates. United States.
  • Zoho — our email: support messages, and the sign-up confirmation and password-reset emails. United States.

We may also share data with our professional advisers (such as lawyers and accountants), with tax authorities, courts or police when the law requires it, and with a buyer if our business is sold — who would have to keep following this policy.

Where your data is stored. We are based in the United States, and our database and most of these services are there. If you are in the EU, the rest of the EEA, the UK or Switzerland, your data is transferred to the United States. Where a provider is certified under the EU–US Data Privacy Framework (or its UK or Swiss extension), the transfer relies on that; otherwise it relies on the European Commission’s standard contractual clauses (with the UK and Swiss additions) in the provider’s data-processing terms. Email us for a copy of these safeguards. If you choose a MiniMax or Kling model, your prompt may also go to China, which the European Commission has not recognised as protecting personal data to EU standards. We send it there only because you asked for a clip from that model, to provide it.

How long we keep it

Account, token and report data is kept while your account exists. Receipts, records of AI clips, the payment and AI clip fraud-prevention records above (including IP addresses), the computer IDs above, and records of accounts, computers and email addresses banned for fraud are kept for up to 7 years — even after you delete your account — for tax records and to prevent fraud. Once your account is deleted these are no longer linked to your email address; banned email addresses are kept only as a scrambled (hashed) form. Error reports and usage stats are deleted automatically after 12 months, and the daily active count and render count after 2 years, or sooner if you ask. Support emails are kept as long as needed to deal with your request and any follow-up. Stripe keeps its own payment records as the law requires. Deleted data may remain in encrypted backups for a limited time before those backups expire.

Your choices and rights

  • Delete your account in the app: click your account icon → Delete Account…. This removes your account, token balance, sign-in history, the render count linked to your account, your reports and requests, and the usage stats and error reports sent from that computer. Receipts and fraud-prevention records are kept as described above, without your email address. Unused tokens are not refunded.
  • Turn error reports, usage stats, the daily active count or the render count on or off in ⚙ Settings → Privacy.
  • Anything else, or a question about your data: email support@musicvideowizard.com from the email address on your account if you have one, so we can confirm it’s you.

If you are in the EU, the rest of the EEA, the UK or Switzerland, you have the right to:

  • Access the data we hold about you and get a copy.
  • Correct data that is wrong.
  • Delete your data, except what we must keep as described above.
  • Restrict our use of your data while a complaint about it is being sorted out.
  • Take your data with you: get the data you gave us in a common machine-readable format, or have it sent to another service.
  • Withdraw consent at any time, for anything we do with your consent.
  • Ask a person to review an automatic decision (see Automatic decisions).

Your right to object. You can object at any time to anything we do on the basis of our legitimate interests. We will stop unless we have compelling reasons that outweigh your rights — for example, we keep fraud-prevention records for payments you made.

We reply within one month. If a request is complex, we may take up to two more months, and we’ll tell you why within the first month. Exercising these rights is free.

You can also complain to a data protection authority — in the EU and EEA, the one where you live or work (list of authorities); in the UK, the ICO; in Switzerland, the FDPIC. We’d appreciate the chance to sort it out first. If you live elsewhere, for example California, you may have similar rights under your local law.

Security

Data travels between the app, this website and our services over encrypted connections. Passwords and computer IDs are stored only in scrambled (hashed) form, and our admin tools are password-protected. No system is perfectly secure: if a breach puts your data at risk, we will tell you and the authorities when the law requires it.

Children

Music Video Wizard is not intended for children under 13, and we do not knowingly collect their data. In some EU countries you must be up to 16 to agree yourself to the optional uses that need consent (usage stats and the mailing list). Below that age, only turn them on with a parent’s permission.

Changes

If we change this policy, we will update the date above. We will announce significant changes in the app or by email before they take effect.

Contact

Data-based Innovations LLC · 117 S Lexington Street, Ste 100, Harrisonville, MO 64701, USA · support@musicvideowizard.com