Privacy Policy

GenMV ("we", "us", "our") generates AI music videos and, optionally, publishes them to your YouTube channel on your behalf. This policy explains what we collect, how we use it, and the choices you have.

• Account information — your email address and a securely hashed password used to sign in.
• Content you create — the prompts, lyrics, and settings you provide, and the audio and video we generate from them.
• Music you upload — if you bring your own song, the audio file and any lyrics you type with it, plus the working files we derive from them: a separated vocal track and the word timings used to sync the performer. We keep these for as long as the song is in your account, and deleting the song deletes them.
• Videos you upload as a style reference — if you upload a music video so we can describe its look, we make a reduced, silent copy of up to its first ten minutes and upload that copy to a third-party AI provider, which processes it under its own terms, to write a text description of the video's visual style. We describe the style, never the people in it. GenMV deletes your upload and its reduced copy from our systems once the read ends, and deletes the provider's copy at the same time; if that deletion fails, the provider's own storage removes it after one day. We keep the file name and the description for about a day, so a retry or a dropped connection never charges you twice.
• YouTube authorization — if you connect YouTube, an OAuth refresh token (see "YouTube integration" below).
• TikTok authorization — if you connect TikTok, an OAuth refresh token plus your TikTok open ID, display name and avatar (see "TikTok integration" below).
• Operational data — basic logs needed to run and secure the service.
• Your consent choices — when you allow your face, voice or an uploaded file to reach a provider, we keep a record with your account: which one you allowed, the consent version, the date and time, and your account id, so we only send your face, voice or upload to a provider after you agree.

We use your information solely to operate the service: to authenticate you, generate and store your videos, and — only when you ask us to — upload a video to your YouTube channel or send one to your TikTok inbox as a draft. We do not sell your personal information.

GenMV lets you send a finished video to your own TikTok inbox as a draft. This feature uses TikTok's Content Posting API and Login Kit. We never post to TikTok for you: the draft arrives as a notification in your TikTok inbox, and you finish the editing and posting inside the TikTok app.

By connecting your TikTok account you agree to TikTok's Terms of Service and acknowledge TikTok's Privacy Policy.

What we access: when you click "Connect TikTok," TikTok asks your permission for two things — user.info.basic (your TikTok open ID, display name and avatar, so we can show you which account is connected) and video.upload (sending a video to your own TikTok inbox as a draft, only when you click). We do not ask for permission to post publicly on your behalf, to read your videos or followers, or to see your TikTok password.

What we store: an OAuth refresh token, encrypted at rest, together with your TikTok open ID, display name and avatar. The token is used only to send the videos you choose to send. We never sell or share it.

How to disconnect:

• In GenMV: Settings → TikTok → Disconnect deletes your stored token immediately and asks TikTok to revoke our access.
• At TikTok: you can also remove GenMV from your authorized apps in your TikTok account settings at any time.

We keep the token only while your account is connected; disconnecting deletes it. While TikTok is reviewing GenMV, connecting may not be available for every TikTok account yet — if TikTok declines, we tell you in the app and store nothing.

GenMV lets you publish your generated videos directly to your own YouTube channel. This feature uses YouTube API Services.

By connecting your YouTube account you agree to the YouTube Terms of Service. Your data is also handled in accordance with the Google Privacy Policy.

What we access: when you click "Connect YouTube," Google asks your permission to upload videos to your channel (the youtube.upload scope only). We do not read, list, modify, or delete any existing videos or channel data, and we never see your Google password.

What we store: a single OAuth refresh token, encrypted at rest, used solely to upload the videos you choose to publish. We never sell or share it.

Limited Use: GenMV's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use the youtube.upload access only to upload videos you explicitly choose to publish. We do not use this data for advertising, do not sell or transfer it to third parties, and do not allow humans to read it — except as needed for security, to comply with applicable law, or with your explicit consent.

How to revoke access:

• In GenMV: Settings → YouTube → Disconnect (deletes your stored token immediately).
• At Google: revoke anytime at Google security settings.

We keep the token only while your account is connected; disconnecting deletes it.

Account data is stored in a managed database; generated media is stored in private object storage and served via short-lived signed links. YouTube and TikTok refresh tokens are encrypted at rest. We restrict access to this data to operating the service.

We advertise GenMV on TikTok, and we measure whether those ads work. To do that we use the TikTok Pixel on this website and TikTok's Events API from our server. Both report to the same TikTok advertising account.

What the website reports: the pages you view on genmv.io, and a small number of named actions — viewing the pricing page, choosing a plan or credit pack, and starting checkout — together with the plan name and price involved. We do not report the prompts, lyrics, songs or videos you create.

What our server reports: that an account signed up, and that a payment completed, with the amount and currency.

Identifiers and hashing: to match these events to a TikTok account, we and TikTok's pixel may share your email address and a GenMV user id. These arehashed with SHA-256 before they are sent — TikTok receives the hash, not the plain value. TikTok calls this feature Advanced Matching.

Cookies: the TikTok Pixel sets first-party cookies on genmv.io to recognise a returning browser so that a visit and a later purchase can be counted as one person rather than two. These are advertising cookies; they are not required for the site to function.

In the app: in the iOS app, TikTok measurement runs only if you allow tracking in Apple's prompt — decline it and nothing is measured. Tolt, our affiliate-referral tool, runs on the web only; the app build strips both it and the TikTok pixel.

Your choices: blocking third-party scripts or advertising cookies in your browser, or using a tracker blocker, stops the website half entirely — checkout and every other feature continue to work normally. You can also limit ad personalisation in your TikTok privacy settings. TikTok's handling of this data is governed by its own Privacy Policy.

If you are in a region whose law treats this sharing as a "sale" or as "sharing for cross-context behavioural advertising," you may opt out by emailing us at the address in the Contact section below, and we will exclude your account.

Each provider below receives the data listed, for the reason given.

• BytePlus — your generation prompts, face and character photos, start-frame images, and reference audio or video, to generate video and images; for a real face, an enrolled identity asset and a liveness capture on BytePlus's own page.
• Kling — your image prompt and one reference image, to generate a character or start-frame image.
• Google Gemini (Google LLC) — your prompts, lyrics and character photos, and a song's audio, to write lyrics, plan shots, generate character images and transcribe sung words.
• KIE — your song brief, style, title and (for voice cloning) a voice sample and the verification recording, to generate songs and mint a voice.
• Suno — the same song text and voice recordings (the voice sample and the verification recording), if KIE passes it on, to generate the song.
• Lyria — your song's theme and lyrics, to generate the song.
• ElevenLabs (Eleven Labs Inc.) — the song's vocal track and lyric text, to time each word for lip-sync.
• Cloudflare R2 (Cloudflare, Inc.) — your stored media — videos, frames, song audio, voice samples and images — for storage and secure delivery.
• Google Sign-In — your email, name, picture and account id, to sign you in.
• Sign in with Apple (Apple Inc.) — your Apple account id and email (or Apple's private relay address), to sign you in.
• Stripe — your email, account id and the plan or pack you buy, to take web payments.
• RevenueCat (RevenueCat, Inc.) — your app user id and purchase events, to manage in-app purchases.
• Apple App Store — your App Store purchase and receipt data, to take in-app payments.
• Resend (Plus Five Five, Inc.) — your email address and the links or alerts we send, to deliver verification, password-reset and report emails.
• YouTube — the finished video, title, description, tags and privacy setting, to publish to your channel.
• TikTok — the finished video and title, to send it to your TikTok inbox as a draft using the Content Posting API.
• TikTok (pixel and Events API) — your hashed email and hashed account id, and the event (sign-up, starting a video, purchase); on the web the pixel also sees your IP and browser details. To measure which ads brought you.
• Tolt (Tolt, Inc.) — browser referral identifiers, to credit affiliate referrals (web only; the app strips it).
• Google Fonts — your IP and user agent when the web build loads a font, to deliver the typeface.

Our consent prompts don't name companies. For your face that means BytePlus, Google Gemini and Kling; for your voice, KIE (and Suno, if KIE passes it on); for an uploaded video, BytePlus; and for an uploaded song, Google Gemini, ElevenLabs and BytePlus.

We retain your account and content while your account is active. You can delete your videos in the app and disconnect YouTube or TikTok at any time, which removes the stored token.

To delete your account and everything in it, open Settings, go to Delete account, click Delete my account, then confirm with Yes, delete everything. This deletes your account, your videos (stored video files are cleared by our automatic storage cleanup), your characters and enrolled faces, your voice samples and personas, your uploaded songs (stored song files are cleared by our automatic storage cleanup) and style-reference files, your consent records, and your connected YouTube, TikTok and Apple access. We ask the provider to delete the faces you enrolled; that request is best-effort, and we log any failure. To withdraw any consent you gave, open Settings → Consents and choose Withdraw; account deletion removes your consent records, and deleting a character you enrolled also asks the provider to delete that face. A voice you cloned at KIE can't be deleted there, because KIE offers no way to. We keep a record of your payments for accounting with your identity removed, and transactional emails already sent. Questions about deletion? Email support@genmv.io.

We may update this policy; material changes will be reflected by the "Last updated" date above.

Questions about this policy, your data, or deleting your account? Email support@genmv.io. We review every report within 24 hours.