Privacy Policy (EU / International)

**Last updated:** 12 September 2026

**Controller:** Bastet Elektronik Hizmetler ve Ticaret Limited Sirketi **Contact:** [email protected]

Summary

Spoolvid processes account data, video prompts, optional photo uploads, and payment references to provide AI-generated **Standard Video** and, when you choose it, **Plus Video**. Processing may involve transfers to Singapore, the US, and other countries (Google, ElevenLabs, Kling AI, etc.).

Billing model

Spoolvid is primarily sold as **time-limited Main packages** (e.g. 30-day, 90-day, 180-day, 365-day access) with a **one-time charge** and **no automatic renewal**. These add **Standard Credits**. Optional **Standard extra-credit packs** and **Plus extra-credit packs** may be purchased while a Main package is active. Standard Credits and Plus Credits are separate balances and are not converted into each other. Recurring subscriptions may be offered in some markets; checkout terms apply to your purchase.

Data we process

Account email, Firebase UID, sign-in method (Google, Microsoft OAuth, and/or email-password — passwords are stored **encrypted** in Firebase Authentication, not as plain text on Spoolvid servers), usage logs, prompts, style settings, uploaded images (when you use “your photos”), social-copy and trend-research inputs (plan-dependent), billing metadata via **iyzico** (TRY) or the **authorized international payment provider** shown at checkout (USD). For fraud prevention in the referral program we may store **IP addresses** and **payment card fingerprints** (opaque hashes from the payment provider — not full card numbers). Billing, cancellation and refunds: /legal/refund-en.

AI transparency

Outputs are AI-generated (or based on your uploads), including Plus Video motion clips. See AI Services. For EU users, Article 50 EU AI Act transparency obligations may apply from August 2026.

Your rights

Access, rectification, erasure, restriction, objection — contact [email protected]. EU users may lodge complaints with their local supervisory authority.

Retention

Data kept for service operation and legal obligations; deletion requests handled within reasonable time.

Security

Data is transmitted over TLS/SSL. Access controls and security logging are applied. No online system is 100% secure; we take reasonable technical and organizational measures.

Full Turkish disclosure (KVKK): /legal/kvkk